SpyHuman Privacy Policy

This Privacy Policy explains how Ekayan Consultancy Private Limited, the company behind SpyHuman, collects, uses, stores, shares, and protects personal information when you visit our website, create an account, buy a subscription, or use our monitoring software. Because our product works in a sensitive category, we have written this policy to be clear about what happens to data at every stage, rather than hiding it behind vague language. Please read it together with our Lawful Use Policy, Data Protection notice, and Cookie Policy. If anything here is unclear, contact us and we will explain it in plain terms.

1. Who we are

SpyHuman has been serving families since 2016 and is operated by Ekayan Consultancy Private Limited (CIN U79110GJ2025PTC168914), with its registered office at Eva-I Complex, 201, Aatabhai Chowk, Hill Drive, Bhavnagar, Gujarat 364001, India. For any privacy question, our data protection contact is Nirav Solanki, Grievance Officer, [email protected]. We are the data controller under the European Union General Data Protection Regulation (GDPR) and the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act). This means we decide why and how your personal data is processed, and we are accountable for protecting it.

2. What information we collect

We collect only what we need to provide, secure, and support the service. It falls into clear categories, described below so you know exactly what is gathered and when.

2.1 Information you give us directly

• Account data: your name and email address when you register, and a password stored in a hashed form.
• Billing data: the information needed to take payment when you subscribe. Card details are handled by our payment providers, not stored by us in full.
• Support data: the content of messages you send our support team, and any attachments you choose to include.
• Optional profile data: anything extra you choose to add to your account.

2.2 Information from a monitored device

When you use SpyHuman on a device you are lawfully entitled to monitor, the software may process data from that device depending on which features you switch on. This can include location, call and message logs, contacts, browsing activity, and installed app activity. You choose which features are active, and you can turn them off. You are responsible for having the legal right and any required consent to collect this data, as set out in our Lawful Use Policy. We process this data to deliver the features you enabled, not for our own separate purposes.

2.3 Information collected automatically

• Technical data: device type, operating system, browser, IP address, and approximate region.
• Usage data: pages you visit on our website and how you interact with them.
• Cookies and similar technologies: described fully in our Cookie Policy.

We do not knowingly collect more than we need, and we do not buy personal data about you from data brokers.

3. How we use your information

We use personal information for defined purposes:

• To create and manage your account and provide the features you enable.
• To process payments, renewals, and refunds.
• To give customer support and respond to your questions.
• To keep the service secure, detect and prevent fraud or misuse, and enforce our terms.
• To meet legal, tax, and regulatory obligations.
• To improve and develop our product, usually using aggregated or de-identified data.
• To send service messages, and, only with your consent where required, occasional product updates.

We do not sell your personal information, and we do not use the content of a monitored device for advertising.

4. Our lawful basis for processing

Where the law requires a lawful basis, we rely on one of the following: your consent; the performance of our contract with you; compliance with a legal obligation; or a legitimate interest that does not override your rights, such as keeping the service secure. For sensitive data such as precise location, we rely on consent unless the law provides another basis. You can withdraw consent at any time, which will not affect processing already carried out lawfully. Our Data Protection notice maps these bases to each purpose in more detail.

5. Your marketing choices

We keep marketing to a minimum. Where we send product news, you can opt out at any time using the unsubscribe link in the message or by contacting us. Opting out of marketing does not stop essential service messages, such as billing notices or security alerts, which we need to send to run your account.

6. When we share information

We share personal information only in limited, defined cases:

• Service providers: trusted vendors who help us run the service, such as hosting, payment processing, and email delivery, under contracts that require them to protect your data and use it only for us.
• Legal reasons: where the law requires it, or to respond to a valid legal request, or to protect our rights or the safety of people.
• Business transfers: in a merger, acquisition, or sale, in which case this policy continues to apply to your data.

We do not share your data with advertisers to sell it, and we do not trade in personal information.

7. Storage and security

We store data on secured servers and apply technical and organisational measures designed to protect it, including encryption in transit, access controls that limit who can see data, logging, and monitoring for unusual activity. We train our staff on data handling and review our safeguards over time. No method of storage or transmission is perfectly secure, so we cannot promise absolute security, but we work hard to protect your information and to respond quickly and openly if a problem occurs.

8. How long we keep data

We keep personal information only as long as needed for the purposes described here, or as the law requires, and then delete or anonymise it. Account data is kept while your account is active. Billing records may be kept longer to meet tax and accounting duties.

Data collected from a monitored device is held on a rolling window that depends on your plan: 30 days on the free plan and 90 days on Premium. Entries older than that window are removed automatically, and data is kept only while your account and the relevant feature are active, subject to your settings. You can ask us to delete your account and data at any time through our Data Deletion page, or by writing to [email protected]. We complete verified deletion requests within 30 days.

9. Your rights and choices

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, withdraw consent, and receive your data in a portable form. Indian users have rights under the DPDP Act, including grievance redressal and the ability to nominate another person to act for them. To exercise any right, contact Nirav Solanki, Grievance Officer, at [email protected], and we will respond within the timeline the law sets. We may need to verify your identity first, to protect your account. Full details and complaint routes are on our Data Protection notice.

10. Children

Our website and account service are intended for adults. SpyHuman is designed to let a parent or legal guardian look after a minor child within the law, so a parent, not the child, holds the account. We do not knowingly collect data directly from children for our own marketing, and we do not target advertising at children.

11. International transfers

We may process and store data in countries other than your own. Where we transfer data across borders, we apply the safeguards required by applicable law, such as appropriate contractual protections, so your data continues to be protected wherever it is handled.

12. Changes to this policy

We may update this policy to reflect changes in the law, our practices, or our product. When we do, we will revise the “Last updated” date above, and we will highlight significant changes where appropriate. Continued use of the service after an update means you accept the revised policy.

13. Contact us

Ekayan Consultancy Private Limited, Eva-I Complex, 201, Aatabhai Chowk, Hill Drive, Bhavnagar, Gujarat 364001, India. Privacy and data protection contact: Nirav Solanki, Grievance Officer, [email protected]. General support: [email protected]. Billing and refund questions: [email protected]. We aim to answer privacy questions clearly and promptly.

Support runs 1:30 PM to 10:30 PM IST, Monday to Saturday, by email and live chat only. SpyHuman is supported online only: our registered office serves Ekayan Consultancy's separate consultancy business and does not handle SpyHuman queries, so office visits and telephone support for SpyHuman matters are not available. Only [email protected] and [email protected] are official support routes.