Data Security

Version 2026-10-v1 · Last updated 23 October 2026

Your health and safety data is some of the most personal information there is. This page explains, in plain words, how Ilayra protects it — and what no app can promise.

Our first rule: data we never receive cannot leak

Your periods, pregnancy, symptoms, mood, sleep, children's records and trusted contacts are stored only on your phone. They are not on our servers, so they cannot be lost in a server breach, sold or demanded from us.

On your phone

• Encrypted storage — everything Ilayra stores is encrypted with AES-256-GCM. The key is held by your phone's secure hardware (iPhone Keychain / Android Keystore), never leaves your phone and is not copied to cloud backups.
• A separate space for each person — if family members share a phone, each Ilayra account has its own encrypted space and its own key. One person cannot see another's data.
• App lock — a PIN or your fingerprint or face. After 5 wrong PINs the app locks for longer and longer.
• Duress PIN — if someone forces you to open Ilayra, a second PIN opens an empty app and can silently alert your trusted contacts. Nothing on screen shows it exists.
• Hidden mode — shows a neutral name, keeps health words out of notifications, and hides the app if you shake the phone.
• No screenshots — on Android, Ilayra blocks screenshots and screen recording; on both systems, the app-switcher preview is hidden.
• Deleting — deleting your data or account destroys its encryption key, so it cannot be recovered.

On the way to our servers

• TLS 1.3 only, the latest encryption for internet connections. Older, weaker versions are refused.
• Certificate pinning — the app trusts only the certificate authorities used for our servers, so a fake certificate (for example from spyware) cannot intercept your data.
• A second layer of encryption — every request and reply is also sealed end to end to our server with modern cryptography (X25519, HKDF-SHA256, AES-256-GCM), with a fresh key for every request. Network providers, and even our own network partners, see only scrambled data.

On our servers

• Hosted in India — DigitalOcean data centre in Bangalore.
• No open doors — our servers accept no direct connections from the internet; traffic arrives only through an encrypted Cloudflare tunnel.
• Encrypted account data — your name and email are encrypted; your email is looked up only through a one-way code; passwords are stored only as Argon2id hashes, the method recommended by security experts.
• SOS location is end-to-end encrypted — only your trusted contacts' browsers can read it; we store scrambled data we cannot read.
• Locked-down systems — each part runs in its own sealed container with the fewest permissions possible; the database has no internet access; every database query is limited to one person's data.
• Protection against guessing — limits on attempts, temporary lockouts and one-time codes that expire in 15 minutes.
• Backups — encrypted with a key kept offline, away from the servers.
• Minimal logs — logs never contain health data, messages or passwords. Content-free activity logs are kept for one year, as the law requires.

People and process

• Only a small number of authorised staff can administer the servers, with strong authentication.
• Independent security testing before launch and regularly after.
• Doctors review health content; the AI coach never sees your identity.

If something goes wrong

If a personal data breach could affect you, we will:

• report it to CERT-In within 6 hours, as the CERT-In Directions (2022) require;
• tell you and the Data Protection Board of India without delay, with a detailed report to the Board within 72 hours, as the DPDP Rules, 2025 require;
• explain what happened, what it means for you and what you can do.

Report a security issue

If you find a security problem, please email [email protected]. Do not access other people's data or disrupt the service. We will acknowledge your report within 3 working days, keep you informed, and not take legal action against good-faith research that follows these rules.

What no app can promise

• If your phone is hacked or "jailbroken", or someone knows your PIN, they may see what you can see.
• Text messages (SMS) are not encrypted by mobile networks.
• People you send an SOS link to can forward it while it is active (60 minutes).

Standards we follow

Digital Personal Data Protection Act, 2023 and Rules, 2025; Information Technology Act, 2000 and the Reasonable Security Practices Rules, 2011; CERT-In Directions, 2022; OWASP Mobile and API security guidance; WCAG 2.2 accessibility.