Last updated June 2026

Privacy policy

Kaval exists to protect your information, so we hold ourselves to the same standard we hold attackers to. Here's exactly what we collect, why, and what we will never do with it.

01What we collect

Kaval only works with what you choose to connect or forward: the email addresses and phone numbers you add for monitoring, the accounts you link, and the messages or screenshots you send us to check.

We also keep a small amount of operational data - your settings, the alerts we've raised, and basic logs needed to keep the service running and secure.

02How we use it

We use your information for one purpose: keeping you safe.

  • Checking your details against breach and leak sources.
  • Analyzing messages and links you forward for scam signals.
  • Alerting you, and acting on your behalf when you approve it.

03What we never do

We do not sell, rent, or trade your personal data. We do not use your private messages to train advertising profiles. Team admins see risk signals, never the content of anyone's personal accounts.

04Encryption and retention

Your data is encrypted in transit and at rest. We keep only what's needed to protect you and remove data when it's no longer required or when you ask us to delete it.

05Your choices

You can disconnect any account, export your data, or delete your Kaval account at any time. To make a request, email privacy@kaval.app.