What they may do · DPDP §6(4)
What Keka does with your data
Says it does not sell data or advertise, yet discloses third-party cookies that show you targeted ads on other sites. Processes biometric attendance events from employer-deployed scanners, shares with group companies and sub-processors, and keeps usage data outside its deletion cycle.
-
Shares your data with partners
Passed to group companies, advertisers or analytics firms you never chose.
What this costs you. Your number and habits travel to companies you have never heard of and never agreed to. This is the step where the spam calls start.
Show me where they say that
Keka’s own policy says “We may disclose Personal Data to the following categories of recipients, subject to appropriate contractual and security safeguards: (i) Affiliates and Group Companies. Keka's subsidiaries and affiliated companies, for the purposes described in this Policy. (ii) Sub-Processors. Third parties engaged to support delivery of the Services, such as cloud hosting, email and SMS delivery, push notifications, customer support tooling, resume parsing, data enrichment, and payment processing.”
Our summary discloses personal data to group companies and to sub-processors including resume parsing and data enrichment vendors, plus professional advisors, authorities and acquirers.
-
Builds an advertising profile of you
They watch what you view, tap and buy, and use it to decide which ads you see.
What this costs you. Your attention gets priced. What you hesitate over becomes a bid — and a profile built to predict you is a profile built to persuade you.
Show me where they say that
Keka’s own policy says “Where you visit the Site, certain cookies and similar tracking technologies may allow third parties to display advertisements that are more relevant to you on their own websites.”
Our summary cookies and similar tracking technologies on the Site let third parties serve you advertisements targeted to your relevance/interests.
-
Follows you onto other websites and apps
Their tracking carries on after you leave, through pixels and SDKs embedded elsewhere.
What this costs you. You get recognised on sites that have nothing to do with them. Closing the app does not close the file.
Show me where they say that
Keka’s own policy says “Where you visit the Site, certain cookies and similar tracking technologies may allow third parties to display advertisements that are more relevant to you on their own websites.”
Our summary the tracking set on Keka's Site is used by third parties to reach you on their own websites, i.e. after you have left Keka's property.
-
Keeps your records long-term
Held on after you stop using the service.
What this costs you. Years after you delete the app, the record is still sitting there — and every year it sits there is another year it can leak.
Show me where they say that
Keka’s own policy says “Keka collects and retains usage data which includes metadata and statistical information concerning use of the Services that is not subject to the deletion procedures described above, and that may be retained for as long as reasonably required to conduct Keka's business.”
Our summary usage data is expressly carved out of the deletion process and kept for as long as Keka considers reasonably required for its business, with no end date.
-
Processes your face or other biometrics
Face matching, liveness checks or similar.
What this costs you. You can change a leaked password in a minute. You cannot change your face. A biometric breach is permanent in a way nothing else is.
Show me where they say that
Keka’s own policy says “Where a Subscriber deploys biometric attendance hardware (such as fingerprint scanners or facial-recognition terminals), the resulting attendance event — a match confirmation and timestamp — is transmitted to and Processed within the Keka Services to record attendance.”
Our summary processes biometric attendance events (match confirmation plus timestamp) generated by employer-deployed fingerprint or facial-recognition terminals; the policy states raw images and templates are not collected by Keka itself.
What the policy does not mention
These are uses Keka’s policy is silent on. Silence is not a promise — it means the document does not say, and we do not infer either way.
- Trains AI models on your content
Keka is one app. How many are on your phone?
Most people carry twenty to forty. Add yours and see the total in one screen — how many share your data, profile you for ads, or follow you across the web. Then take it back from all of them at once.
Manage my data with Saaph.in →Free to check · no account needed · built in India for the DPDP Act
Questions
What does Keka do with my personal data?
According to Keka's own privacy policy, read on 2026-08-14, it discloses 5 of the six uses we track: shares your data with partners, builds an advertising profile of you, follows you onto other websites and apps, keeps your records long-term, processes your face or other biometrics.
Can I withdraw my consent from Keka?
Section 6(4) of India's Digital Personal Data Protection Act 2023 gives you the right to withdraw consent for processing you agreed to. The Act's substantive provisions commence in stages up to May 2027, so a request made now asks for voluntary compliance and puts the date on record. Processing a company carries out under a legal obligation — such as KYC records the RBI requires — cannot be withdrawn.
Does Keka track me for advertising?
Yes — Keka's published policy discloses this. The exact sentence it is based on is quoted on this page, with the date we read it and a link to the source.
Every use above is one Keka declared in its own published privacy policy, which we
read on 2026-08-14. Quotes are verbatim; the summary beside each one is ours
and is labelled as ours. Nothing here is inferred.
Saaph.in is a DPDP consent and request management platform operated by Ronin Works
Private Limited. It is a communication facilitator, not your legal or authorised
representative. The DPDP Act 2023 commences in stages up to May 2027, so a request
made today asks for voluntary compliance and records the date you asked.
Our privacy policy