At SafeGuard Each Other ("SafeGuard Each Other", "we", "us", or "our"), your personal safety and your privacy are indivisible. We believe that an emergency safety application should protect your physical security without exploiting or tracking your digital footprint.
This Privacy Policy describes how we collect, store, encrypt, and handle your information across our mobile application (iOS & Android) and our public website (https://safeguardeachother.com).
Section 1: Our Zero-PII Core Promise
We DO NOT sell, rent, monetize, or broker your personal information or location history to third-party advertisers, data aggregators, or brokers.
We DO NOT track or record your background GPS location when you are safe and the application is in an idle state.
Location tracking is engaged ONLY when you actively trigger an emergency SOS, start a monitored check-in timer, or initiate route sharing.
Evidence media recorded in your private Evidence Vault is protected with hardware biometric security and AES-256 encryption.
Section 2: Information We Collect
Account Information:
When you create an account, we collect your name, email address, phone number, and password (stored using one-way Argon2id cryptographic hashing; we never store plain text passwords).
Emergency Contacts:
You select and designate trusted emergency contacts (name, relationship, phone number, email address). We use this information solely to transmit emergency notifications and live tracking links when you initiate an alert.
Real-Time Location Data:
*Fine & Background Location*: When SOS is armed or route sharing is enabled, the app captures your latitude, longitude, speed, heading, and altitude to broadcast your location to your designated contacts and compute proximity to verified Safe Places.
*Coarse Location*: Used to display privacy-preserving 400-meter approximate incident areas on the Community Safety Map. Exact residential coordinates are never displayed to the community.
Incident Media (Evidence Vault):
Audio recordings, photos, and video captured via the app during active safety sessions remain on your local device with Essential Guardian. Family & Active Protection includes a 5GB encrypted cloud vault, and Elite Shield & VIP Priority includes a 50GB encrypted cloud vault.
Device & Telemetry Data:
Device model, operating system version, push notification tokens (FCM / APNs), battery level percentage (transmitted during active SOS so contacts know if your phone is dying), and network connectivity status.
Section 3: Information We Never Collect
We never collect your complete phone contact address book (we import only the specific contacts you explicitly choose).
We never log unencrypted audio or background microphone audio outside of explicit user recording sessions.
We never inspect your personal photos or files outside of the SafeGuard Each Other evidence sandbox.
We never collect or transmit your biometric templates (Face ID and fingerprint authentication are processed entirely locally by your device OS Secure Enclave / Keystore).
Section 4: How We Use Your Information
We use collected data solely for:
Routing instant SMS, voice, and push notifications to your emergency contacts.
Generating secure, tokenized web tracking portals (https://api.safeguardeachother.com/track/{token}) for your contacts during active emergencies.
Calculating turn-by-turn driving and walking directions to verified 24/7 safe havens.
Managing subscription billing via Stripe or app store in-app purchase systems.
Detecting system crashes and maintaining 99.99% backend server availability.
Section 5: Security & Live Tracking Link Controls
When you trigger SOS or share a route, your contacts receive a tokenized link formatted as: https://api.safeguardeachother.com/track/{random_cryptographic_token}
Each tracking token is high-entropy, unique, and cryptographically unpredictable.
Tokens expire automatically 4 hours after an emergency incident is disarmed, or immediately upon user manual revocation in the app.
Once expired, the tracking portal displays an "Incident Resolved — Tracking Closed" status and past location breadcrumbs are immediately unlinked from public access.
Section 6: Website Cookies & Analytics Policy
Our public marketing website (https://safeguardeachother.com) maintains a privacy-first stance:
We use strictly necessary session cookies required for authentication and account login.
We DO NOT use advertising tracking cookies, Facebook Pixels, or cross-site tracking beacons.
Anonymous aggregate traffic analytics are performed using self-hosted, privacy-friendly telemetry with IP anonymization enabled.
Section 7: Data Retention & Your Deletion Rights
We retain your account details only for as long as your account remains active. Active SOS incident telemetry is retained in encrypted archives for 90 days for user review, after which coordinates are permanently purged.
You have the unconditional right to delete your account and all associated data at any time:
In-App Deletion: Navigate to Settings > Account & Security > Delete Account.
Web Deletion Portal: Access our public self-service data erasure portal at:
https://api.safeguardeachother.com/privacy/delete-request
Email Request: Contact [email protected].
Upon submission of a deletion request, your profile, contacts, historical incident breadcrumbs, and cloud evidence vault files are permanently purged within 30 days in full compliance with GDPR and CCPA standards.
Section 8: Third-Party Infrastructure & Audited Processors
We share data only with audited infrastructure partners strictly necessary to deliver emergency services:
Telephony & SMS: Twilio Inc. (processes emergency SMS and automated voice escalation calls).
Push Notifications: Google Firebase Cloud Messaging (FCM) and Apple Push Notification service (APNs).
Payment Processing: Stripe Inc. (processes subscription transactions; we never store credit card numbers).
Cloud Infrastructure: Amazon Web Services (AWS) / Hostinger Cloud (encrypted database and private evidence storage).
Strict Mobile Information & SMS Privacy Protection
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We do NOT disclose your personal data to law enforcement or governmental bodies except when compelled by a valid court order, search warrant, or subpoena issued by a court of competent jurisdiction.
Section 9: Security Standards & Incident Notification
SafeGuard Each Other employs defense-in-depth security controls:
End-to-end TLS 1.3 encryption for all data in transit.
AES-256-GCM encryption for all sensitive database fields and stored Evidence Vault files.
In the event of a verified security incident affecting user data, we adhere to a mandatory 72-hour regulatory notification protocol and immediate direct notification to affected subscribers.
Section 10: Compliance with State & International Laws
California Privacy Rights (CCPA/CPRA): California residents have the right to know what personal information is collected, request deletion, and opt out of any sale of personal data. As we do not sell personal data, we provide free deletion and access tools to all users equally.
European Economic Area (GDPR): EEA users possess rights of access, rectification, portability, and erasure under GDPR Articles 15-20. The legal basis for processing emergency location data is Vital Interests (GDPR Art. 6(1)(d)) and Contractual Necessity (GDPR Art. 6(1)(b)).
Children's Online Privacy Protection Act (COPPA): Our Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13 without verifiable parental consent.
Section 11: Contact the Data Privacy Officer
For privacy questions, security disclosures, or data rights requests, contact SafeGuard Each Other LLC at [email protected]. Website: safeguardeachother.com/privacy/.