Privacy Policy

SafeChat ("SafeChat", "we", "us", or "our") operates the SafeChat mobile application, web platform, and administration portal (together, the "Service"). This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights available to you. By creating an account or otherwise using the Service, you agree to the collection and use of information described in this policy.

The Service is operated by [Company Legal Name], registered at [Registered Business Address] ("Company").

1. Information We Collect

1.1 Account & Profile Information

When you register, we collect your name, email address, phone number, and a password (stored only as a one-way cryptographic hash — we never store or have access to your plain-text password). Depending on your account type — Individual, Organization, Company, Employee, or Service Provider — we also collect related profile details such as organization name, company details, role, or service offerings.

1.2 Location & Emergency (SOS) Data

When you trigger an SOS alert, we collect your precise GPS coordinates (latitude and longitude) and/or a text description of your location, together with a timestamp and the status of the alert (active, resolved, or cancelled).

1.3 Safety Network Information

If you build a personal safety network, we collect information about the contacts you add (such as name and phone number) so that we can notify them during an emergency on your behalf.

1.4 Messages & Communications

We process the content of messages you exchange with organizations, companies, employees, or service providers through SafeChat's messaging features, including chat history needed to display your conversations to you.

1.5 Community Posts & Reports

We collect content you submit to community boards and incident reports sent to organizations. Reports may be submitted anonymously; in that case we do not associate the report with your account in a way that is visible to the receiving organization, though limited technical metadata (such as a submission timestamp) may be retained for abuse-prevention purposes.

1.6 AI Safety Assistant Data

When you use the AI Safety Assistant, we store your messages and the assistant's responses as part of a chat session linked to your account, so you can review and continue past conversations. To generate a response, the text of your message is sent to our AI inference provider for processing — see "How We Share Your Information" below. You can delete any AI chat session at any time, which permanently removes its messages from our database.

1.7 Device & Technical Data

Like most online services, we automatically collect certain technical information when you use the Service, including IP address, browser or device type, and access timestamps (server logs).

1.8 Authentication Data & Local Storage

We use access and refresh tokens to keep you signed in. Refresh tokens are stored on our servers only as cryptographic hashes. The SafeChat Admin Panel stores your current session's access token in your browser's session storage (cleared when you close your browser tab); we do not use third-party advertising or tracking cookies.

2. How We Use Your Information

• Provide, operate, and maintain core safety features, including SOS alerts and safety-network notifications
• Route and deliver messages between individuals, organizations, companies, employees, and service providers
• Generate responses from the AI Safety Assistant
• Authenticate your account and help protect it against unauthorized access
• Allow organizations (e.g., NGOs, hospitals, police departments, employers) to respond to alerts, messages, bookings, and reports directed to them
• Send transactional emails, such as team or network invitations and account notifications
• Maintain, secure, and improve the reliability of the Service
• Comply with applicable legal obligations

3. How We Share Your Information

We do not sell your personal information. We share information only as described below:

• Your safety network: When you trigger an SOS alert, your location and basic profile information (such as your name and phone number) are shared with the safety-network contacts and/or organizations you have chosen to notify.
• Organizations you interact with: If you message, book, or report to an organization, company, or service provider through SafeChat, the relevant content and your profile information are shared with that organization so it can respond to you.
• Employers: If your account is linked to a Company as an Employee, your company's administrators may have access to messages and information exchanged through company-provided channels.
• Service providers (sub-processors):
  • AI inference provider — processes the text of messages you send to the AI Safety Assistant in order to generate a response. This provider does not receive your name, contact details, account identifiers, or location data as part of that processing.
  • Email delivery provider (Mailgun) — sends transactional emails on our behalf, such as invitations and notifications.
  • Hosting and infrastructure providers — host our servers, databases, and file storage.
• Legal and safety reasons: We may disclose information if required by law or legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of SafeChat, our users, or the public — including to respond to a genuine emergency.
• Business transfers: If SafeChat is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.

4. Data Retention

• We retain your account information for as long as your account remains active.
• SOS event records, including associated location data, are retained for [retention period, e.g., 12 months] after the event is resolved or cancelled, to support safety reviews, audits, and dispute resolution, after which they are deleted or anonymized.
• AI Safety Assistant conversation history is retained until you delete it.
• We may retain information for longer where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

5. Data Security

• Passwords are hashed using bcrypt and are never stored or transmitted in plain text.
• Access to the Service is protected using short-lived JSON Web Tokens (JWTs); refresh tokens are stored only as cryptographic hashes and are rotated each time they are used.
• SOS alerts are protected using HMAC-based integrity verification.
• Traffic between your device and our servers is encrypted in transit (HTTPS/TLS).
• No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

• Access & correction: You can view and update most of your profile information directly within the app.
• Deletion: You may request deletion of your account and associated personal data by contacting us at [contact email]. Some information may be retained as required by law or for legitimate safety and record-keeping purposes (e.g., historical SOS records).
• AI chat history: You can delete individual AI Safety Assistant sessions at any time from within the app.
• SOS cancellation: You can cancel an active SOS alert at any time; its status will update for everyone it was shared with.
• Depending on where you live, you may have additional rights under applicable data protection laws (such as the GDPR or CCPA), including the right to access, correct, delete, or port your data, and to object to or restrict certain processing. To exercise these rights, contact us at [contact email].

7. Children's Privacy

SafeChat is not directed to children under the age of [minimum age, e.g., 16], and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us at [contact email] so that we can take appropriate action.

8. International Data Transfers

SafeChat's infrastructure and service providers — including our AI inference provider — may be located in countries other than your own. By using the Service, you understand that your information may be transferred to, stored, and processed in countries that may have data protection laws different from those of your country of residence.

9. Emergency Disclaimer

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice (such as an in-app notification). Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

[Company Legal Name]
[Registered Business Address]
Email: [contact email]