Privacy Policy

1. What we collect

Anonymous (Tier 0) alerts: an SOS category, coarse location, and timestamp. No name, account, or device identifier is required to send one.

Verified (Tier 1) users: a cryptographic signature produced by your device's secure hardware after an on-device liveness check. The camera image itself never leaves your device.

Responders (Tier 2): professional identity and organization affiliation, provided by your institution when your access is authorized.

Optional profile data you choose to add: medical ID, emergency contacts, and reunification check-ins.

2. How data moves

Mysafehub is local-first. Alerts travel device-to-device over Bluetooth Low Energy and Wi-Fi Direct and may be temporarily held in encrypted store-and-forward queues on other users' phones until they reach a responder.

Because delivery is decentralized, other participating devices handle encrypted payloads in transit. Payloads are capped at 250 bytes and contain only the fields needed for triage — never free-form media or message histories.

3. How we use data

To route emergency alerts to responders and coordinate triage.

To reunify separated families through check-in and search features you explicitly use.

To improve relay reliability and prioritize coverage, using aggregated, de-identified metrics.

We do not sell personal data, and we do not use emergency data for advertising.

4. Sharing

Verified responders and authorized incident commanders see the alerts and check-ins relevant to an active incident.

Partnering organizations (such as a city emergency agency or NGO) can access Tier 2 status and operational logs for their own deployments.

We disclose data to authorities only where legally required, and we publish the categories of any such requests where the law allows.

5. Retention and deletion

Incident payloads are retained for the duration of an incident plus an operational review window, then deleted or de-identified.

You can delete your medical ID, emergency contacts, and check-ins at any time from within the app. Tier 1 verification can be revoked by resetting your device identity; Tier 2 records are managed by your issuing organization.

6. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Contact us through the Contact page to exercise them.

Because Tier 0 alerts are anonymous by design, we may be unable to associate them with you — which is the point.

7. Changes

We will post material changes to this policy on this page with an updated effective date, and where appropriate, notify verified users directly.