Privacy Policy

Last updated: February 2026

1. Information We Collect
We collect information you provide directly: name, email address, phone number, and emergency contact details. We also collect location data, device information, and usage data when you use Safella's features.

2. How We Use Your Information
Your information is used to provide safety features (emergency alerts, location sharing, Walk With Me tracking), improve the app, and communicate with you about your account. We never sell your personal data.

3. Location Data
Location data is only shared with your designated emergency contacts when you actively trigger an alert, start a Walk With Me session, or use the Date Escape timer. We do not track your location in the background without your explicit consent.

4. Evidence & Recordings
Audio and video recordings made during an alert are encrypted and stored securely. Only you can access your evidence files. If no internet connection is available, recordings are stored locally on your device and automatically synced when connectivity is restored.

5. Data Storage & Security
All data is encrypted in transit and at rest. We use industry-standard security measures to protect your information. Your data is stored on secure servers within the European Union.

6. Data Sharing
We do not share your personal information with third parties except: (a) with your emergency contacts when you trigger an alert, (b) when required by law, or (c) with service providers who help us operate the app under strict confidentiality agreements.

7. Data Retention
You can delete your account and all associated data at any time from within the app. Upon account deletion, all personal data is permanently removed within 30 days.

8. Your Rights
Under GDPR, you have the right to access, correct, delete, or export your personal data. Contact us at support@safella.dev to exercise these rights.

9. Children's Privacy
Safella is not intended for children under 16. We do not knowingly collect personal information from children under 16.

10. Contact
For privacy-related questions, contact our Data Protection Officer at support@safella.dev.

11. Website analytics and install attribution

Safella stores usage analytics in its own database. We collect page and screen names, button actions, popup and form-field activity without entered text, timing, technical errors, device and permission status, and campaign tags. These help us understand which features work and where people encounter problems. No screen recordings, session replays, screenshots or conversation contents are collected by this analytics system.

Website choices
Before you choose, browser observations use a temporary identifier held only in memory. If you allow analytics, a random identifier in local storage recognises returning visits and enables click heatmaps on public pages. We exclude heatmap coordinates on /track, /app and /login. If you decline, withdraw consent, or enable Global Privacy Control or Do Not Track, browser analytics stops. Your choice is remembered for up to 12 months. Use “Privacy choices” in the footer to change it; withdrawal removes the saved identifier.

Connections and attribution
Our servers process requests independently of browser analytics. Analytics network receipts may include the IP address and browser information for up to 14 days. We derive an approximate country and region; these are not precise location. Download links carry campaign tags. With website analytics allowed, Google Play may also pass the random website identifier to the app to help associate a visit with a new account; this is a reported attribution link, not proof of identity. Supported Apple advertising attribution supplies campaign information. Logging in can link app or website observations to your account.

App controls and retention
In the app, “Share usage data” in Settings controls optional usage telemetry without affecting safety features. Operational records needed to deliver the service remain in their existing tables. Raw usage events are retained for 90 days, network receipts for 14 days, and imported historical analytics for up to 365 days after import. Aggregated store reports and administrative audit records have separate operational retention. Account deletion also removes analytics linked to that account and its verified anonymous identifiers. For analytics deletion requests or questions, contact support@safella.dev.