Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

• Account Information: Full name, email address, password, and an optional profile photo when you create an account. A child account set up by a parent from the app holds only the name the parent enters and a device-bound account identifier — no email address, phone number or password.
• Family Information: Family name, family invite codes, and relationship type (e.g., parent, guardian, child) you select during setup.
• Payment Information: Subscription purchases are processed through Apple's App Store or Google Play. We do not directly collect or store credit card numbers or payment account details.

1.2 Information Collected Automatically

• Precise Location Data: With your explicit permission, we collect precise GPS location data from child accounts. This is the core functionality of our App.
• Device Information: Battery level, GPS status, device operating system, network connectivity status, and motion sensor data (accelerometer for crash detection, if enabled).
• Usage Data: App interaction data, feature usage patterns, error logs, and performance metrics.
• Push Notification Tokens: Device identifiers for delivering push notifications.

1.3 Information from Third Parties

We do not purchase or acquire personal information from third-party data brokers.

1.4 Website Analytics

• Vercel Web Analytics (cookieless): On safeloop.co we count page views and a few actions, such as clicks on the App Store, Google Play and sign-up buttons and school pilot form submissions. It sets no cookies and uses no cross-site identifiers; a visit is recognized only by an anonymous hash that resets daily.
• Google Analytics: We also use Google Analytics to measure website traffic. It sets cookies in your browser; you can block them in your browser settings or with Google's opt-out browser add-on.
• Website analytics cover the website only. They are not used in the App and never include location data.

2. How We Use Your Information

• Core Service Delivery: Providing real-time location tracking, geofence zone monitoring, arrival/departure alerts, SOS alerts, crash detection, and check-in functionality.
• Safety Features: Detecting potential emergencies through crash detection, monitoring zone schedule compliance, and sending automated safety alerts to guardians.
• Account Management: Creating and managing user accounts, family groups, and subscription plans.
• Communication: Sending push notifications for safety alerts, check-in requests, geofence events, and service-related announcements.
• Service Improvement: Analyzing usage patterns to improve App performance, reliability, and user experience.
• Legal Compliance: Complying with applicable laws, regulations, and legal processes.

3. Location Data — Special Provisions

• Consent: Location tracking requires explicit opt-in permission. The App requests "Always Allow" location permission to enable background monitoring.
• Background Collection: When permission is granted, location data is collected in the background to monitor geofence zones.
• Retention: Location history data is retained for a maximum of 7 days (depending on subscription plan) and then automatically deleted. Trips (the path a member travels while moving, available on paid plans) are retained for 30 days.
• Guardian Access: Only verified guardians within the same family group can view a child's location data.
• Child Awareness: Children using the App are informed that their location is being shared with their guardians.
• Disabling: Location tracking can be disabled at any time by revoking location permissions in device settings.

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share information in the following limited circumstances:

• Within Your Family Group: Location data, alerts, and check-in status are shared between members of the same family group.
• Service Providers: Supabase Inc. (database and authentication), Expo (push notifications), RevenueCat Inc. (subscriptions), Apple Inc. and Google LLC (app distribution, payments, push delivery, and map/place lookups), Resend (transactional email), Vercel Inc. (website hosting and cookieless website analytics), Google LLC (website analytics).
• Legal Requirements: We may disclose information if required by law, court order, or governmental request.
• Business Transfers: In the event of a merger or acquisition, user data may be transferred with prior notice.

5. Data Storage and Security

• Storage: Data is stored on secure servers operated by Supabase Inc. using AWS infrastructure in the United States.
• Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Access Controls: Row-level security policies ensure users can only access data within their authorized family group.
• Authentication: Adult accounts are protected by password-based authentication; child accounts are bound to the phone a parent set up with a one-time pairing code. Both use secure session tokens.

6. Data Retention

• Account Data: Deleted within 30 days of account deletion.
• Location History: Visible for 1–7 days depending on plan; all raw location points are automatically deleted after 7 days.
• Trips: Street-level trip paths are automatically deleted after 30 days.
• Alerts: Retained for 90 days.
• Heartbeat/Device Data: Retained for 7 days. We also store an identifier for the device currently signed in to your account so that only one device receives notifications at a time.

7. Children's Privacy

SafeLoop complies with COPPA and similar regulations:

• Child accounts are created by a parent or guardian from their SafeLoop app, using a one-time code the child's phone scans. Children never sign up on their own and provide no email address or phone number.
• We collect only the minimum information necessary.
• Parents can review, modify, or delete child data at any time.
• Parents can disable any safety feature for their child at any time.
• We do not serve advertisements to any users.
• We do not share children's data with third parties for marketing.

8. Your Rights and Choices

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data and account.
• Portability: Request a portable copy of your data.
• Opt-Out: Disable location tracking or push notifications in device settings.
• Withdraw Consent: Withdraw consent for data processing at any time.

To exercise any of these rights, contact us at info@safeloop.co.

9. California Privacy Rights (CCPA/CPRA)

• Right to know what personal information is collected, used, shared, or sold.
• Right to delete personal information held by us.
• Right to opt-out of the sale of personal information. We do not sell personal information.
• Right to non-discrimination for exercising privacy rights.
• Right to correct inaccurate personal information.
• Right to limit use of sensitive personal information.

10. International Users (GDPR)

• Legal Basis: Explicit consent, contractual necessity, and legitimate interests.
• Data Transfers: Data is transferred to the United States with standard contractual clauses.
• Data Protection Officer: Contact info@safeloop.co for GDPR inquiries.
• You have the right to lodge a complaint with your local data protection authority.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App and updating the "Last Updated" date.

12. Contact Us

If you have questions about this Privacy Policy, contact us at:
Email: info@safeloop.co
Subject Line: Privacy Policy Inquiry