Privacy Policy

1. Introduction

Welcome to SafePing. This Privacy Policy explains how ClecoTech International Private Limited ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use the SafePing mobile application ("App") and related services ("Services").

SafePing is an emergency check-in application that enables users to send urgent notifications ("pings") to trusted contacts. By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

This Privacy Policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Apple App Store Guidelines, and Google Play Store Developer Policy.

2. Data Controller Information

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide Directly

• Account Information: Phone number (required for authentication via OTP), display name, and profile photo (optional).
• Contact Information: Names and phone numbers of trusted contacts you add to your emergency circle (maximum 5 contacts).
• Support Communications: Information you provide when contacting our support team.

3.2 Information Collected Automatically

• Device Information: Device model, operating system version, unique device identifiers, and push notification tokens (FCM/APNs).
• Usage Data: App interaction data, ping history, response times, and feature usage statistics.
• Log Data: IP address, access times, app crashes, and system activity logs.

3.3 Contacts Access

We request access to your device contacts solely to help you easily add trusted contacts to your emergency circle. Contact data is processed locally on your device and is not uploaded to our servers. Only the phone numbers of contacts you explicitly select are stored.

4. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To authenticate your account and deliver emergency pings to your trusted contacts.
• Push Notifications: To send high-priority notifications that can bypass Do Not Disturb and silent modes for emergency alerts.
• Service Improvement: To analyze usage patterns, fix bugs, and improve app functionality.
• Safety & Security: To detect and prevent fraud, abuse, and violations of our Terms of Service.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Customer Support: To respond to your inquiries and resolve issues.

5. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal grounds:

• Consent: You provide explicit consent when adding contacts to your emergency circle.
• Contract Performance: Processing is necessary to provide the Services you requested.
• Legitimate Interests: For security, fraud prevention, and service improvement, where these interests are not overridden by your rights.
• Legal Obligation: When required to comply with applicable laws.
• Vital Interests: In emergency situations where processing may be necessary to protect someone's life.

6. How We Share Your Information

6.1 With Your Trusted Contacts

When you send an emergency ping or fail to respond to a check-in, your designated trusted contacts receive your ping and its status. This is the core function of SafePing.

6.2 Third-Party Service Providers

We use the following third-party services to operate SafePing:

• Google Firebase: Authentication (phone OTP), Cloud Firestore (data storage), Cloud Functions (backend logic), and Firebase Cloud Messaging (push notifications).
• Apple Push Notification Service (APNs): For delivering notifications on iOS devices.

These providers process data on our behalf under strict contractual obligations and privacy safeguards.

6.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect the rights, property, or safety of SafePing, our users, or others.

6.4 We Do NOT

• Sell your personal data to third parties
• Share your personal data with advertisers
• Use your data for targeted advertising
• Share your contacts with third parties for marketing

7. Data Retention

We retain your data only for as long as necessary:

• Account Data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Ping History: Retained for 30 days, then automatically deleted.
• Push Notification Tokens: Updated when changed; old tokens are discarded.
• Support Communications: Retained for up to 2 years for quality assurance.

8. Your Privacy Rights

8.1 Rights Under GDPR (EU/EEA Users)

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: Limit how we use your data.
• Right to Data Portability: Receive your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing.

8.2 Rights Under CCPA (California Residents)

• Right to Know: What personal information we collect and how it's used.
• Right to Delete: Request deletion of your personal information.
• Right to Opt-Out: We do not sell personal information, so this right does not apply.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

8.3 How to Exercise Your Rights

You can exercise your rights by:

• Using the "Delete Account" feature in the app settings
• Visiting our Data Deletion Request page
• Emailing us at privacy@safeping.io

We will respond to your request within 30 days.

9. Children's Privacy

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@safeping.io. We will promptly delete such information from our systems.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication via phone OTP verification
• Firebase Security Rules restricting data access
• Regular security assessments and updates
• Access controls limiting employee access to personal data

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States (where Google/Firebase servers are located) and India (where our company is based).

For transfers from the EU/EEA, we rely on Standard Contractual Clauses approved by the European Commission and ensure that our service providers maintain adequate data protection standards.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an in-app notification for material changes
• Requesting renewed consent where required by law

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: