Privacy Policy

1. Introduction

Safora ("we", "our", "us") is a personal safety and emergency alert application developed by Digital Drive. We respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Safora mobile application.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, display name, and password when you create an account via Firebase Authentication.
• Profile Information: Name, blood group, date of birth, and medical information you choose to add to your Medical ID.
• Emergency Contacts: Names and phone numbers of people you designate as emergency contacts.
• Medicine Reminders: Medication names, dosages, and schedule times you configure.

2.2 Information Collected Automatically

• Location Data: GPS coordinates are collected only when you activate SOS, enable speed alerts, geofence monitoring, or weather alerts. Location is used to send your coordinates to emergency contacts and fetch location-relevant safety data.
• Sensor Data: Accelerometer data is processed on-device only for crash/fall detection and snatch detection. This data is never transmitted to any server.
• Device Information: Battery level, connectivity status, and device platform (for notification delivery).
• Crash Reports: Anonymous crash reports via Firebase Crashlytics to improve app stability.
• Analytics: Anonymous usage analytics via Firebase Analytics to understand feature adoption.

2.3 Information We Do NOT Collect

• We do not record audio, video, or phone calls.
• We do not read your SMS messages, emails, or browsing history.
• We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. How We Use Your Information

• Emergency Alerts: To send SMS messages with your GPS location to your emergency contacts during an SOS event.
• Safety Detection: To process accelerometer data on your device for crash, fall, and snatch detection.
• Speed & Geofence Alerts: To monitor your speed and location relative to configured safe zones.
• Weather & Disaster Alerts: To fetch location-based weather data and disaster warnings from public APIs (USGS, Open-Meteo, GDACS).
• Push Notifications: To deliver critical safety alerts via Firebase Cloud Messaging.
• App Improvement: To diagnose crashes and understand anonymous usage patterns.

4. Data Storage & Security

• Cloud Storage: Your account data, emergency contacts, and profile are stored in Google Firebase (Cloud Firestore) with security rules enforcing owner-only access. Only you can read and write your own data.
• Local Storage: Alert history, medicine reminders, and app preferences are stored locally on your device using encrypted Hive databases.
• Sensor Data: Accelerometer readings are processed entirely on-device in real-time and are never stored or transmitted.
• PIN & Biometric Lock: Your app lock PIN is stored as a SHA-256 hash. Biometric authentication uses your device's secure enclave — we never access your biometric data.
• Encryption: All data in transit uses TLS/HTTPS encryption. Firebase services are SOC 2, ISO 27001, and GDPR compliant.

5. Third-Party Services

Safora uses the following third-party services, each governed by their own privacy policies:

• Firebase (Google): Authentication, Firestore, Crashlytics, Analytics, Cloud Messaging — Firebase Privacy Policy
• Google Mobile Ads (AdMob): Non-intrusive advertising with frequency capping. Ads are never shown during active emergencies — Google Privacy Policy
• Open-Meteo: Free weather data API (no personal data shared) — Open-Meteo Terms
• USGS / GDACS: Public earthquake and disaster data APIs (no personal data shared)

6. Permissions

Safora requests the following device permissions, each for a specific safety feature:

You can revoke any permission at any time through your device's Settings. Some features may be unavailable without their required permission.

7. Data Retention

• Account Data: Retained while your account is active. Deleted upon account deletion.
• Alert History: Stored locally on your device. Cleared when you uninstall the app or manually delete it.
• Crash Reports: Retained for 90 days by Firebase Crashlytics, then automatically deleted.
• Analytics: Aggregated and anonymized; never linked to individual users.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data via the Edit Profile screen.
• Delete your account and all associated data from within the app (Settings → Delete Account).
• Withdraw Consent for specific permissions at any time via your device Settings.
• Export your data by contacting us.

9. Children's Privacy

Safora is designed as a family safety app and may be used by children under parental supervision. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child has provided personal information without consent, please contact us to have it removed.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Effective Date". We encourage you to review this page periodically. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• 📧 Email: minhajsadik2@gmail.com
• 🌐 Website: safora.minhajsadik.com
• 👤 Developer: Minhaj Sadik — Digital Drive