Legal
Privacy Policy
This Privacy Policy explains how SafeScore LLC ("SafeScore," "we," "us," or "our") collects, uses, and protects information when you use the SafeScore mobile application (the "App") on iOS or Android. By using the App, you agree to the practices described herein. If you do not agree, please do not use the App.
1 Information We Collect
A. Account Information (Registered Users)
When you create a SafeScore account you provide:
- Full name — used to personalize your experience and identify you within My Circle.
- Email address — used for authentication, account recovery, and service communications.
- Password — stored as a one-way cryptographic hash; we never see or store your plaintext password.
B. Guest Mode
SafeScore offers a Guest Mode that requires no account. In Guest Mode we do not collect your name, email, or password. A temporary anonymous session ID is created locally on your device. No guest-mode data is associated with an identity or persisted on our servers beyond the active session.
C. Location Data
The core function of SafeScore is real-time safety scoring based on your geographic location. We collect GPS coordinates including latitude, longitude, altitude, accuracy radius, heading, and timestamp.
- Foreground location — collected while you have the App open and visible.
- Background location — collected while the App is running in the background, subject to your device permissions. Required for continuous safety monitoring, My Circle location sharing, and Drive Mode.
- Speed data — collected during active Drive Mode sessions to calculate driving-safety scores.
D. Device and Technical Information
- Device type, model, OS version, and unique device identifiers.
- App version and build number.
- IP address and approximate network type (Wi-Fi / cellular).
- Push notification token (via Firebase Cloud Messaging).
- Crash reports and performance diagnostics (via Sentry or Firebase Crashlytics).
E. Usage Data
- Features accessed, screens viewed, and session durations.
- Safety score queries and alert interactions.
- Subscription status and in-app purchase history (managed by RevenueCat).
F. Public Safety API Queries
To generate safety scores, SafeScore queries public safety data APIs in real time using your location coordinates as input parameters. These APIs include, among others: NOAA (weather hazards), USGS (seismic activity), FBI NIBRS (crime statistics), NSOPW (sex offender registry — see Section 5), and CDC (public health data). Query results are used exclusively to calculate and display your safety score. We do not store raw API response data beyond the immediate scoring computation.
↑ Back to top2 How We Use Your Information
| Purpose | Data Used |
|---|---|
| Real-time safety scoring | GPS location, public API results |
| Safety alerts and push notifications | GPS location, FCM token |
| My Circle family location sharing | GPS location (consented members only) |
| Drive Mode safety scoring | GPS location, speed data |
| Account creation and authentication | Name, email, hashed password (Supabase) |
| Push notification delivery | FCM device token |
| Subscription management | Purchase history, device ID (RevenueCat) |
| Crash reporting and diagnostics | Device info, error logs (Sentry / Crashlytics) |
| Improving the App | Aggregated, de-identified usage analytics |
| Legal compliance and fraud prevention | Account info, IP address, usage data |
We process your information only for the purposes listed above. We do not use your location data for advertising and we do not sell your personal information to any third party.
↑ Back to top3 Location Data
Foreground Location
Foreground location access is triggered when you open the App and navigate to any screen that displays a safety score, map view, or Drive Mode dashboard. The App requests "While Using the App" permission from your device.
Background Location
Background location access is triggered when:
- You enable My Circle location sharing (so family members can see your real-time position).
- You activate Drive Mode (continuous monitoring for driving safety scoring).
- You enable Safety Alerts that should notify you even when the App is backgrounded.
The App requests "Always Allow" location permission only when one of the above features is active. We display a clear in-app prompt explaining why background access is needed before requesting the permission.
How to Disable Location Access
You may modify or revoke location permissions at any time:
- iOS: Settings → Privacy & Security → Location Services → SafeScore → select "Never" or "While Using the App."
- Android: Settings → Apps → SafeScore → Permissions → Location → select "Deny," "Allow only while using the app," or "Ask every time."
Disabling background location will deactivate My Circle sharing, Drive Mode, and background safety alerts. The App will still function for on-demand foreground scoring.
Location Data Retention
Your location history is retained for 30 days on our servers to support safety trend analysis within the App. After 30 days, location history records are automatically deleted. You may delete your location history at any time from within the App settings (see Section 8).
↑ Back to top4 Data Sharing
We do not sell, rent, or trade your personal information. We do not share your location data with advertisers, data brokers, or any third party for commercial purposes.
A. My Circle
Real-time location is shared with members of your My Circle group only when all of the following conditions are met:
- Both you and the other member have accepted a mutual Circle invitation.
- Both parties have enabled location sharing in their App settings.
- You have granted background location permission on your device.
You can remove a Circle member or disable sharing at any time. Once removed, that member immediately loses access to your location.
B. Third-Party Service Providers
We share data with the following service providers solely to operate the App:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Supabase (US-based servers) | Authentication, database storage | Account info, location history, app data |
| Firebase (Google) — FCM | Push notifications | Device push token |
| Firebase Crashlytics / Sentry | Crash reporting and diagnostics | Device info, error logs |
| RevenueCat | Subscription management | Device ID, purchase history |
| Public Safety APIs (NOAA, USGS, FBI, CDC, NSOPW, etc.) | Real-time safety data | GPS coordinates only (no PII) |
C. Legal Disclosures
We may disclose personal information if required by law, regulation, or valid legal process (e.g., a court order or subpoena), to protect the rights, property, or safety of SafeScore LLC, our users, or the public, or in connection with a merger, acquisition, or sale of assets (in which case we will notify users of any material change in ownership or data practices).
↑ Back to top5 Sex Offender Proximity Data
SafeScore integrates with the National Sex Offender Public Website (NSOPW), operated by the U.S. Department of Justice. In compliance with NSOPW Terms of Service, SafeScore does not store, cache, or retain any sex offender registry data on our servers or devices.
- Sex offender proximity data is retrieved via a live, real-time API proxy call each time you request a safety score. Results are displayed on-screen and immediately discarded — they are never written to a database.
- Your GPS coordinates are transmitted to the NSOPW API for the sole purpose of determining proximity. SafeScore does not receive or store names, addresses, photos, or any identifying information about registered individuals.
- This feature is available only to users who are 17 years of age or older, consistent with the App's age rating.
- SafeScore assumes no liability for the accuracy, completeness, or currency of sex offender registry data, which is maintained exclusively by state and territorial authorities.
6 Push Notifications
SafeScore uses Firebase Cloud Messaging (FCM) to send push notifications to your device, including safety alerts, severe weather warnings, and My Circle location updates.
Types of Notifications
- Safety Alerts — triggered by elevated threat levels (weather, seismic, crime) at your location.
- My Circle Updates — optional notifications when a Circle member arrives at or departs from a location.
- Drive Mode Alerts — warnings during active driving sessions.
- Account Notifications — security-related communications (e.g., new device sign-in).
How to Disable Push Notifications
- In-App: Settings → Notifications → toggle individual notification types.
- iOS: Settings → Notifications → SafeScore → Allow Notifications (off).
- Android: Settings → Apps → SafeScore → Notifications → disable.
Disabling notifications will not affect your ability to use the App or view safety scores; however, you will no longer receive real-time safety alerts.
↑ Back to top7 Your Privacy Rights
A. GDPR Rights (EEA / UK Users)
If you are located in the EEA or UK, you have the following rights under GDPR or UK GDPR:
| Right | Description |
|---|---|
| Access | Request a copy of the personal data we hold about you. |
| Rectification | Request correction of inaccurate or incomplete data. |
| Erasure ("Right to be Forgotten") | Request deletion of your account and all associated data. |
| Portability | Receive your data in a structured, machine-readable format (JSON or CSV). |
| Restriction | Request that we limit processing of your data in certain circumstances. |
| Objection | Object to processing based on legitimate interests. |
| Withdraw Consent | Revoke consent for location sharing or push notifications at any time. |
To exercise any GDPR right, contact us at safescore@getsafescore.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
B. CCPA Rights (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:
- Know: The right to know what personal information we collect, use, disclose, or sell.
- Delete: The right to request deletion of your personal information.
- Opt-Out of Sale: We do not sell personal information. No opt-out is needed.
- Non-Discrimination: We will not discriminate against you for exercising any CCPA right.
To submit a CCPA request, email safescore@getsafescore.com with subject line "CCPA Privacy Request." We will verify your identity before processing.
C. All Users — In-App Rights
- Delete Account: Account → Settings → Delete Account. All data is permanently erased within 30 days.
- Download Your Data: Account → Settings → Export Data (JSON format).
- Revoke Location Sharing: Settings → My Circle → disable sharing per member.
- Manage Notifications: Settings → Notifications.
8 Data Retention
| Data Type | Retention Period |
|---|---|
| Account information (name, email) | Retained until account deletion; deleted within 30 days of request. |
| Hashed passwords | Retained until account deletion. |
| Location history | 30 days rolling window; auto-purged after 30 days. |
| Drive Mode speed data | 30 days rolling window; auto-purged after 30 days. |
| My Circle sharing logs | 7 days; auto-purged. |
| Push notification tokens | Refreshed per session; stale tokens purged within 90 days. |
| Crash / diagnostic logs | 90 days (Sentry / Crashlytics retention policy). |
| Subscription records | Retained for 7 years for tax and legal compliance. |
| Sex offender proximity data | Never stored — live proxy only (see Section 5). |
| Guest Mode session data | Session only — not persisted to our servers. |
When you delete your account, we permanently erase all personal data within 30 calendar days, except where retention is required by law (e.g., financial records). Aggregated, de-identified analytics data is not subject to deletion requests.
↑ Back to top9 Children and Age Requirements
SafeScore is rated 17+ and is not intended for users under the age of 17. The App displays crime data, sex offender proximity information, and other mature safety content that is not appropriate for minors.
- SafeScore does not knowingly collect personal information from anyone under 17 years of age.
- We do not comply with COPPA (Children's Online Privacy Protection Act) data collection provisions because the App is explicitly not directed to children under 13.
- If we become aware that a user is under 17, we will promptly delete their account and associated data.
- Parents or guardians who believe a minor has created an account should contact us at safescore@getsafescore.com immediately.
10 Security
SafeScore implements industry-standard security measures to protect your personal information:
| Security Measure | Details |
|---|---|
| Encryption in Transit | All data transmitted between the App and our servers is encrypted using TLS 1.2 or higher. |
| Encryption at Rest | All data stored in Supabase is encrypted at rest using AES-256. |
| Row-Level Security (RLS) | Supabase RLS policies ensure users can only access their own data. My Circle data is accessible only to consented members. |
| Hashed Passwords | Passwords are hashed using bcrypt via Supabase Auth — plaintext passwords are never stored or transmitted. |
| Authentication Tokens | Session tokens are short-lived JWTs with automatic refresh. Tokens are stored in secure storage on-device. |
| API Security | All server-side API calls to public safety data sources are made server-side — your device never directly exposes API credentials. |
| Crash Reporting | Error logs sent to Sentry / Firebase Crashlytics are stripped of PII before transmission where technically feasible. |
No security system is impenetrable. We cannot guarantee absolute security, but we are committed to promptly investigating and addressing any suspected breach. If a data breach occurs that is likely to result in a risk to your rights, we will notify affected users and relevant authorities in accordance with applicable law.
↑ Back to top11 Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the App, our data practices, or applicable law. When we make material changes, we will:
- Post the updated policy in the App and on our website with a revised Effective Date.
- Send a push notification and/or email to registered users for significant changes.
- Require affirmative acknowledgment before continuing to use affected features.
Your continued use of the App after the effective date constitutes acceptance of the revised policy. We encourage you to review this policy periodically.
↑ Back to top12 Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
| Contact Detail | Information |
|---|---|
| Company | SafeScore LLC |
| Address | Fayetteville, North Carolina, United States |
| safescore@getsafescore.com | |
| Response Time | We aim to respond to all privacy inquiries within 5 business days, and no later than 30 days for formal GDPR/CCPA requests. |
| GDPR Data Controller | SafeScore LLC (Fayetteville, North Carolina, USA) |
