Data We Collect
01| Data Type | Examples | Why We Need It |
|---|---|---|
| Account Info | Name, email, password hash | Create and secure your account |
| Health Info | Blood type, medical condition, doctor, hospital | Emergency responder card shown during SOS |
| Location Data | GPS coordinates, geofence zones | Live sharing with contacts, auto habit tracking |
| Emergency Contacts | Names, phone numbers, relationship | Send SMS/push alerts on check-in or emergency |
| Check-In History | Status, timestamp, location | Wellness tracking and missed check-in detection |
| Device Sensors | Accelerometer data (fall detection only) | Detect falls and trigger emergency alerts |
| Payment Info | Subscription status, last 4 digits | Manage Pro/Family plan billing via Stripe |
| Usage Data | App opens, feature usage, crashes | Improve app performance and reliability |
We never collect full payment card numbers. All payment processing is handled by Stripe, who are PCI-DSS Level 1 certified. We only store your subscription status and the last 4 digits of your card for display purposes.
How We Use Your Data
02- Safety features: Send emergency alerts, SMS notifications, and location links to your designated contacts
- Missed check-in detection: Our servers check if you've missed your scheduled check-in and alert contacts after a 30-minute grace period
- Geofencing: Notify contacts when you arrive or leave designated safe zones (home, work, school)
- Fall detection: Analyze accelerometer readings only to detect sudden impacts — raw sensor data is never stored
- Service improvement: Anonymized, aggregated usage data helps us fix bugs and improve features
- Communication: Send you important service updates, security alerts, and (with your consent) product news
We do not use your data for advertising, sell it to data brokers, or use it to train AI models. Your health and location data is yours.
Location Data
04Location data is among the most sensitive data we handle. Here's exactly how it works:
- Foreground only by default: We only access location when the app is open, unless you enable Live GPS sharing
- Background location (opt-in): Only collected when you explicitly enable "Live GPS" — shown by a blue indicator in your status bar
- Location history: Automatically deleted after 30 days
- Shareable links: Location sharing links expire after 24 hours and require a secure token to access
- You can disable at any time: Toggle off in the app or revoke in your phone's Settings → Privacy → Location
Health & Medical Data
05Your medical information (blood type, conditions, doctor, hospital) is stored securely and used only to populate your emergency responder card — visible to emergency contacts during an SOS event.
All health data is encrypted at rest using AES-256 encryption. We comply with applicable health data protection regulations. Firebase's HIPAA-compliant infrastructure is used with a signed Business Associate Agreement.
You can delete all health data from your profile at any time, and it will be permanently removed from our systems within 30 days.
Data Retention
06| Data Type | Retention Period |
|---|---|
| Account & profile data | Until account deletion + 30 days |
| Check-in history | 12 months, then auto-deleted |
| Location history | 30 days, then auto-deleted |
| Sensor / fall detection data | Never stored — processed in real-time only |
| Payment records | 7 years (legal requirement) |
| Support communications | 3 years |
Your Rights
07Depending on your location, you have the following rights regarding your personal data:
- Access: Request a copy of all data we hold about you
- Correction: Update inaccurate or incomplete data
- Deletion: Request permanent deletion of your account and all associated data
- Portability: Receive your data in a machine-readable format
- Objection: Opt out of certain types of data processing
- Withdraw consent: Revoke permissions (location, notifications) at any time via app settings or your phone's Settings app
To exercise any of these rights, email privacy@safibee.com — we will respond within 30 days.
Security
08We implement industry-standard security measures to protect your data:
- All data transmitted over HTTPS/TLS 1.3
- Data at rest encrypted with AES-256
- Firebase Authentication for secure login (passwords are never stored in plain text)
- Biometric authentication supported (Face ID / fingerprint)
- Firestore security rules restrict data access to the account owner only
- Regular security audits and penetration testing
- Staff access to user data is logged and strictly limited
🔐 If you discover a security vulnerability, please report it responsibly to security@safibee.com before public disclosure.
Children's Privacy
09Safibee is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@safibee.com.
For users aged 13–17, a parent or guardian must review and agree to this Privacy Policy on their behalf.
Contact Us
10If you have questions, concerns, or requests related to your privacy, reach out to us:
Safibee Privacy Team
We're committed to responding to all privacy requests within 30 days.
privacy@safibee.comSafibee Inc. · support@safibee.com · safibee.com