Effective Date: July 22, 2026·Last Updated: July 22, 2026·Version 1.0
💙
Summary: Safety Check collects your location, phone number, and emergency contact details solely to provide its safety monitoring service. We never sell your data, never use it for advertising, and only share it with the emergency contact you designate — and only during an active safety alert.
1 Who We Are
Safety Check ("we," "us," or "our") is a personal safety application operated by SAP FACTORY LLC, incorporated in MD/USA.
For questions about this privacy policy or your personal data, contact us at: [email protected]
2 Data We Collect
We collect only what is strictly necessary to provide the Safety Check service. Here is a complete list of every category of data we collect:
Category
Data collected
Why we need it
Legal basis
Account data
Name, phone number, city, country, postal code
To identify you in emergency alerts sent to your contact
Contract performance
Emergency contact
Contact name and phone number
To call and SMS this person during a safety alert
Contract performance
Location data
GPS latitude and longitude (background access)
Background location justification: Safety Check requires background location access to capture your last known GPS coordinates at the exact moment a safety alert is triggered, even when the app is closed. Without background access, your emergency contact would not receive your location if you are unable to open the app during an emergency. Location is only sampled at check-in events and during active alerts — never continuously.
To include your location in emergency alerts so your contact can find you
To operate the check-in logic and provide audit history
Contract performance
Payment data
Subscription status only — no card numbers
Card details are held by Apple/Google, never by us
Contract performance
What we do NOT collect
✅
We do not collect health or medical information
We do not track your browsing history or app usage beyond Safety Check
We do not access your contacts list, photos, microphone, or camera
We do not collect any data for advertising or profiling purposes
📵
Mobile number non-sharing policy: Your mobile phone number and your emergency contact's mobile phone number are collected solely to operate the Safety Check service. We do not sell, share, rent, or disclose any mobile phone numbers to third parties for marketing, advertising, or any purpose other than delivering safety alerts as described in this policy.
3 How We Use Your Data
We use your personal data exclusively for the following purposes:
Operating the daily check-in service — scheduling and sending your daily "Are you ok?" notification
Triggering safety alerts — contacting your emergency contacts via SMS and phone call when you signal distress, or when you do not respond to the initial check-in notification followed by three reminder notifications sent five minutes apart
Including location in alerts — attaching your last known GPS coordinates as a Google Maps link in the emergency SMS sent to your contact
Improving the app — using anonymized, aggregated usage data (never individual data) to understand how the service performs
Customer support — responding to your support requests and troubleshooting issues
Legal compliance — retaining records we are legally required to keep
📱
Message frequency & rates: Safety Check sends you scheduled check-in push notifications based on the frequency you configure (default: every 24 hours). If you do not respond to a check-in, up to three (3) reminder notifications will be sent, spaced five (5) minutes apart. If you still do not respond after these reminders, SafetyCheck will contact your designated emergency contacts via SMS and automated phone call, escalating through your contact list (up to three contacts on the Basic plan, with up to three call attempts per contact) until one of them acknowledges the alert by pressing "1" during the call. Message frequency may vary based on your check-in response activity and configured schedule.
Message and data rates may apply. Standard SMS and call rates charged by your mobile carrier may apply to messages and calls received from Safety Check. You are responsible for any charges imposed by your carrier. Safety Check is not responsible for any fees your carrier charges in connection with these messages or calls.
🚫
We will never use your data for marketing to third parties, selling to data brokers, advertising profiling, or any purpose not listed above.
4 Data Sharing
We share your data with as few parties as possible. Here is a complete list of everyone who may receive your data and why:
Recipient
What they receive
Why
Your emergency contact
Your name, last known GPS location (as a Maps link), and a message that you have not responded
This is the core function of the service. Only occurs during an active safety alert.
Twilio Inc. (twilio.com)
Your emergency contact's phone number and the SMS/call content
Our telephony provider that sends SMS messages and places automated calls
Google Firebase
Your device push token
Delivers daily check-in notifications to Android devices
Apple APNs
Your device push token
Delivers daily check-in notifications to iOS devices
RevenueCat Inc.
Anonymous user ID and subscription status
Manages in-app subscription billing on our behalf
Google Firebase (Crashlytics/Analytics)
Anonymous crash reports and usage events
Debugging and app stability
Railway.app
All account data, check-in events, alerts, contacts, encrypted subscription cache
Our infrastructure provider hosting the PostgreSQL database and Redis cache. Data is encrypted at rest and in transit.
Law enforcement / courts
Data required by a valid legal order
Only when legally compelled. We will notify you unless prohibited by law.
📋
We have Data Processing Agreements in place with all third-party processors listed above. We do not sell, rent, or share your data with any other parties.
📵
We do not share mobile phone numbers with third parties for marketing purposes. No mobile phone numbers collected through Safety Check — yours or your emergency contact's — will ever be shared with, sold to, or used by any third party for marketing, promotional, or advertising purposes. Mobile numbers are used exclusively to deliver safety alerts as described above.
5 Data Retention
We retain your data for as long as your account is active. Specifically:
Account data — retained for the duration of your account. Upon account deletion (Settings → Delete Account), all account data is permanently removed within 30 days.
Location data — only your most recent GPS coordinates are stored at any time. Previous coordinates are overwritten as new ones arrive. Location snapshots captured during escalation events are retained as part of your check-in history (see below).
Check-in history and alert events — retained for the duration of your account for audit, support, and safety continuity purposes. Free plan users cannot view historical check-ins in-app (this feature is available on the Basic plan, showing the last 12 months). Basic plan users can view the last 12 months in-app. All check-in and alert records are permanently deleted upon account deletion, within 30 days.
Payment records — retained for 7 years as required by tax law (subscription status only — no card data).
6 Your Rights
Depending on your location, you have the following rights over your personal data:
All users
📂 Access
Request a copy of all personal data we hold about you.
✏️ Correction
Request correction of inaccurate data.
🗑️ Deletion
Delete your account via Settings → Delete Account, or by emailing us. Processed within 30 days.
📤 Portability
Request your data in a machine-readable format.
EU / UK users (GDPR / UK GDPR)
Object — object to processing based on legitimate interests
Restrict — request restriction of processing while a complaint is investigated
Withdraw consent — withdraw location consent at any time in your device settings (note: this will disable the GPS location feature of emergency alerts)
Lodge a complaint — with your local data protection authority (e.g. the ICO in the UK, or your EU supervisory authority)
California users (CCPA)
Know — the categories of personal information we collect and why
Delete — request deletion of your personal information
Non-discrimination — we will not discriminate against you for exercising any CCPA right
Opt out of sale — we do not sell personal information. There is nothing to opt out of.
📧
To exercise any of these rights, email [email protected]. We will respond within 30 days (45 days for complex requests).
7 Security
We take the security of your personal data seriously, particularly given the sensitive nature of location and emergency contact information. Our security measures include:
🔐
TLS 1.2+ encryption
All data encrypted in transit
🛡️
AES-256 at rest
All stored data fully encrypted
🔑
MFA required
All database access gated
🔍
Regular pen testing
Security reviewed periodically
Database access restricted to authorised personnel only, with multi-factor authentication required
No employee has access to your location data except in the event of a support request you initiate
Breach notification: in the event of a data breach affecting your personal data, we will notify you within 72 hours as required by law
8 Children's Privacy
Safety Check is not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from children under these ages. If you believe a child has provided us with personal data, please contact us immediately at [email protected] and we will delete it promptly.
9 Third-Party Services
Safety Check integrates with the following third-party services. Each has its own privacy policy which governs how they handle data:
Links to external websites in safety alert SMS messages (Google Maps) are governed by Google's privacy policy at policies.google.com/privacy.
10 Changes to This Policy
We may update this privacy policy from time to time. When we make material changes, we will notify you by push notification and by posting the new policy in the app with an updated "Last Updated" date. Your continued use of Safety Check after notification constitutes acceptance of the updated policy.
We will not make changes that reduce your privacy rights without giving you at least 30 days' notice and, where required by law, obtaining your renewed consent.
11 Contact Us
If you have any questions, concerns, or requests regarding this privacy policy or your personal data, please contact us:
Mail: SAP FACTORY, LLC, 13234 Tivoli Lake Boulevard, Silver Spring, MD 20906
Response time: We aim to respond to all privacy inquiries within 5 business days
EU users can contact us directly at [email protected] for any GDPR-related requests. We aim to respond within 30 days as required by GDPR Article 12(3).