SafeNight ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the SafeNight application (the "Service"), available on Android, iOS, and via web at safenight.netlify.app.

Location Data: We collect your device's precise GPS location while the Service is in the foreground to provide route navigation, safety scoring, and nearby point-of-interest features. We do NOT collect location data when the app is in the background unless you have explicitly enabled background location sharing during an active Safety Circle session.

Account Information: When you create an account we collect your email address and an optional display name and username. We use passwordless magic-link authentication — we never store passwords.

Usage Data: We log anonymised usage events (e.g. app opens, routes searched) to improve the service. These events are tied to your account but do not contain route coordinates.

Payment Information: If you subscribe to a paid plan, payment is processed entirely by Stripe. We do not store your card number or any payment details — only your Stripe customer ID and subscription status are stored in our database.

Safety Circle: When you use the Safety Circle feature, your live location is shared with contacts you explicitly invite during active tracking sessions you initiate. Location sharing stops immediately when you end the session.

Device Information: We may collect basic device information (OS version, app version, crash logs) to help us diagnose and fix issues. This data is not linked to identifiable personal information.

• Provide route navigation and safety score calculations • Enable live location sharing with your Safety Circle contacts • Process subscription payments via Stripe • Send magic-link authentication emails • Improve app performance and features through anonymised analytics • Respond to support requests and enforce our Terms & Conditions • Comply with legal obligations

We do NOT sell your personal data to third parties. Data is shared only in the following circumstances: • Safety Circle contacts — your live location, only during active sharing sessions you initiate. • Stripe — your email address is used to create a payment customer record when you subscribe. • Supabase — our database and authentication provider stores your account, profile, and usage data. • OpenAI — anonymised route segment data (no personal identifiers) may be sent to generate AI safety explanations. • Law enforcement / legal process — if required by applicable law or to protect the safety of our users.

Your data is stored securely on Supabase (hosted on AWS within the EU). All data transmission uses HTTPS/TLS encryption. Access to production databases is restricted to authorised team members.

Account data: Retained for as long as your account is active. When you delete your account, all personally identifiable data (name, email, username, location history, Safety Circle contacts, and Stripe customer ID) is permanently erased within 30 days.

Safety reports: Reports you submit (hazards, CCTV, street lights, etc.) are retained indefinitely in anonymised form after account deletion. They form part of the shared safety dataset that benefits all users and cannot be linked back to your identity once your account is deleted.

Usage analytics: Anonymised, aggregate usage events are retained to improve the service. These records contain no name, email, or any identifier that can be traced back to you after your account is deleted.

The SafeNight web application uses essential cookies and local-storage tokens to maintain your authenticated session. We do not use advertising cookies or third-party tracking pixels. Anonymous analytics may use a first-party cookie scoped to our domain.

Under UK GDPR / EU GDPR you have the right to: • Access — request a copy of your personal data. • Rectification — correct inaccurate data via your profile. • Erasure — delete your account and all personally identifiable data via "Delete Account" in the profile menu. Note: anonymised safety reports and aggregate usage analytics are retained as described in section 4. • Restriction — ask us to stop processing your data in certain circumstances. • Portability — request an export of your data by contacting us. • Object — object to processing based on legitimate interests. • Withdraw consent — for location access at any time via your device settings. To exercise any of these rights, contact us at mzst.26.x@gmail.com.

SafeNight is not intended for children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.

The Service integrates the following third-party services, each governed by their own privacy policies: • OpenStreetMap / Nominatim — map display and geocoding • OpenStreetMap / OSRM — routing and map tiles • UK Police Data API — public crime statistics • Stripe — payment processing • Supabase — authentication and data storage • OpenAI — AI-generated safety explanations • Expo / React Native — mobile app framework

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

For questions about this Privacy Policy or to exercise your data rights: Email: mzst.26.x@gmail.com SafeNight — Plymouth, UK