Privacy policy

This is a draft. It is waiting for legal review and may change before the apps launch.

The short version

Your messages, voice notes, calls, check-in answers and location are encrypted on your phone. We cannot read them.
Your name and contact details are locked on your phone before they reach us. We cannot open them.
We do not sell or share your data, and we do not use ads, analytics or trackers.

A made-up name, your base and the day you last used the app.
Help requests: the base, the type of helper and how urgent it is.
The privacy rules and consents you accepted, with their version and date.
Public keys and, if you allow notifications, a notification token for each of your devices.
Your locked identity box, which only your phone can open.
If you turn on "Help improve the library", a count of how often each library item is played each day, with nothing that points to you.

Messages after they reach the other phone. Messages that never arrive are deleted after 30 days, still unreadable to us.
Your check-in answers or your location.
Your .mil email address. We use it once to send a code.
Your IP address in our logs.

This website sets no cookies. The admin panel uses one cookie that is needed to sign in.

You can share your details with a helper, and stop sharing at any time.
You can turn Safety Locate on or off at any time in Settings.
You can delete your account in the app. What we hold about you is deleted right away.