YOUR DATA · YOUR CONTROLS
Your data stays in your hands.
SafeCity's most important privacy interface is the set of controls that lets you inspect, correct, limit, and erase what the app keeps.
CURRENT STATEYou are in control
DIRECT CONTROLS
Six ways to stay in charge.
Most SafeCity data lives only on the device, so the fastest rights controls live there too.
See what is stored
History and Settings expose incidents, contacts, permissions, consent state, retention, and learned-baseline controls.
Correct your details
Update or remove emergency contacts and change protection settings directly on the device.
Delete an incident
Remove individual incidents and their encrypted evidence before the selected retention period ends.
Clear the baseline
Erase optional learned routine aggregates without deleting contacts or incident history.
Choose retention
Set local incident retention from 1 to 90 days, with 30 days as the current default.
Withdraw and erase
Stop monitoring and erase this installation’s SafeCity personal data through one confirmed Settings flow.
DATA LIFECYCLE
From a passing signal to deliberate erasure.
Different data deserves different lifetimes. Ordinary inference should be fleeting; a confirmed incident should be encrypted and remain only as long as you choose.
Created
A short signal exists in memory or a setting is entered by you.
Protected
Durable metadata uses SQLCipher; confirmed evidence uses AES-GCM.
Used
Local safety states, history, and user-requested actions use the minimum relevant data.
Expired
Volatile windows disappear quickly; incidents follow your selected retention.
Erased
Delete one record, clear optional learning, or withdraw consent and erase the installation.
WITHDRAWAL
One confirmed action stops processing and resets this installation.
In the app, use Settings → Legal and your data → Withdraw consent and erase data. Monitoring stops and SafeCity removes contacts, sessions, incidents, locations, queued anonymous reports, consent records, optional learned profiles, and encrypted evidence from the installation.
FORMAL REQUESTS
Some rights need an operator.
Access summaries, grievance handling, nomination, or questions about external recipients require a verified support process.
Pre-release statusThe final Data Fiduciary, Privacy Contact, and Grievance Officer must be published before distribution.
FULL DETAILS
Read the itemised Privacy Notice.
See every data category, purpose, recipient, retention rule, and safeguard in the complete notice.