Privacy notice

This notice explains what SafeReach collects through this website, why, and the choices you have. It covers the website: the waitlist and buddy verification. The SafeReach app will have its own notice, which you will see before you use it.

What we collect

• Your email address, when you join the waitlist, with the time you joined and the version of this notice you were shown.
• If you choose to add them after joining: your first name, your city or town, your area or locality, and when you usually travel (for example late evenings). These are optional and help us plan the launch city by city and area by area.
• If you verify as a buddy on the buddy page: your mobile number (confirmed with a one-time SMS code), your full name as it appears on your ID, your date of birth, your email address, photos of the front and back of one government ID, a selfie holding a pose we show you, and a record of the consent you gave. We do not accept Aadhaar for verification and never ask for your Aadhaar number.
• A scrambled network identifier, used for a short time to stop automated abuse of the sign-up form. It is a one-way keyed hash of your IP address, is not stored with your email, and is deleted within two days.

We do not use advertising or analytics cookies, and we do not track you across other websites. Your browser remembers, for the current visit only, that you have seen the opening animation. If you verify as a buddy, your browser also keeps a note for up to 90 days so the buddy page can tell you before it texts you another code: it says only that a verification is under review or approved and when, never your number or your name, and it stays on your device. If you join the waitlist, your browser also keeps your email address, and your first name if you add it, for that tab only, so the buddy page can fill them in for you. This copy stays on your device. It is removed when the buddy page saves your details, or when you close the tab.

Why we use it

We use your email only to tell you about early access and the launch of SafeReach. If we send you a confirmation email, you are added to our mailing list only after you tap its link. We use the optional details you add only to plan which areas to launch in and what to tell you.

If you verify as a buddy, a person on our team compares your ID with your selfie to confirm you are a woman aged 18 or over and that the ID is yours. If they approve, you appear as a verified buddy in the app. Your mobile number, name and date of birth set up the SafeReach account you will sign in to in the app; the account is created when you confirm the SMS code. We use the email address you give on the buddy page to tell you the result of your review, and it is kept with your account. It is contact information as you typed it: we have not confirmed that the address is yours, so we use it only to write to you. It is never shown to other members. We use your ID photos and selfie for nothing else, and we never show them to other users.

We rely on your consent: you give it by joining the waitlist, by adding optional details, by asking for the SMS code on the buddy page, and by ticking the box there before you send your details. That one box records two things: that you agree to create your SafeReach account, and that you consent to identity verification. We never sell your data or share it for advertising.

Who processes it for us

Our database, where your email address and any optional details you add are stored, and the private store for verification photos are hosted by Supabase in its Mumbai (India) region, and this website is served by Vercel. When we send emails, they go out through Brevo, whose servers are in the European Union; Brevo receives your email address and those optional details only for that purpose. When you verify, Google Firebase Authentication receives your mobile number to send and check the SMS code, and Google reCAPTCHA sees technical details of your device and request to check that it comes from a person; this data may be processed on Google servers outside India, including the United States. If a human check is switched on for the waitlist form, Cloudflare Turnstile sees technical details of your request to confirm you are not a bot. These providers act on our instructions only.

How long we keep it

We keep your email, and any optional details you added, until SafeReach launches and for up to 12 months after, unless you unsubscribe or ask us to delete them sooner. After that we delete them.

Your ID photos and selfie are deleted 30 days after the review decision, whether you are approved or not. We keep the result (verified or not) and the type of ID you used. Your mobile number, name, date of birth and email address stay with your SafeReach account until you delete it.

Your rights

You can ask to see the data we hold about you, correct it, or have it deleted, and you can withdraw your consent at any time. Withdrawing consent is as easy as giving it: every email has an unsubscribe link, and you can write to us to remove your email or your verification. If you withdraw consent to verification before a decision, we delete your photos and stop the review. You can also nominate someone to exercise these rights for you, and if you are not satisfied with our reply you can complain to the Data Protection Board of India.

Write to us at support@safereach.live. We aim to reply within 7 days.

Children

The waitlist and buddy verification are for adults. If you are under 18, please do not join or verify. We check your date of birth, and our reviewers check your ID.

Changes

If we change this notice, we will update the date above. If a change affects how we use your email, we will tell you before it applies.