Privacy Policy

What the app collects

An anonymous account, created automatically

An anonymous account is created automatically the first time the app opens. It holds no name, email address or phone number — only a random identifier. It exists so that reports can be securely tied to a device without identifying anyone.

When you file a hazard report

• The hazard type.
• An optional free-text note.
• GPS coordinates and their accuracy.
• A place label.
• Optional photos.
• The time of the report.
• Whether you chose to remain anonymous.

A full account — optional

If, and only if, you choose to create a full account, an email address and password are stored. This is never required to file a report.

Stored on your device

• Your own reports and your pending queue.
• Display preferences, such as large-text mode.
• The login token is stored in the device keychain (iOS Keychain / Android Keystore).

What the app does not do

• No advertising, no tracking, no analytics, no third-party marketing SDKs.
• It never accesses location in the background — only while the app is open, and only when reporting or viewing the map.
• It does not require a name, phone number or email to report a hazard.
• It does not read contacts, messages, or any other app's data.

How reports are protected

• Reports are stored in a secured database. Row-level security means each user can retrieve only their own reports; no user can read another user's.
• Photos go to a private storage area, not a public one.
• Once filed, a report cannot be edited or deleted from the app. This protects the integrity of hazard information.
• The public hazard map deliberately cannot be used to trace a hazard back to the report or to the person who filed it. That link is withheld at the database level, not merely hidden in the interface.

Who receives reports

TODO: [WHO RECEIVES REPORTS — which mine-action / protection partners or authorities reports are shared with, and for what purpose]

Data retention

TODO: [DATA RETENTION PERIOD]

Legal basis and governing law

TODO: [LEGAL BASIS / GOVERNING LAW AND JURISDICTION]

Data controller

TODO: [DATA CONTROLLER LEGAL ENTITY NAME AND REGISTERED ADDRESS]

Privacy questions and deletion requests

For any privacy question, or to request deletion of your data, write to the privacy address below.

TODO: [PRIVACY CONTACT EMAIL]

Children

This app is not directed at children.

Updates to this policy

This policy may be updated from time to time. The date of the most recent update appears at the top of this page.