SECUREGUARD PRIVACY POLICY Last updated 17 July 2026. Applies to the SecureGuard mobile app for iOS and Android. THE SHORT VERSION SecureGuard holds your emergency contacts, your journeys, and your location while a journey is running. Your location goes to the contacts you chose, and to nobody else. We do not sell anything, we do not run ads, and we do not track you across other apps. Location history is automatically deleted after 30 days. You can delete your entire account from inside the app, and it is gone immediately. WHO WE ARE SecureGuard is operated by Teresa Ziegler, Chicago, Illinois, United States. Questions, requests, or complaints: admin@ghsc.agency. WHAT WE COLLECT, AND WHY This is the complete list. There is nothing else. - Email and password Why: To sign you in. Passwords are hashed by our auth provider; we never see them. How long: Until you delete your account. - Your name and phone number Why: Your name appears in the alerts your contacts receive, so they know who needs help. Your phone number is how we call and text you. How long: Until you delete your account. - Your emergency contacts (name, phone, email, relationship) Why: These are the people we text and call on your behalf. How long: Until you delete them or your account. - Your location while a journey is active Why: So the contacts you chose can see you are moving and where you are. How long: Deleted automatically after 30 days. - Journeys (start, destination, times, a child's first name if you enter one) Why: To run the reminder and show you your history. How long: Deleted 90 days after the journey ends. - Alerts you send, and whether each contact was actually reached Why: So the app can tell you the truth about whether help was notified, rather than a checkmark that might be a lie. How long: Until you delete your account. - Saved trips (addresses you enter for back seat reminders) Why: So starting the reminder is one tap on a rushed morning. How long: Until you delete them or your account. WHAT WE DO NOT COLLECT - Your location when no journey is running. The app is not tracking you. - Your contacts list. You type in emergency contacts by hand; we never read your phone's address book. - Advertising identifiers. There are none, because there are no ads. - Analytics on your behaviour, third-party trackers, or any social media SDK. - Anything about you from anyone else. We do not buy data. THE CAMERA, AND THE PHOTO OF YOUR CAR SEAT When a back seat reminder goes off, we ask you to photograph the empty car seat to dismiss it. That photo is never uploaded, never stored, and never leaves your phone. We record only a single true/false flag meaning "a photo was taken". The point of the photo is to make you physically turn around and look at the seat. Keeping a picture of the inside of your car would add risk and buy nothing. CHILDREN SecureGuard is for adults. It is not directed at children and children may not create accounts. Some features let a parent or guardian enter a child's first name and a destination address, for a back seat reminder or a walk to school. That information is provided by the adult account holder about their own child. We use it only to word the alert ("Amara has not been confirmed dropped off") and to know where the trip was going. We do not collect anything from the child, we do not contact the child, and the child has no account. If you are a parent or guardian and you want that information removed, delete the trip or your account in the app, or write to us. It is deleted immediately. WHO YOUR INFORMATION GOES TO Your emergency contacts. That is the whole purpose of the app. When you start a journey or send an alert, the contacts you chose receive a text, an email, or a phone call containing your name, your location, and anything you wrote. If you share a journey link, whoever holds that link can see your live location until the journey ends or 24 hours pass, whichever comes first. COMPANIES THAT PROCESS DATA SO THE APP CAN WORK - Supabase (hosted on Amazon Web Services, United States) Gets: Everything listed above. What for: The database and the servers. - Twilio Gets: Your contacts' phone numbers, your name, your location, the alert text. What for: Sending the texts and making the calls. - Resend Gets: Your contacts' email addresses and the alert content. What for: Sending alert emails. - OpenCage Gets: Coordinates or an address you type. What for: Turning addresses into map points and back. - Project OSRM Gets: A start point and an end point. What for: Working out how long a drive should take. - OpenStreetMap Gets: Map tile requests from the follow-along page. What for: Drawing the map. Each of these receives only what it needs to do its job. None of them is permitted to use your information for their own purposes. WE DO NOT SELL YOUR DATA We have never sold personal information and we do not share it for cross-context behavioural advertising. There is no advertising in SecureGuard. If that ever changes, we will ask you first, not bury it in an update to this page. LAW ENFORCEMENT We will disclose information if we are legally required to, or if we believe in good faith that it is necessary to prevent imminent death or serious physical injury. We will tell you when we are permitted to. HOW LONG THINGS STAY - Location points: deleted automatically after 30 days. - Completed or cancelled journeys: deleted 90 days after they end. - Journey share links: stop working when the journey ends, or after 24 hours. - Community alerts: expire after 4 hours and are deleted after 30 days. - Everything else: until you delete it, or your account. This is not a courtesy. A permanent record of everywhere you and your child have walked is a liability that grows every day it exists, so we do not keep one. DELETING YOUR ACCOUNT Open the app, go to Account, and tap Delete my account. It is two confirmations and then it is done. Your profile, contacts, journeys, location history, saved trips, and alerts are deleted immediately and permanently. We cannot get them back and neither can you. Texts and calls already delivered to your contacts cannot be recalled; they are on other people's phones. Our provider may retain delivery logs under their own policy. If you no longer have the app installed, see our account deletion page: https://qvmcfiebqtornruplgfu.supabase.co/functions/v1/delete-account SECURITY Everything travels over encrypted connections and is encrypted at rest. Access to your records is enforced at the database itself, per row, not by application code that could be bypassed. Nobody else's account can read your journeys, your contacts, or your location. Journey share links use a random, unguessable token. Anyone holding the link can see that journey while it is live, so send it only to people you mean to. No system is perfect. If you find a security problem, please tell us at admin@ghsc.agency. We will answer, and we will not threaten you for reporting it. YOUR RIGHTS Wherever you live, you can ask us what we hold about you, get a copy, correct it, or delete it. Deletion is built into the app; for anything else, write to admin@ghsc.agency and we will answer within 30 days. If you are in California, Colorado, Connecticut, Virginia, or another state with a comprehensive privacy law, those rights include access, correction, deletion, portability, and the right to opt out of sale or targeted advertising; we do neither, so there is nothing to opt out of. If you are in the EU or UK, our lawful bases are your consent (for location) and performance of a contract with you (to run the app). You may withdraw consent at any time by turning off location or deleting your account, and you may complain to your supervisory authority. WHAT THIS APP IS NOT SecureGuard is not an emergency service and does not contact 911, police, fire, or ambulance. It texts and calls the people you listed. It depends on your phone, your battery, your signal, and on Twilio and our servers being up, any of which can fail. In an emergency, call 911. Do not rely on this app to save your life or your child's. It is a reminder and a way to tell people you know. Nothing more, and it should never be treated as more. CHANGES If we change this policy in a way that affects what we collect or who we share it with, we will tell you in the app before it takes effect. The date at the top always reflects the current version. SecureGuard - Chicago, Illinois - admin@ghsc.agency This policy describes the app as it is actually built. If you find something here that does not match what the app does, that is a bug and we want to hear about it.