Sakhi Safety Privacy Policy
Sakhi Safety is your trusted personal safety companion developed by LexonIT. Your privacy and safety are our highest priority. This policy explains exactly how we handle your data.
About Sakhi Safety
Sakhi Safety is a personal safety application developed and published by LexonIT, a UAE-based technology company. The app is designed to empower users — particularly women, students, and solo travellers — with instant emergency tools including one-tap SOS, real-time location sharing, trusted contact alerts, safety timers, and more.
This Privacy Policy governs the collection, use, storage, and sharing of personal data by the Sakhi Safety mobile application (Android, Package ID: com.sakhisafety.app). By installing or using Sakhi Safety, you agree to the terms of this Privacy Policy.
At a Glance
Location data is used ONLY for emergency alerts and is never sold
Trusted contact details are stored securely and used only for SOS alerts
All data is encrypted in transit and at rest using industry standards
You can delete your account and all associated data at any time
We do not sell, share, or use your data for advertising
Background location access is strictly for emergency and safety purposes
Information We Collect
Account Information
When you create an account, we collect:
- Full name — used to personalize your experience
- Email address — for authentication, account recovery, and service communications
- Password — stored as a securely hashed value using bcrypt; we never store plaintext passwords
- Account creation timestamp and last login time
Location Data
Location is the core of Sakhi Safety's emergency features. We collect:
- Precise GPS coordinates (latitude and longitude) when you trigger an SOS or when the Safety Timer expires
- Background location updates approximately every 15 seconds while the app is running, stored to our secure database to enable real-time tracking during emergencies
- Location accuracy and speed data from device sensors to improve tracking precision
Important: Location data is used exclusively for safety features. It is never used for advertising, analytics beyond safety purposes, or shared with any party other than your designated trusted contacts during an emergency.
Trusted Contact Data
You may add up to 5 trusted contacts. For each contact, we store:
- Full name, phone number, email address, and relationship type
- This information is stored in our secure database linked to your account
- This data is used exclusively to send emergency alerts on your behalf
Emergency & Safety Logs
When an emergency is triggered, we log:
- Timestamp of the emergency event
- Your GPS coordinates at the time of triggering
- The method of triggering (tap, shake, volume button, timer expiry)
- Alert delivery status (sent / failed)
- Safety timer sessions including start time, set duration, and completion status
Device & Technical Information
We may automatically collect technical data including:
- Device model, operating system version, and Android API level
- App version number
- Crash reports and diagnostic data (if the app encounters an error)
- Network connection type (for optimizing data upload during emergencies)
How We Use Your Information
Emergency Alert System
Your data is primarily used to operate the emergency alert system:
- When SOS is triggered, your real-time GPS location is retrieved and sent to all your trusted contacts via email
- Emergency log entries are created to maintain your emergency history and help law enforcement if required
- When the Safety Timer expires without a check-in, an automatic SOS is triggered using the same process
Authentication & Account Management
- Email and password are used to verify your identity and secure access to your account
- Magic link authentication sends a one-time login link to your email address
- Password reset codes are sent via email upon request
Real-Time Safety Tracking
- Continuous background location tracking enables real-time location sharing during active emergency situations
- Location history for the past 24 hours is retained to provide a movement trail to emergency contacts
- Route monitoring features use location data to detect potential deviations from expected paths
App Performance & Safety
- Diagnostic data helps us identify and fix crashes or failures, especially in the emergency alert pipeline
- Usage patterns help us improve the reliability of safety features
- We do not use your data for profiling, targeted advertising, or any commercial purpose beyond delivering safety services
App Permissions
Sakhi Safety requests the following Android permissions. Each permission is necessary for a specific safety feature. We do not request permissions beyond what is strictly required.
ACCESS_FINE_LOCATION & ACCESS_COARSE_LOCATION
To obtain your precise GPS coordinates when you trigger an SOS or use the Live Map feature. Required for accurate emergency location reporting.
ACCESS_BACKGROUND_LOCATION
To continuously track your location even when the app is in the background. This enables the real-time location tracking feature and ensures SOS works even when your phone screen is off.
ACTIVITY_RECOGNITION
To detect physical motion patterns for the shake detection feature (SOS trigger by shaking your phone).
FOREGROUND_SERVICE & FOREGROUND_SERVICE_SPECIAL_USE
To keep the Safety Guardian service running in the background so SOS can be triggered at any time, even when the app is not actively open.
POST_NOTIFICATIONS
To show safety status notifications, active timer alerts, and critical emergency event notifications on your device.
RECEIVE_BOOT_COMPLETED
To automatically restart the Guardian safety service after your phone reboots, ensuring continuous protection without manual intervention.
VIBRATE & WAKE_LOCK
To provide haptic feedback during emergency activation and to keep the processor awake during critical alert transmission to ensure successful delivery.
INTERNET
Required to communicate with our secure backend servers (Supabase) for account authentication, saving emergency logs, and delivering email alerts to trusted contacts.
Accessibility Service (Optional)
The optional Guardian Accessibility Service monitors the physical volume buttons to enable volume-button SOS triggering even when the screen is locked. This permission is entirely optional and requires explicit user consent through Android Accessibility Settings.
Data Storage & Infrastructure
Cloud Infrastructure
All Sakhi Safety data is securely stored on Supabase — an open-source backend platform built on PostgreSQL. Supabase is hosted on AWS (Amazon Web Services) infrastructure with data centers that maintain SOC 2 Type II compliance.
The data tables we maintain include:
user_locations— real-time location coordinatestrusted_contacts— your emergency contactsemergency_logs— history of triggered alertssafety_checks— safety timer sessions
Encryption
- In transit: All data transmitted between the app and our servers is encrypted using TLS 1.3
- At rest: Database storage is encrypted using AES-256 at the infrastructure level
- Authentication tokens: Session tokens are cryptographically signed JWTs with automatic expiration
- Passwords: Stored as bcrypt hashes; never accessible in plaintext
Data Retention
- Location data: Rolling 24-hour history retained for emergency tracking; older data is automatically purged
- Emergency logs: Retained indefinitely within your account for your personal reference and potential legal use
- Trusted contacts: Retained until you delete them or your account
- Account data: Retained until account deletion is requested
Data Sharing & Disclosure
Trusted Contacts — Emergency Alerts
During an emergency event, we share the following with your trusted contacts via email:
- Your name and a Google Maps link to your current GPS location
- A brief emergency message identifying that an SOS has been triggered
This is the only sharing that occurs with real individuals, and it happens exclusively on your request (by triggering an SOS).
Service Providers
We use the following third-party services to operate Sakhi Safety. Each is contractually bound to protect your data:
- Supabase — Database, authentication, and backend functions
- AWS (Amazon Web Services) — Underlying cloud infrastructure
- Gmail API / SMTP — Delivery of emergency email alerts to trusted contacts
What We NEVER Do
- We never sell your personal data to any third party
- We never share your location data with advertisers
- We never use your data for targeted advertising or behavioral profiling
- We never share your trusted contact information for marketing purposes
- We never provide your data to law enforcement without a valid legal order
- We do not use third-party analytics SDKs that track users across apps
Legal Disclosure
We may disclose your information if required to do so by law, court order, or lawful request from a governmental authority, or when we believe disclosure is necessary to protect the safety of any person or to prevent illegal activity.
Security Practices
Technical Security
- Row-level security (RLS) policies in Supabase ensure users can only access their own data
- All API endpoints require valid authenticated sessions; unauthorized requests are rejected
- Emergency alert functions run in isolated serverless environments (Supabase Edge Functions)
- Database access is restricted to whitelisted service accounts only
Application Security
- Sessions are invalidated upon logout and after periods of inactivity
- The app uses secure storage for authentication tokens on device
- Critical operations (SOS, account deletion) require authenticated sessions
- No sensitive data is stored in application logs or error reports
Incident Response
In the unlikely event of a data breach involving personal data, we will notify affected users as promptly as possible, and report the incident to relevant data protection authorities within the timeframe required by applicable law (typically 72 hours). We maintain an incident response plan specifically for our safety-critical systems.
Your Rights & Controls
Access Your Data
You can view all your trusted contacts, emergency history, and account information directly within the Sakhi Safety app. You may also request a complete export of your personal data by contacting us at securesakhi@gmail.com.
Edit or Delete Your Data
- Trusted contacts can be added or removed at any time within the app
- Account deletion: Contact us at securesakhi@gmail.com to permanently delete your account and all associated data. We will process this request within 30 days. Note: Emergency logs may be retained for legal purposes in limited circumstances.
Location Permission Controls
- You can revoke location permissions at any time through your Android device settings (Settings > Apps > Sakhi Safety > Permissions)
- Revoking location access will disable real-time tracking and location-based SOS features, but the app will still function for manual SOS and contact management
Notifications
You can manage notification preferences through your device's Android notification settings. Note: Disabling notifications may prevent you from receiving critical safety alerts.
Shake Detection
The shake-to-SOS feature can be toggled on or off directly within the app's Safety Dashboard. Your preference is stored locally on your device.
Account Deletion
Google Play Compliant: Sakhi Safety Guardian provides an in-app account-deletion option and an email-based account-deletion request method.
How to Delete Your Account
Users can permanently delete their Sakhi Safety Guardian account in either of these ways:
- Option 1 — In the app: Open Sakhi Safety Guardian → Safety tab → scroll to the Danger Zone → tap Delete Account → confirm deletion.
- Option 2 — By email: Send an email from the email address registered with Sakhi Safety Guardian to securesakhi@gmail.com with the subject line "Delete my Sakhi account". We will confirm and process eligible email deletion requests within 30 days.
Data Deleted When an Account Is Removed
When an account is deleted, the following data is permanently removed from active systems:
- Account and authentication record
- User profile information, including name and email address
- Trusted emergency contacts
- Location-history records used by live tracking
- Emergency SOS logs
- Safety-timer records
- Active authentication sessions and access tokens
Effect of Account Deletion
- Account deletion is permanent and cannot be undone
- After deletion, the user can no longer sign in or use safety features connected to that account
- Trusted contacts will no longer receive SOS alerts from that account
- Uninstalling the app alone does not delete the account or associated server data. Use one of the deletion methods above
Children's Privacy
Sakhi Safety is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13 years of age. If a parent or guardian believes that their child under 13 has created an account, please contact us immediately at securesakhi@gmail.com and we will promptly delete the account and all associated data.
Users between 13–18 years of age must have parental consent to use Sakhi Safety. By registering, users under 18 confirm they have obtained this consent. We strongly encourage parents to discuss app usage with their children and help them understand how emergency features work.
Third-Party Links & Services
The Sakhi Safety app may include links to third-party services such as Google Maps (for location display in emergency alerts) and emergency helpline websites in the Helpline Directory feature. These third-party services have their own privacy policies which we encourage you to review. LexonIT is not responsible for the privacy practices of these external services.
Emergency alerts sent to trusted contacts via email may contain links to Google Maps for location viewing. By using the SOS feature, you acknowledge that a Google Maps link containing your GPS coordinates will be shared with your designated trusted contacts.
International Data Transfers
Your data is processed and stored on servers operated by Supabase (backed by AWS infrastructure). These servers may be located outside your country of residence. By using Sakhi Safety, you consent to the transfer of your data to these servers.
We ensure that all international data transfers comply with applicable data protection laws. Our service providers are contractually required to maintain data protection standards equivalent to those in your jurisdiction. Where required, we rely on Standard Contractual Clauses or equivalent mechanisms for cross-border data transfers.
Policy Updates
We may update this Privacy Policy from time to time as our app features evolve or legal requirements change. When we make material changes, we will update the "Last Updated" date and, if the changes are significant, we will notify you through an in-app notification or by email. We encourage you to review this policy periodically.
The most current version of this Privacy Policy is always available within the Sakhi Safety app and on the LexonIT website. Continued use of Sakhi Safety after any changes constitutes your acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below. We are committed to addressing all privacy inquiries within 5 business days.
Data Controller
LexonIT
App Name
Sakhi Safety
App Package ID
com.sakhisafety.app
securesakhi@gmail.com
Platform
Google Play Store (Android)
Company Location
UAE
Effective Date: June 22, 2025 · Package: com.sakhisafety.app
Sakhi Safety is a product of — UAE's Leading AI & Software Development Company