SafeTrace helps Nigerian families coordinate safety workflows in the first hours after a disappearance or abduction concern. This notice explains what personal data we process, why we process it, who receives it, how long we keep it, and the rights you may exercise under the NDPA.
Categories of personal data
Depending on how you use SafeTrace, we may process: identity and contact details (name, phone number, email); trusted emergency contacts; account credentials; location and trip check-in data when you start a SafeTrip or send Imole Alert; SOS and case timeline records; witness notes and call logs you enter; photos, audio, and documents you upload; school or institution roster and release records; subscription and payment status; consent and audit records; and limited technical logs needed to secure the service.
Purposes of processing
We process personal data to: send alerts to your trusted circle with your consent; maintain a shared incident record for authorized participants; preserve materials for authorised handoff; operate school and guardian release workflows; bill subscriptions; prevent fraud and misuse; meet legal and regulatory obligations; and respond to data-subject rights requests.
Lawful bases (NDPA)
Processing is based on one or more of: your consent (for example location sharing at SOS); contract (providing the service you subscribed to); legitimate interests in safety coordination and platform security, balanced against your rights; vital interests in emergencies; and legal obligation where retention or disclosure is required by law or authorized public authority.
Recipients and sharing
We do not sell personal data. We share data only with: people you authorize (trusted contacts, case participants, institution staff); messaging and hosting providers under contract; payment processors; professional advisers bound by confidentiality; and lawful authorities when required by law or when you initiate an authorised handoff. We do not grant users direct access to authority databases.
International transfers
Primary hosting is intended for production deployments with data residency appropriate to Nigerian operations. Where processors store data outside Nigeria, we require contractual safeguards consistent with NDPA requirements and document the transfer in our processing records.
Retention
Account data is kept while your account is active. Incident, material, and export records may be retained for the period needed to support authorised handoff, disputes, audits, tax, and regulatory duties, then deleted or anonymised where practicable. Legal hold may extend retention when flagged for review.
Your rights
Subject to NDPA limits, you may request access, correction, erasure, restriction, portability, objection, and withdrawal of consent. Contact the DPO at the address above. You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been violated.
Security measures
We use role-based access, authenticated sessions, audit trails, signed exports, encryption in transit, and integrity checks on case timelines. No system eliminates all risk, especially during live emergencies or network outages.
Breach notification
If a personal data breach is likely to affect your rights, we will investigate, contain, and notify the NDPC and affected data subjects within timeframes required by law, and document remediation steps.
Children and schools
Data about children should be entered only by authorized guardians or institution administrators for safety, release verification, or emergency coordination. Schools must obtain appropriate guardian authority before adding pupils to rosters.
Changes to this notice
We will publish material updates on this page and, where required, notify registered users. Continued use after notice of changes constitutes acceptance where permitted by law.
Related documents
See also our Terms of service and the in-app Handoff desk handoff procedure. For operational privacy questions before launch, contact Not yet published.