Privacy Policy
Version 2.3 — 12 September 2026. Replaces version 2.2 of 15 August 2026.
SafeTrack is not yet generally available. This policy describes how personal data will be handled when the application is released, and applies from the date a person first creates an account. We are publishing it now so that it can be read before anyone signs up.
1. Who we are
SafeTrack is a personal-safety mobile application operated by The Libri Limited, a company incorporated in the Federal Republic of Nigeria and also the operator of mylibribooks.com. The Libri Limited is the data controller for personal data processed through SafeTrack.
2. What this policy covers
This policy explains what personal data SafeTrack collects, why, how long we keep it, who it is shared with, and the rights you have over it. It applies to the SafeTrack mobile application and to this website.
SafeTrack exists so that when something goes wrong, the people you have chosen find out where you are. That purpose is the only reason we hold anything about you.
3. Who may use SafeTrack
You must be 18 or over to hold a SafeTrack account.
A child or young person under 18 may be included as a tracked member of an account held by their parent or legal guardian. In that case the parent or guardian creates the account, provides consent on the child's behalf, and is responsible for explaining to the child, in terms they can understand, that their location is being shared and with whom. We also tell the child directly — see section 5.
We do not knowingly allow anyone under 18 to create their own account. If we become aware that a person under 18 has created an account independently, we will delete it and the data associated with it.
4. The data we collect
Account information
Your email address, your mobile telephone number, and the display name you choose. We collect these so that you can hold an account, so that we can verify it is yours, and so that the people you nominate can tell who an alert has come from.
Location information
SafeTrack records your device's location so that an emergency alert can tell your nominated contacts where you were. Depending on the settings you choose, location may be recorded periodically while the app is running, or only when an alert is raised.
You control this. Location collection requires the permission you grant to the app on your device, and you can withdraw that permission at any time in your device settings. If you withdraw it, SafeTrack will continue to work but will not be able to include your location in an alert.
Emergency contacts and SOS recipients
The names and telephone numbers of the people you nominate. You enter these yourself. SafeTrack does not read your phone's address book and does not import your contacts.
Because these details relate to another person, you should only add someone if they have agreed to it. When you nominate someone, we send them a message telling them they have been nominated, and they can decline at that point or withdraw at any time afterwards.
Alert records
When an alert is raised — by you pressing the SOS control, by the app detecting a possible fall, or through the duress feature described in section 6 — we record that it happened, when, the location associated with it, which channels the alert was sent on, whether each one succeeded, who acknowledged it, and how it was resolved.
Your devices
A push notification token for each device you sign in on, so that alerts can reach you. Signing out removes it.
Technical information
Basic information needed to operate the service: the type of device, the application version, and the times at which the app connected to our servers.
Diagnostic and crash information
If the app crashes or hits an unexpected error, we collect a diagnostic report so that we can find and fix the fault: the type of error, where in the app it occurred, the device model and operating-system version, and the application version. These reports describe faults in the software. They do not contain your location, your contacts, or the content of any alert.
5. Children and guardians
SafeTrack supports child accounts, set up and managed by a parent or guardian. Where a child is tracked, we hold the same categories of information for that child as for an adult: location, alerts, and the guardians attached to them.
A tracked child is told directly. The child's own device tells them, in terms appropriate to their age, that their location is being shared and with whom. We treat that as our duty as controller, not something a parent discharges on our behalf.
A child's guardians are added by an existing guardian. Anyone added as a guardian is told they have been added, and can withdraw. Other people nominated to receive a child's alerts — a grandparent, an older sibling, a driver — are asked first and become active only when they accept. A parent's own contact list is never silently inherited by their child's.
6. Duress
SafeTrack includes a duress feature, for situations where a person needs to raise an alarm without anyone nearby seeing them do it. If it is used, we collect location more frequently for the length of that episode, and we keep the record for longer than an ordinary alert — see section 10.
During a duress episode we may send the people you have nominated a temporary web link showing your location, so that someone without the app installed can still find you. That link expires, stops working as soon as the episode is closed, and cannot be used to reach anything else in your account. Every time it is opened is recorded, and you can see those accesses yourself.
7. Why we process it, and on what basis
We rely on different grounds for different things, and it is worth being specific rather than claiming one basis covers everything.
- To provide the service you signed up for — your account, your contacts, the application working at all. This is necessary for the performance of our agreement with you.
- To collect your location — on your consent, given through your device's own permission prompt, and withdrawable at any time.
- To send an alert when you are in danger — including passing your location to the people you nominated. This protects the vital interests of the person the alert concerns, which is the purpose of the product, and it is why an alert goes out regardless of the state of anything else on the account.
- To keep a record of alerts after the event — so that an incident can be reconstructed later, by you or by an authority you turn to. We rely on our legitimate interest in the service being able to account for what it did, bounded by the retention limits in section 10.
- To keep the app working and fix faults — when the app crashes or errors, we use the diagnostic report to diagnose and fix the problem. We rely on our legitimate interest in keeping the service reliable, using only fault information and never your location, contacts or alert content.
- To meet legal obligations — where the law requires us to retain or disclose something.
Where a child is protected through SafeTrack, the parent or guardian who set the account up exercises these choices on the child's behalf. We remain the controller and remain responsible for how the information is handled.
We do not sell personal data. We do not share it with advertisers. We do not use location data for marketing, profiling or any purpose other than those described here.
8. Who your data is shared with
Personal data is shared only with the people you have nominated, and with the service providers necessary to run the application:
- Your nominated emergency contacts and SOS recipients — they receive your name, the time of an alert, and your last known location, because that is the purpose of the service. A guardian of a child sees the point at which an alert was raised, not continuous tracking.
- Supabase — our database, authentication and hosting provider, which stores the data on our behalf as a processor.
- Africa's Talking — our SMS provider, which delivers alert and verification messages on our behalf and receives the destination number and message content for that purpose.
- Google (Firebase Cloud Messaging) — our push notification provider, which delivers alerts to your device and receives the notification content and your device's push token for that purpose.
- Google (Firebase Crashlytics) — our crash-reporting provider, which receives diagnostic fault reports (error type, device model, operating-system and application version) so that we can fix problems. It receives no location, contacts or alert content.
- Law enforcement or other authorities, where we are required to disclose by Nigerian law or a valid court order.
9. Where your data is held
Our database is hosted in Ireland, in the European Union. Our SMS, push-notification and crash-reporting providers also operate infrastructure outside Nigeria. This means personal data — including diagnostic reports — is transferred outside Nigeria in the ordinary course of the service working, and where that happens we take steps to ensure it remains protected to the standard required by the Nigeria Data Protection Act 2023.
10. How long we keep it
- Location history — 30 days. Location records are deleted automatically 30 days after they are collected. We keep the shortest history consistent with the service being useful, because a movement history is the most sensitive information we hold.
- Alert records — 12 months. The fact of an alert, its time, and how it was resolved are kept for twelve months so that an incident can be reconstructed if needed.
- Duress episodes — 24 months from the point the episode is closed, including the location recorded during it. These are the records most likely to matter to a serious investigation long after the event, which is why they are kept longer than the rest.
- Diagnostic and crash reports — up to 90 days. Fault reports are kept for up to ninety days so that we can investigate and fix problems, and are then deleted.
- Account information — kept while your account exists. See section 11 for what happens when you close it.
- Emergency contact details — kept until you remove the contact or close your account.
11. Deleting your account
You can delete your account yourself, in two ways:
- In the app, from Settings.
- On the web, at mysafetrackapp.com/delete-account.html, confirming from your registered email address.
You can also write to us at support@mysafetrackapp.com from your registered address and we will action it for you.
Three things happen when you request deletion, and we would rather you knew them in advance than discovered them afterwards:
- There is a seven-day pause before anything is deleted, and you can cancel during it from inside the app. This is deliberate: it means an account cannot be destroyed in a moment by someone who has taken your phone.
- Your contacts and SOS recipients are told straight away that your account is being deleted — at the point you ask, not seven days later. For the same reason: someone deleting an account under pressure should not be able to do it silently.
- Alert records are not deleted with the rest of your account. The record that an alert happened, when, and how it ended is kept for the periods in section 10 — twelve months for an ordinary alert, twenty-four for a duress episode — and then deleted. Everything else goes.
If a duress episode is still open, deletion waits until it is closed. An alarm that is still running is not cancelled by deleting the account that raised it.
12. Your rights
Under the Nigeria Data Protection Act 2023 you have the right to be informed about how your data is used, to obtain a copy of the personal data we hold about you, to have inaccurate data corrected, to have your data deleted, to withdraw your consent, and to object to or restrict certain processing.
Write to support@mysafetrackapp.com and we will respond within 30 days.
You also have the right to complain to the Nigeria Data Protection Commission if you believe your data has been handled improperly.
13. Keeping data secure
We use encryption in transit, access controls enforced at the database itself so that data is restricted to the account it belongs to, authentication handled by our hosting provider rather than passwords stored by us, and hashed storage for passcodes.
Diagnostic and crash reports are limited to information about software faults — they do not include your location, your contacts, or the content of any alert.
No system can be guaranteed completely secure, but we take reasonable and appropriate measures to protect the data we hold and we review those measures as the product develops. If you find something that looks wrong, tell us at support@mysafetrackapp.com and we will treat it seriously.
14. Changes to this policy
We may update this policy as SafeTrack develops. When we make a material change we will update the version and date at the top of this page, and where the change significantly affects how your data is used we will tell you within the application rather than leaving you to find it here.
15. Contact
Questions about this policy, or requests concerning your personal data, should be sent to support@mysafetrackapp.com, or in writing to The Libri Limited at the registered address in section 1.