Privacy policy

Last updated: 18 September 2026

Who we are

SafeAlert is operated by [YOUR COMPANY NAME], [YOUR REGISTERED ADDRESS], United Kingdom. For anything about your data, email privacy@safealert.uk.

We are the data controller for the information described below, under the UK General Data Protection Regulation and the Data Protection Act 2018.

What we collect and why

When you create an account

• Your email address — to send you alerts and to let you sign in.
• Your first name — so emails are addressed to you properly.
• Your region of the UK — so we can tell you when a scam is hitting your area. “UK wide” is fine if you would rather not say.
• Your password — stored only as an encrypted one-way hash. We cannot read it.

Lawful basis: performance of a contract (providing the service you signed up for).

When you check a message

We do not store the message. It is analysed and then discarded. We keep only the result (for example “likely scam”) and a score, so we can measure how well the checker is working. That record cannot be traced back to the message.

Lawful basis: legitimate interests (improving accuracy).

When you use the app

• A push notification token — an anonymous identifier your phone gives us so we can send you alerts. Delete the app and it stops working.
• Which alerts you opened — so we can show you what you saved and see which guides are useful.

When you pay

Payments are handled entirely by Stripe. We never see or store your card number. We keep only a Stripe customer reference so we know your plan is active.

Who we share it with

We use a small number of suppliers, and only for the job described:

• Our hosting provider — runs the service and stores the database.
• Stripe — takes payments.
• Expo — delivers push notifications to your phone.
• Our email provider — delivers your alerts.
• Anthropic — helps analyse messages you check. The text is sent for analysis and is not used to train their models.

We never sell your details, and we never share them for advertising. We would only disclose information if required to by law.

Where your data is kept

Our database is hosted within the UK or the European Economic Area. Some suppliers listed above process data outside the UK. Where they do, the transfer is covered by UK International Data Transfer Agreements or an adequacy decision.

How long we keep it

• Your account — until you delete it.
• Dormant accounts — deleted after 3 years of no sign-ins, after we email you first.
• Message check results — 12 months, without any link to the message text.
• Payment records — 7 years, because tax law requires it.

Your rights

Under UK data protection law you can ask us to:

• Give you a copy of everything we hold. (Use “Download my data” in My account — it is instant.)
• Correct anything that is wrong.
• Delete your account and all your data. (Use “Delete my account” — it is immediate and permanent.)
• Stop sending you emails. (Change this in My account, or use the unsubscribe link.)
• Give you your data in a portable format.

Email privacy@safealert.uk and we will reply within 30 days. If you are unhappy with how we handle it, you can complain to the Information Commissioner’s Office on 0303 123 1113.

Cookies

We do not use advertising or tracking cookies. We store one item in your browser to keep you signed in, and one to remember your chosen text size. Nothing else.

Children

SafeAlert is intended for adults. We do not knowingly collect information about anyone under 16.

Changes to this policy

If we change anything important we will email you before it takes effect.