Privacy Policy

1. Background Location Disclosure (Google Play Compliant)

Nirvoyo accesses and processes your device location in the background (even when the app is closed, minimized, not in use, or your screen is turned off) strictly and exclusively while an active safety journey or monitoring session is deliberately initiated by you.

Operational Conditions: Background location is accessed ONLY and EXCLUSIVELY while:

• An active safety monitoring session or open outing is deliberately turned on by you;
• An active Planned Journey or Timed Visit is underway;
• An authorized commute routine is automatically initiated based on your explicit auto-start settings; or
• An emergency SOS countdown or active alert trigger is in progress.

Prominent Foreground Notification: Whenever background tracking is active, Nirvoyo runs a visible Android Foreground Service displaying a continuous, persistent, non-dismissible notification in your device status bar, clearly alerting you that active safety monitoring is running with an immediate "Stop Monitoring" action button.

Specific Purposes of Background Location:

• Continuous Journey Sharing: Allows your authorized Trusted Contacts to view your live movement, route trace, and arrival progress on their map while your phone remains safely locked in your pocket or bag.
• Emergency SOS Coordinate Dispatch: Ensures your exact, real-time GPS coordinates are immediately packaged and dispatched to your Trusted Contacts if you trigger an SOS alert or if a severe kinetic collision is detected.
• Milestone & Delay Detection: Detects unexpected stops, delays, or route divergences during planned journeys to present proactive safety check-in prompts.

User Control & Immediate Termination: As soon as you tap "Stop Monitoring", "End Session", or complete your journey, background monitoring ceases immediately and completely. The app does not track background location when an active safety session is off. You can manage sharing in Settings → Privacy & sharing, or revoke location permissions in Android system settings at any time.

2. Categories of Information We Collect

2.1 Account & Identity Data

• Name, email address, password hash, and optional telephone number.
• Profile picture URL and Google OAuth identifier (if you choose Google Sign-In).

2.2 Precise Location & Movement Telemetry

• Precise geographic coordinates (latitude, longitude, speed, altitude, bearing, and accuracy).
• Route traces and polyline breadcrumbs recorded during active monitoring sessions and planned journeys.
• Physical activity cadence (step frequency and movement state classifications) gathered during active sessions to communicate status awareness to your trusted circle.

2.3 Journey Assurance & Safety Planning Data

• Planned journey origin, destination coordinates, estimated arrival times (ETAs), and chosen travel modes.
• Timed visit durations, sealed private notes, and responder instructions.
• Smart check-in milestone responses (e.g. "Safe", "Need 10 min", "Request Help").
• Commute routine schedules and auto-start geofence configurations.

2.4 Device Health & Sensor Telemetry

• Battery percentage, charging state, and cellular/Wi-Fi connectivity to alert trusted contacts if your phone is about to power off during a journey.
• Sensor hub accelerometer and gyroscope dynamics sampled during active monitoring for multi-signature crash detection (frontal, rollover, rear-end, cushioned impact).
• Incident logs (timestamp, alert severity, battery, and location at the moment of emergency SOS trigger).
• Optional incident evidence (user-recorded text notes and secure photo attachments).

2.5 Trusted Circle & Social Coordination

• Names, phone numbers, and permission designations of individuals you explicitly invite to your safety circle. Nirvoyo does not silently scrape or upload your entire contact address book.
• Meet-task rendezvous coordinates and verified arrival confirmations.
• Diagnostic logs (access timestamps, IP address, and browser agent) recorded when emergency contacts access the web response portal (respond.nirvoyo.com) via SMS or email links.

2.6 Website Visitors & Early-Access List

• Early-access list: if you join early access on nirvoyo.com, we store your email address, the time you consented, the version of the consent wording and, once you confirm, the time of confirmation. We send one email (through Resend) asking you to confirm; addresses not confirmed within 7 days are deleted automatically. We use confirmed addresses only to send Nirvoyo launch and early-access news. They are stored in our own database (OVHcloud, Canada), never sold or shared, and kept until we stop sending launch updates or you leave the list, whichever comes first. Every email has a link that deletes your address at once, or email [email protected].
• Server logs: our web servers record each request (IP address, page requested, time, response status and browser type) for security and troubleshooting. These logs are deleted after 14 days.
• No trackers: nirvoyo.com uses no analytics, advertising or social-media trackers, and loads its fonts and images from nirvoyo.com itself. Cloudflare may set a strictly necessary security cookie (__cf_bm) to tell people from bots.

3. How We Use Your Information

• To display live journey traces and arrival progress to contacts you explicitly authorize.
• To request push delivery when an SOS is triggered (delivery depends on connectivity, settings, and provider availability).
• To authenticate your identity, prevent unauthorized access, and support secure password recovery.
• To synchronize authorized safety updates between paired accounts.
• To provide sealed responder notes during overdue timed visits.
• We DO NOT use any collected data for advertising, profiling, behavioral targeting, or data brokerage.

4. Third-Party Subprocessors & Technical Infrastructure

We transmit data strictly to necessary, vetted technical infrastructure providers operating under strict confidentiality:

• OVHcloud: Dedicated cloud VPS hosting and local PostgreSQL 18 persistence (Beauharnois, Canada / BHS datacenter).
• Cloudflare, Inc.: Edge DNS, Full (Strict) SSL termination, DDoS protection, and origin proxy.
• Google LLC: Firebase Cloud Messaging (FCM HTTP v1) for high-priority push wakes, Google Identity OAuth 2.0, and Google Maps API.
• Backblaze, Inc.: AES-256 encrypted offsite database backups via Backblaze B2.
• Resend Inc.: Transactional email delivery: password recovery verification, emergency contact notifications, and early-access confirmation emails.
• Twilio Inc.: Automated emergency SMS dispatch for crash and SOS notifications.

5. Data Encryption, Storage & Retention

5.1 In-Transit Security: All network communication between the app, web portals, and servers uses HTTPS and WSS (TLS 1.2 or newer, TLS 1.3 where supported) with HTTP Strict Transport Security (HSTS).

5.2 On-Device Sandbox & Dual Room Architecture: Local tokens, session credentials, and offline outboxes are stored in Android-sandboxed storage. High-frequency GPS points in MapDatabase (v3) are pruned on a 7-day rolling basis. Command queues and cached plans in AssuranceDatabase (v2) are encrypted and account-isolated.

5.3 Data Retention Policy: Account profile data and trusted contact relationships are maintained for the active lifetime of your account. Location, route and movement history from safety monitoring is kept for 30 days, then deleted automatically. Journey plans keep their recorded location for up to 24 hours after sharing ends and their records for up to 30 days. Location and evidence connected to an SOS are kept for 30 days after the SOS ends; older alerts keep only their type and time. You can delete a journey's data from History at any time. History-sharing settings control contact access. Deleted data can remain in encrypted server backups for up to 35 days, after which the backups expire. When you delete your account, all personal data, pairing links, route history, journey plans, and incident telemetry are permanently and irrevocably deleted from our active databases.

6. Your Rights & Account Deletion Controls

Under GDPR, CCPA/CPRA, the India DPDP Act 2023, and Google Play Data Safety policies, you hold comprehensive privacy rights:

• Right of Access & Portability: View your profile, paired contacts, and journey history inside the app.
• Right to Revoke Sharing: Instantly toggle off live location broadcasting at any time with a single tap.
• Right to Rectification: Edit your name, phone number, and contacts in Settings.
• Right to Erasure ("Right to be Forgotten"):
  • Instant In-App Deletion: Open Settings → Password & security → Delete Account and Data. All active records are immediately purged.
  • Web Deletion Request: If the app is uninstalled, visit nirvoyo.com/delete-account or email [email protected].
• Right to Withdraw Consent: Revoke runtime permissions in Android system settings at any time.

7. Children's Privacy (Strict 18+ Requirement)

Nirvoyo is not directed to, marketed to, or designed for children under 18 years of age. We do not knowingly solicit or collect personal or location data from minors. If we discover an account was created by an unsupervised minor under 18, we will immediately terminate the account and permanently delete all associated personal and location records.

8. Data Protection Officer & Inquiries

For privacy questions, rights requests, or regulatory inquiries, contact our Data Protection Officer:

Data Protection & Grievance Officer
Nirvoyo Safety Systems — Legal Compliance Department
Email: [email protected]
Web: https://nirvoyo.com/privacy