Safe Word · A Campflame app
Safe Word privacy policy
Your family phrase stays on your phone. To reach the right people during a check, Safe Word stores your family's names, phone numbers and check history on our servers, where only your family can see them.
Effective 25 September 2026.
Who is responsible
Safe Word is a Campflame app for iPhone and Android. Contact safeword.support@campflame.dev with privacy or support questions. This policy covers the apps, the web page family members without the app may open from a text message, and this information website.
No login, one family
You don't create a username or password. When you open Safe Word, Firebase Authentication gives your phone an anonymous account with a random identifier. You join a family by accepting an invitation, and the family is linked to that identifier. Deleting the app does not delete the family's records on our servers.
What your family stores
The family: its country and language (which choose the local help shown), its plan, who created it and who belongs to it.
Each member: the name the family uses for them, their roles (Protector, Protected, Relative, Guardian), their phone number and any other numbers added for them, whether they use iPhone, Android or neither, whether notifications and loud alerts are on, when they joined and when they last practised.
Invitations: the invited person's name, roles and phone number, who invited them, and when the invitation expires. When you invite someone, you send the invitation yourself through your phone's share sheet or messaging app; Safe Word does not send it for you.
Your devices: a push token for delivering alerts to your phone, the platform and the app version.
What a check records
When someone starts a check, Safe Word records who is checking, who the caller claims to be, what kind of contact it is (family, official or someone at the door), what the caller is asking for (such as money, a payment method, a code, going somewhere or opening the door), whether the caller asked for secrecy, whether a phone call was in progress (only yes or no), each person's reply, the result, whether it was a practice, and the times.
A red result can be decided on your phone without waiting for the network. The rest of the check runs on our servers so it can alert the right people and keep everyone's screens in step.
What Safe Word never collects
- Your family phrase. It is never sent to our servers. If you turn on the optional reminder, it is kept on that phone only: in the iPhone Keychain, available only while the phone is unlocked and never moved to another device, or encrypted with an Android Keystore key and excluded from backups.
- Your contacts, location, microphone or call audio. Safe Word doesn't ask for these permissions.
- Who is calling you. On iPhone the app learns only whether a call is connected. On Android it uses the phone-state permission only to notice when a call starts and ends. It never sees the caller's number, never hears the call and stores no call details beyond “a call was in progress”.
- Advertising or analytics data. Safe Word has no ads, no analytics or crash-reporting SDK and no tracking, and it does not use the advertising identifier.
Who in your family can see what
Everyone in your family can see every member's name, roles and phone numbers, including any other numbers added for them. This lets anyone call the right person during a check. Please only add people who agree to share their number with the family.
Guardians can see every check in the family. Other members can see the checks they are part of: the person checking, the person the caller claimed to be, and anyone else alerted. Invitations are visible only to the person who created them. Only your own phone can see its push token. Nobody outside your family can read these records through the app.
Alerts and text messages
Alerts reach phones through Apple Push Notification service and Firebase Cloud Messaging. An alert carries the details the other person needs to act, including the names of the people in the check, the protected person's phone number and what the caller is asking for. These details can appear on a lock screen.
A family member who doesn't have the app can be sent a text message instead, when text messages are available in your country. The message contains the names of the people involved and a link that works for 30 minutes. It is sent to that member's number through an SMS provider; we will name the provider here before text messages are switched on. Safe Word sends at most 30 texts per family each month and keeps a monthly count.
The link opens a page served by Firebase Hosting. The link itself carries the check's details the page needs to show, including the names and the protected person's phone number; it is signed but not encrypted, so treat it like the message it arrived in. If the person taps “No, it's not me”, the page sends only the link back and we add that reply to the check. The page sets no cookies, stores nothing on the phone and loads nothing from other sites.
Plans and purchases
Every plan includes every feature; plans differ only in how many people the family can add. Purchases are handled by Apple or Google Play, and we never see your card details. RevenueCat processes purchase receipts and subscription status for us. So that one subscription covers the whole family, RevenueCat's user identifier is your family's random identifier, and each member's phone uses it to check the family's plan; before you join a family, RevenueCat uses a random anonymous identifier. Our servers keep a copy of which plan is active. Deleting your data does not cancel a subscription; manage it in the App Store or Google Play.
Where your data is processed
Safe Word's servers run on Google Firebase: Authentication, Cloud Firestore, Cloud Functions, Cloud Tasks, Cloud Messaging, Hosting and Cloud Logging, which keeps technical records of server operations. Our server code runs in Google Cloud's europe-west1 region (Belgium). Apple, Google, RevenueCat and our SMS provider may process information in countries outside your own under their own privacy terms. We do not sell personal information or share it for advertising.
How long we keep it
Family, member and check records are kept while your family uses Safe Word, so the family can look back at past checks. There is no automatic deletion schedule for check history. Invitations stop working after 7 days and text-message links after 30 minutes. Alerts that can't be delivered expire after 30 minutes. A push token is removed when the push service reports it is no longer valid. Short-lived records used to limit repeated requests are deleted automatically.
Your choices and deletion
You can change your own name and notification settings in the app. The Protector can change members' roles and phone numbers. To get a copy of your data, correct it, leave a family or delete your data or your whole family, email safeword.support@campflame.dev. We will confirm the request with you and with your family's Protector where it affects the family, then tell you what was removed. Records of past checks may keep a note that a former member took part, without their name or number. An in-app way to leave a family and delete your data is being built; this policy will describe it when it arrives.
Applicable law may give you further rights, such as objecting to processing or complaining to a data protection authority.
Adults
Safe Word is made for adults protecting their families. It is not directed to children, and we don't knowingly collect information from children.
This website
These pages are part of campflame.dev, hosted by Sevalla. We add no analytics script, advertising tracker, contact form or account system. The hosting provider processes connection and security information needed to deliver the website. See the Campflame website privacy policy. Emailing support shares your email address, message and any attachments you choose to send with our support mailbox provider.
Changes and contact
We will update this policy when Safe Word's features or data practices change, and the effective date above will change with it. For privacy or support questions, contact safeword.support@campflame.dev. Safe Word is a family verification tool and doesn't replace emergency services.