🛡 Safe2Go — Privacy Policy

1. Who We Are

Controller: DNEXTWELT UG (limited liability)

Address: Regenbogen 11, 68305 Mannheim, Germany

Email: poonam.singhal@dnextwelt.com

DNEXTWELT UG is the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR) and applicable German data protection law.

2. What Data We Collect

Account Data

• Name and email address (when you register)
• Password (stored as a bcrypt hash — we never store your plain password)
• Google account name and profile picture (if you sign in with Google)

Location Data

• Start and end coordinates you enter for journey planning
• Live GPS position during active journey tracking (only while you are using the tracking feature)
• We do not track your location in the background

Journey Data

• Routes you have planned (start, end, modes, cost, duration)
• Journey status (planned, completed)

Safety Data

• Emergency contact name and phone number (only if you set up Safety Mode)
• Personal safety code (stored hashed)

Payment Data

• Credit balance (number of credits you hold)
• Transaction history (credits purchased or used, with timestamps)
• Card details are never stored by us — all payments are processed directly by Stripe

Technical Data

• IP address and device type (collected at login for security purposes)
• Browser or app version

AI Conversation Data

• Messages you send to the AI assistant are processed in real time to generate responses
• We do not store AI conversation history on our servers

3. How We Use Your Data

4. Third-Party Services

We do not sell your data to any third party.

5. Data Retention

• Account data: Kept for as long as your account is active, then deleted within 30 days of account deletion request
• Journey history: Kept for 12 months, then automatically deleted
• Payment records: Kept for 7 years (required by German commercial law)
• Safety profiles: Deleted immediately upon account deletion
• IP / device logs: Kept for 90 days for security purposes

6. Your Rights Under GDPR

As an EU/UK resident you have the right to:

• Access — request a copy of all personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your account and all associated data
• Portability — receive your data in a machine-readable format
• Restriction — ask us to limit how we process your data
• Objection — object to processing based on legitimate interest
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at poonam.singhal@dnextwelt.com. We will respond within 30 days.

You also have the right to lodge a complaint with the German data protection authority: Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) at bfdi.bund.de

7. Cookies

The Safe2Go web app uses only essential storage:

• s2g_token — your login session token (localStorage)
• s2g_user — your name and email for display (localStorage)
• s2g_lang — your preferred language (localStorage)

We do not use advertising cookies, tracking pixels, or analytics cookies.

8. Children's Privacy

Safe2Go is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it immediately.

9. International Transfers

Your data is hosted on Railway servers. AI requests are processed by Anthropic (USA) under Standard Contractual Clauses (SCCs) as approved by the European Commission. Payments are processed by Stripe (USA/Ireland) under SCCs.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or via an in-app notice. The date at the top of this page shows when it was last updated.

11. Contact Us

DNEXTWELT UG (limited liability)
Regenbogen 11, 68305 Mannheim, Germany
Email: poonam.singhal@dnextwelt.com