Privacy Policy

INTRODUCTION

We Are United ("we," "our," or "us") is a community safety application designed to protect vulnerable communities through anonymous alert sharing and safety resources. We understand that privacy is not just a preference but a matter of safety and potentially life-or-death for our users.

This Privacy Policy explains how we collect, use, protect, and share information when you use our progressive web application (PWA) and related services.

OUR CORE PRIVACY COMMITMENTS

1. NO PERSONAL IDENTIFICATION

• We do not collect names, email addresses, phone numbers, or any personal identifiers
• We do not require account creation or user registration
• We do not track individual users across sessions
• We do not create user profiles or behavioral patterns
• We do not use persistent identifiers that could link you across sessions
• We do not store data that could be reverse-engineered to identify devices or users

2. LOCATION PRIVACY PROTECTION

• Location Fuzzing: All location data is automatically "fuzzed" with random noise (approximately 100-200 meter radius) before any processing
• No Location History: We never store your location history or movement patterns
• Ephemeral Location Use: Location data exists only during your active session and is immediately discarded
• Anonymous Queries: Location-based queries contain no user identification
• Smart Home Detection: Home location data is fuzzed and auto-expires after 30 days
• Emergency Location: Emergency location sharing uses reduced fuzzing (50m) and auto-expires after 2 hours

3. LOCAL-FIRST DATA STORAGE

• Critical personal data (emergency contacts, settings) is stored locally on your device only
• Local data is encrypted using device-specific encryption keys
• We cannot access your locally stored data
• You maintain complete control over your personal information

4. DATA MINIMIZATION

• We collect only the absolute minimum data necessary for app functionality
• All data collection is purpose-limited and temporary
• We do not collect data "just in case" or for future use
• Data is automatically deleted when no longer needed
• We regularly audit our data practices to ensure minimal collection

INFORMATION WE COLLECT AND HOW WE USE IT

Information We DO Collect:

Anonymous Community Alerts

• What: Alert type (e.g., "ICE activity," "patrol," "raid"), fuzzed location coordinates, timestamp
• How Used: To display user-submitted reports to other community members in general areas
• Retention: Alerts automatically expire after 24-72 hours depending on type
• Note: Location coordinates are intentionally imprecise to protect reporter privacy

Community Resources Data

• What: Public information about legal aid organizations, know-your-rights resources, community support services
• How Used: To provide users with relevant safety and legal resources
• Source: Publicly available information from verified organizations

Technical Data (Anonymous)

• What: General app performance metrics, crash reports (without personal data), general usage patterns
• How Used: To improve app stability and performance
• Note: This data cannot be linked to individual users

Privacy-First Analytics

• What: Anonymous usage statistics, feature interaction patterns, performance metrics
• How Used: To improve app functionality and user experience
• Privacy Measures: All data is aggregated, anonymized, and cannot identify individuals
• Retention: Raw data retained for 90 days maximum, aggregated data retained indefinitely
• User Control: Analytics can be disabled through app settings

Device Identifiers (FCM Tokens)

• What: Firebase Cloud Messaging (FCM) generates temporary tokens for push notifications
• How Used: Only for topic-based push notifications (area alerts)
• Storage: FCM tokens are managed by Firebase, not stored in our databases
• Privacy: We do not store hardware device IDs, IMEI, or other permanent identifiers
• Reverse Tracking Protection: FCM tokens cannot be used to identify or track individual devices or users. They are temporary, app-specific identifiers that cannot be reverse-engineered to reveal device or user identity.
• Control: Users can disable push notifications through device settings

Information We DO NOT Collect:

• Personal names or contact information
• Precise location coordinates or location history
• Hardware device IDs (IMEI, Android ID, etc.)
• Personal documents or communications content
• User accounts, usernames, or passwords
• Social media profiles or external account information
• Payment information (app is free)
• Emergency contact details (stored locally only)

ALERT SHARING AND COMMUNICATION

Anonymous Alert Sharing

• Privacy-Preserving Sharing: Alerts can be shared anonymously without exposing user identity or precise location
• Temporary Sharing Links: Shared alert links expire after 4 hours and are automatically deleted
• No Personal Data: Shared alerts contain only anonymous, fuzzed location data and alert information
• User Control: Users choose when and how to share alerts through the app's sharing interface

Sharing Methods

• Shareable Links: Anonymous URLs that expire after 4 hours
• QR Codes: Scannable codes for easy sharing
• System Share: Alerts can be shared through your device's native sharing features (SMS, social media, messaging apps)
• Signal Bot: Automatic sharing via Signal messaging groups
• Copy Link: Shareable links can be copied to clipboard for manual sharing

Sharing Privacy Protections

• Anonymous Tokens: Each shared alert uses a unique, anonymous token that cannot be traced back to the original user
• Location Anonymization: Shared alerts use the same location fuzzing as regular alerts
• No User Tracking: We do not track who shares or views shared alerts
• Rate Limiting: Maximum 100 views per link to prevent abuse
• Automatic Cleanup: Expired sharing tokens are automatically removed from our systems
• User Control: Users can choose whether to share alerts and through which methods
• Third-Party Services: System sharing uses your device's native sharing capabilities; we have no control over how you share content

EMERGENCY FEATURES AND DATA HANDLING

Emergency Wipe Functionality

• Instant Deletion: Emergency wipe immediately deletes all app data from your device
• Comprehensive Coverage: Clears settings, cache, location data, alert history, and encryption keys
• Manual Trigger: Available through app settings or emergency trigger
• No Recovery: Emergency wipe is permanent and cannot be undone

Emergency Location Sharing

• Temporary Access: Emergency location sharing creates temporary, expiring access tokens
• Reduced Fuzzing: Emergency locations use 50m fuzzing instead of 100-200m
• Auto-Expiration: Emergency location data automatically expires after 2 hours
• Secure Transmission: Emergency locations are encrypted and transmitted securely

USER-GENERATED CONTENT DISCLAIMERS

Our Role vs. User Responsibility

• We Provide: Only the technical platform for users to share information
• We Do NOT Provide: Verified information, official data, or fact-checked content
• Users Provide: All alerts, reports, and community information
• Users Are Responsible: For the accuracy and consequences of information they submit and act upon

CROSS-PLATFORM PRIVACY CONSISTENCY

We Are United maintains the same high privacy standards across all platforms (iOS, Android, Web). Our privacy-first architecture ensures consistent data handling principles, though platform-specific security characteristics may vary:

• Consistent Privacy Principles: All platforms follow the same privacy-by-design approach
• Unified Data Handling: Location fuzzing, anonymous sessions, and local storage work consistently
• No Platform Bias: We do not collect more data on any particular platform
• Platform-Aware Security: Each platform implements appropriate security measures for its environment

Platform-Specific Considerations

• Mobile Apps (iOS/Android): Benefit from native platform security features, sandboxing, and app store security requirements
• Web Platform: Relies on browser security features and HTTPS encryption; users should ensure they're using secure, up-to-date browsers
• Data Storage: Mobile apps use device-specific secure storage, while web uses browser storage mechanisms
• Network Security: All platforms use encrypted connections, but web users should be aware of their network environment

THIRD-PARTY SERVICES

Firebase (Google)

• Purpose: Anonymous data storage, push notifications, and app functionality
• Data Shared: Only anonymous, fuzzed alert data and topic subscriptions
• Push Notifications: We use Firebase Cloud Messaging (FCM) for topic-based notifications. FCM generates temporary tokens that are managed by Firebase and used only for area-based alert subscriptions. We do not store device identifiers in our own databases.
• Topic Subscriptions: Users are automatically subscribed to location-based topics (e.g., "area_ABC123_alerts") based on their general area. No personal device information is stored in our databases.
• Privacy Policy: https://policies.google.com/privacy

Google Maps (For Map Display Only)

• Purpose: Displaying community alerts on maps
• Data Shared: General geographic area for map loading (not your precise location)
• Privacy Policy: https://policies.google.com/privacy

Device Sharing Services

• Purpose: Enable sharing of alerts via SMS, social media, messaging apps, and other system sharing options
• Data Shared: Only the anonymous sharing link and alert information you choose to share
• Note: We have no control over how you use your device's sharing capabilities or what you share through them

Signal Bot Integration

• Purpose: Automatic sharing of high-priority alerts to Signal messaging groups
• Data Shared: Anonymous alert information with fuzzed location data only
• Privacy: All sharing is anonymous with no user identification
• Control: Users can disable Signal sharing in app settings

DATA RETENTION AND DELETION

Anonymous Alert Data

• Automatic Expiration: Community alerts automatically expire based on type and severity (typically 4-24 hours)
• Server Cleanup: Old alerts are automatically deleted from servers after 48 hours
• Local Cleanup: Local alert cache is automatically cleaned every 6 hours with configurable retention (1-7 days)
• No Manual Deletion: We cannot manually delete specific alerts as they are anonymous

Local Data

• User Control: You can delete all local data through app settings or emergency wipe
• Automatic Cleanup: Local data is automatically cleaned every 6 hours (performance data: 7 days, temp files: 24 hours, network cache: 6 hours)
• No Server Storage: Local data is never stored on our servers
• Device Dependencies: Local data deletion depends on your device's capabilities

Sharing Data

• Token Expiration: Shared alert tokens automatically expire after 4 hours
• Rate Limiting: Maximum 100 views per link to prevent abuse
• Automatic Cleanup: Expired sharing tokens are cleaned up every hour
• Stale Token Removal: Tokens not accessed in 7 days are automatically removed

Analytics and Performance Data

• Performance Data: Retained for 7 days, then automatically deleted
• Analytics Data: Retained for 14 days, then automatically deleted
• Diagnostics Data: Retained for 7 days, then automatically deleted
• User Control: Web users can control analytics through cookie consent settings; mobile app users can disable performance monitoring in advanced settings

YOUR RIGHTS AND CHOICES

Data Access and Control

• Local Data: You have complete control over all locally stored data
• Anonymous Data: We cannot provide access to anonymous data as it cannot be linked to individuals
• Cookie Consent (Web): On web platforms, you can control analytics, alerts, performance monitoring, and third-party services through cookie consent settings
• Emergency Wipe: You can instantly delete all app data through the emergency wipe feature in app settings

Privacy Settings

• Location Services: Can be disabled through device settings
• Emergency Features: Can be configured or disabled through app settings
• Notifications: Can be managed through device and app settings

PRIVACY BY DESIGN

We Are United was built with privacy as a fundamental design principle, not an afterthought. Our approach includes:

• Privacy-First Architecture: Every feature was designed with privacy as the primary consideration
• Default Privacy: All privacy protections are enabled by default
• No Opt-Out Required: Users don't need to configure settings to maintain privacy
• Continuous Privacy Review: All new features undergo privacy impact assessments
• Transparent Implementation: Our privacy measures are open and verifiable

SECURITY MEASURES

Technical Protections

• Network Security: HTTPS-only communication with certificate validation and traffic obfuscation
• Local Encryption: Local data uses platform-native secure storage with device-specific encryption keys
• Database Security: Firestore security rules with strict input validation and field-level access controls
• App Integrity: Runtime environment verification and tamper detection (mobile platforms)

Abuse Prevention

• Rate Limiting: API endpoints protected with configurable rate limits (3-30 requests per minute)
• IP Blocking: Automatic blocking of IPs with suspicious activity patterns
• Cost Monitoring: Real-time cost tracking with automatic alerts and emergency shutdown capability
• Pattern Detection: Client-side abuse prevention with device fingerprinting and geographic clustering detection

Data Protection

• Location Privacy: Multi-layer location protection including hashing, fuzzing, and area clustering
• Anonymous System: No user accounts, personal data collection, or behavioral tracking
• Emergency Wipe: Comprehensive data deletion capability for all local and cached data
• Automatic Cleanup: Scheduled data expiration and cleanup processes

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify users of any material changes by:

1. Posting the updated policy on our website
2. Updating the "Last Updated" date at the top of this policy
3. Providing notice through the app when possible

Your continued use of the app after any changes constitutes acceptance of the updated policy.

CONTACT INFORMATION

If you have questions about this Privacy Policy or our privacy practices, please contact us:

• Email: [email protected]
• Website: https://weareunited.app

We will respond to your inquiry within 30 days.

LEGAL BASIS AND JURISDICTION

This Privacy Policy is governed by applicable privacy laws and regulations. If any provision of this policy conflicts with applicable law, the law will take precedence.

For users in the European Union, this policy complies with the General Data Protection Regulation (GDPR). For users in California, this policy complies with the California Consumer Privacy Act (CCPA).