1. Information We Collect

Information you provide

• Account information: Email address, username, display name, bio, and profile photo when you register
• Incident reports: Title, description, category, severity, photos, and videos you submit
• Messages: Direct messages you send to other users
• Community content: Comments, polls, and community alerts you create

Information collected automatically

• Location data: GPS coordinates when you submit an incident report or activate the SOS emergency feature (only when you grant permission)
• Device information: Push notification token to deliver alerts to your device
• Usage data: Which features you use and how often (for improving the app)

2. How We Use Your Information

• To create and manage your account
• To display incident reports on the community feed and map
• To send push notifications about nearby incidents and emergency alerts
• To enable direct messaging between users
• To calculate reputation scores and badges
• To allow administrators to moderate content and remove false reports
• To improve the app experience over time

3. Location Data

X-GuarD requests location access for the following purposes:

• Incident reporting: To auto-fill GPS coordinates and address when you submit a report
• SOS Emergency: To broadcast your precise location to the community when you activate the emergency alert
• Map view: To show your approximate position on the incident map

We do not track your location in the background. Location is only accessed when you actively use location-dependent features.

4. Photos and Videos

Photos and videos you attach to incident reports are uploaded to secure cloud storage (Supabase) and made publicly visible on the community feed. Do not share images that contain sensitive personal information about identifiable individuals without their consent.

5. Data Sharing

We do not sell your personal data to third parties. Your data may be shared with:

• Other users: Your username, profile, incidents, and public activity are visible to other registered users
• Supabase: Our database and storage provider (supabase.com) — see their privacy policy at supabase.com/privacy
• Expo: Push notification delivery via Expo's push service (expo.dev)
• Jitsi Meet: If you use live streaming, your video stream is processed by meet.jit.si
• Law enforcement: If required by law or to prevent harm

6. Data Retention

• Your account data is retained while your account is active
• Incident reports remain visible unless deleted by you or an administrator
• Direct messages are retained until deleted
• You may request deletion of your account and all associated data at any time

7. Security

We use industry-standard security measures including:

• Row Level Security (RLS) on all database tables
• Encrypted data transmission (HTTPS/TLS)
• Supabase authentication with secure session management
• Private messages accessible only to sender and receiver

8. Children's Privacy

X-GuarD is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and data
• Withdraw consent for location access at any time via your device settings
• Export your data (available via Profile → Settings → Export My Data)

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via a push notification or in-app alert. Continued use of the app after changes constitutes acceptance of the updated policy.