Privacy Policy

01Who we are

Safety Simple is operated by Unovate Simple Technologies Pvt Ltd, registered at 9-28-5, 3rd Floor, Sri Sri Narayana Enclave, Visakhapatnam, Andhra Pradesh, India 530003.

For questions about this policy or your information, contact us at hello@safetysimple.com.

02Our role: controller and processor

Website and account administration. For the website, for enquiries you send us, and for managing our relationship with customers, we decide how and why personal information is used. We are the controller of that information.

Content inside the platform. Our customers — airlines, operators and other organisations — use Safety Simple to record safety reports, investigations, hazards, incidents and continuity plans. For that content we act as a processor (service provider) on the customer’s behalf, under our agreement with them. If you use Safety Simple through your employer, your employer is the controller of that content, and their privacy notice applies to it. Please direct requests about it to them first; we will help them respond.

03Information we collect

When you visit the website

• No tracking. The website does not use analytics, advertising pixels or tracking cookies.
• Server logs. Our hosting provider automatically records technical information when pages are requested — IP address, browser type, the page requested and the time — to deliver the site and protect it from abuse.
• Messages you send us. If you email us, for example to book a demo, we receive your name, email address, organisation and whatever you include in the message.

When you use the platform

• Account information: name, work email address, organisation, role, station or site assignment, and your sign-in credentials. Passwords are stored only as one-way cryptographic hashes; we never see or store them in plain text.
• Content your organisation records: safety reports, narratives, occurrences, investigations, hazards, risk assessments, corrective actions, incidents, tasks, situation reports, continuity plans, attachments such as photos and documents, and the locations or map areas attached to them. Depending on how your organisation uses Safety Simple, this content may include information about you or other people involved in an event.
• Confidential reporting. Where your organisation enables it, the reporter’s identity is stored separately from the report and access to it is restricted.
• Audit and security logs: a record of actions taken in the platform — who did what and when — together with technical details such as IP address and request identifiers. Safety records are audited by design; these logs are part of what makes them trustworthy.
• Mobile app: device and app version information, and data you capture while offline, which is held on your device until it can be sent. The app accesses your camera or photo library only when you choose to attach evidence.

04How we use information

• To provide, operate, secure and support the platform for our customers.
• To authenticate users and enforce each organisation’s roles and permissions.
• To send service messages, such as invitations, notifications and incident alerts your organisation configures.
• To respond to enquiries and demo requests.
• To detect, investigate and prevent fraud, abuse and security incidents.
• To maintain and improve the platform, using aggregated or technical information.
• To comply with legal obligations and enforce our agreements.

05AI-assisted features

Some features may suggest classifications or summaries. Suggestions are always shown as drafts for a person to accept or reject; AI never sets a severity, accepts a risk or makes a decision on its own. We do not use customer content to train AI models for other customers.

06Legal bases (EEA, UK and similar laws)

Where data-protection laws such as the GDPR or UK GDPR apply, we rely on:

• Contract — to provide the platform under our customer agreements;
• Legitimate interests — to secure the service, prevent abuse, respond to enquiries and improve our products;
• Legal obligation — where the law requires us to keep or disclose information;
• Consent — where we ask for it, which you may withdraw at any time.

For content inside the platform, the customer determines the legal basis as controller.

07How we share information

We do not sell personal information, and we do not share it for advertising.

We share it only:

• Within your organisation, according to the roles and permissions your organisation configures. Each organisation’s data is isolated from every other organisation’s at the database level.
• With service providers who host and run the platform for us — such as cloud hosting, database, file storage and email delivery providers — under contracts that limit their use of the information to providing their service to us. A current list of these sub-processors is available on request.
• When required by law, or to protect the rights, safety and security of our users, customers or others.
• In a business transfer, such as a merger or acquisition, subject to this policy.

08International transfers

Our service providers may process information in countries other than your own. Where we transfer personal information out of the EEA, UK or another region with transfer rules, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

09How long we keep information

We keep platform content for as long as our customer’s agreement requires, and then delete or return it as that agreement specifies. Safety and regulatory records often have mandatory retention periods; your organisation sets and is responsible for these.

We keep enquiry emails for as long as needed to respond and maintain our business relationship, and server and security logs for a limited period needed to operate and protect the service.

10Security

We protect information with technical and organisational measures appropriate to the risk, including encryption in transit, isolation of each organisation’s data enforced in the database, hashed passwords, role-based access control and an audit trail of actions. No system is perfectly secure; if we become aware of a breach affecting your information, we will notify affected customers and individuals as the law requires.

11Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. You also have the right to complain to your local data-protection authority.

To exercise these rights, contact hello@safetysimple.com. If your request concerns content your organisation controls, we will refer it to them. We will not discriminate against you for exercising your rights.

12Children

Safety Simple is a workplace tool for organisations. It is not directed at children, and we do not knowingly collect information from anyone under 16.

13Changes to this policy

We may update this policy from time to time. We will post the new version here with a new effective date and, where changes are significant, let customers know in advance.

14Contact us

Unovate Simple Technologies Pvt Ltd, 9-28-5, 3rd Floor, Sri Sri Narayana Enclave, Visakhapatnam, Andhra Pradesh, India 530003. Email: hello@safetysimple.com.