Skip to main content

Privacy Policy

Last updated: August 24, 2026

1. Controller

The controller for SafelyShare account and service data is:

  • Netsec Nederland
  • Driebergen-Rijsenburg, Nederland
  • Privacy: privacy@safelyshare.app
  • Telephone: +31 6 25 24 65 89

2. Safe files and keys

Selected safe files are encrypted with AES-256-GCM on the sender's device and transferred over a local connection to the recipient's device. The SafelyShare application server does not receive or store those files. It stores account and safe metadata, the recipient public key, and a wrapped safe key so the timelock can release it when due. The recipient private key remains encrypted in device secure storage.

3. Data we process

  • Account identity, email verification status, password hash, preferences, roles, and account history.
  • Device identifiers, push tokens, heartbeat times, sessions, IP and request data, and security logs.
  • Safe metadata, timelock settings, extension events, recipients, public keys, and wrapped keys. This does not include the contents of safe files.
  • Plan, trial eligibility, billing source, product, status, renewal and grace dates, provider customer, transaction and subscription identifiers, refunds, disputes, and audited support overrides. SafelyShare does not receive full card details from Mollie, Apple, or Google.
  • Family membership, roles, invitation email addresses, hashed invitation tokens, acceptance and expiry events, and management actions.
  • Support correspondence and billing and service notifications.

4. Why we process it

  • Contract: to authenticate users and manage safes, timelocks, subscriptions, Families, trials, grace periods, support, and required service messages.
  • Legal obligation: for accounting, tax records, lawful requests, and the administration of consumer rights.
  • Legitimate interests: to secure the service, prevent fraud and duplicate purchase binding, fix faults, and keep minimal evidence of administrative actions. We balance these interests against user rights.
  • Consent: only when we specifically ask for it, such as for optional marketing or device permissions that legally require consent. You can withdraw your consent.

5. Families and invitations

Family members see each other's display names and roles. Owners also see member email addresses and pending invitations. Family membership never reveals safes, files, keys, recipients, or activity. The owner provides the invitation address. The first invitation names the owner as the source, links to this policy, and lets the recipient decline. Pending invitation tokens expire after seven days. They become permanently invalid when used, revoked, resent, or expired. We delete the expired invitation record 30 days after expiry.

6. Payments and service providers

Mollie processes website payments as an independent controller under its own privacy statement. Apple and Google independently process store accounts and payment methods. SafelyShare receives signed transaction, subscription, renewal, refund, and status data needed to provide access. We share only the identifiers and transaction details needed for payment, verification, support, fraud prevention, and legal compliance.

  • Hosting and database: Dedicated Plesk server hosted in Germany (EU)
  • Email delivery: Self-hosted mail on safelyshare.app, Germany (EU)
  • Support: Self-hosted support@safelyshare.app mailbox, Germany (EU)
  • Payments and stores: Mollie, Apple App Store, and Google Play
  • Push delivery: Apple Push Notification service and Firebase Cloud Messaging
  • Language suggestion: if no language preference is stored, country.is receives the browser IP once per tab session and returns a country code. SafelyShare does not keep it.

7. International transfers

Some providers may process data outside the European Economic Area. The applicable countries, adequacy decisions, standard contractual clauses, and means to obtain safeguards must be confirmed before launch: Account and safe data stay on EU servers; Apple, Google and Mollie process payments as independent controllers under their own safeguards.

8. Automated Pro decisions

The system uses verified provider events, paid-through dates, manual cancellations, payment failures, refunds or revocations, Family membership, and time to activate, continue, restore, or end Pro, or place it in grace. A failed automatic renewal keeps Pro active for one calendar month. Manual cancellations and refunds do not. This is contract administration, not advertising profiling. Contact support if a provider record or decision is wrong. Support can apply an audited manual override.

9. Recovery on your device

When Pro ends, the mobile app may keep your automatic-extension choices in an encrypted file on the device, protected by an account and device key. SafelyShare cannot read or recover this file. The app tries to restore your choices when Pro returns on the same installation and device. After reinstalling the app, clearing its data, or changing devices, the app can no longer access or decrypt the recovery file.

10. Retention and deletion

  • We keep active account, Family, subscription, and safe metadata for as long as we need it to provide the service. Account deletion removes active account records and owned safes, subject to the exceptions below.
  • We keep payment and tax records until ten years after the end of the calendar year in which the transaction took place. These records include provider transaction identifiers needed for accounting and proof of purchase ownership.
  • We delete expired invitation records 30 days after expiry.
  • We keep Family management audit records for two years after the recorded action.
  • We keep operational and security event payloads for 30 days.
  • We keep backups for 30 days.
  • We keep personal data from support and withdrawal cases for two years after closing the case.

We may keep limited records when required by law or needed for legal claims. Deleted data may remain in protected backups until they expire. We restore it to active systems only for disaster recovery.

11. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, or portability. You may also object to processing based on legitimate interests. You can withdraw consent without affecting earlier lawful processing and complain to the Autoriteit Persoonsgegevens or your local authority. Contact privacy@safelyshare.app. We may not be able to delete mandatory financial records or data needed for legal claims immediately.

12. Children, security, and changes

SafelyShare is for users aged 16 or older. Every subscription purchaser and Family owner must be 18 or older. SafelyShare uses encryption, TLS, password hashing, access controls, signed provider data, and least-privilege administration, but no system is risk-free. Material privacy changes are notified when required; the updated date is shown above.