Data Safety

This Data Safety page applies to both the SafeCase website and the SafeCase mobile application.

SafeCase is designed for people managing sensitive information. Protecting your data is central to everything we do.

This page explains how your information is protected, stored and managed within SafeCase.

How We Protect Your Data

SafeCase uses Google Firebase to store and process data.

Firebase provides:

• Encryption in transit using TLS.
• Encryption at rest for stored information.
• Automatic backup and redundancy systems.
• Physical and network security managed by Google.

These measures help protect your information from unauthorised access, loss and misuse.

Access Controls

SafeCase uses account-based access controls and Firebase Security Rules to help ensure users can only access information associated with their own account.

These controls are designed to protect:

• Case files.
• Evidence records.
• Incident records.
• Audit logs.
• User profile information.
• Uploaded documents and media.

No other SafeCase user can access your information through the platform.

SafeCase administrators do not have access to your information through the application itself.

What Information Is Stored

Depending on how you use SafeCase, the following information may be stored:

Where Your Data Is Stored

SafeCase is operated from Australia.

However, SafeCase uses Google Firebase infrastructure, which may store or process information on servers located outside Australia, including the United States.

Google maintains security, privacy and data processing controls for its infrastructure.

By using SafeCase, you consent to the storage and processing of information where reasonably necessary to provide the service.

Audit Logging

SafeCase records certain account actions to support security, accountability and service integrity.

Examples include:

• Login and logout activity.
• Account creation and deletion.
• Profile updates.
• Evidence creation, modification and deletion.
• Evidence linked or unlinked from incidents.
• Privacy setting changes.
• Case exports generated.
• Feedback and bug reports submitted.

Audit logs are associated with your account and are not shared with third parties.

Local Device Storage

Some privacy-related settings may be stored locally on your device.

Examples include:

• Incognito Mode.
• Quick Exit preferences.

This information remains on your device and is not uploaded to SafeCase servers.

If the application is removed from your device, this locally stored information may also be removed.

Recordings and Evidence

SafeCase allows users to store recordings, photographs and other forms of evidence.

Users should be aware that:

Keeping Your Account Secure

Users also play an important role in protecting their own information.

We recommend that you:

• Use a strong and unique password.
• Do not share your login credentials.
• Enable privacy features such as Incognito Mode and Quick Exit where appropriate.
• Log out when using shared devices.
• Contact support immediately if you suspect unauthorised access to your account.

Security Incidents and Data Breaches

While SafeCase takes reasonable steps to protect information, no online service can guarantee absolute security.

If a data breach occurs that is likely to result in serious harm, SafeCase will respond in accordance with the Australian Notifiable Data Breaches (NDB) Scheme and any applicable legal obligations.

Where required, affected users will be notified.

Data Retention and Deletion

Information is generally retained while your account remains active.

If you request account deletion:

• Your account will be scheduled for deletion.
• Associated data will be removed in accordance with our data retention processes.
• Some information may be temporarily retained where required by law or legitimate operational requirements.

Contact Us

If you have questions regarding data security, privacy or suspected security incidents, please contact:

For information about privacy rights and complaints, you may also contact: