What we collect

• Account: your email address (used to sign in with your password or a one-time email code) and the display name you choose. If you use “Continue with Google”, Google shares your name and email address with us — nothing else.
• Location: with your permission, your device location is used to show posts within the radius you pick (1–50 km) and to place posts you create on the map. You can instead choose a city manually. We do not track your location in the background.
• Content you post: posts, photos, comments, votes, RSVPs, bookmarks and business listings.
• CNIC verification (required to sell or offer services): to sell items, or to post services, tutoring, domestic help, rentals, jobs or shop deals, or to get a verified badge, your CNIC number, a photo of your CNIC (front) and a selfie holding it. They are stored privately and visible only to the app owner and admins for checking, never to other users. The photos are deleted as soon as your request is approved or rejected; we keep your CNIC number (to stop one CNIC verifying several accounts) and the decision. Photos are resized on your device before upload, which removes hidden location data. To catch mistakes and misuse, the app reads the number printed on your CNIC photo on your own device (the photo is not sent to any other company for this) and compares it with the number you typed; if they clearly don’t match, the request is rejected automatically.
• Driving licence (only to offer rides): your licence number, its expiry date, a photo of the licence and a selfie holding it. Handled exactly like CNIC verification: private, seen only by the owner and admins, photos deleted once reviewed. Riders only see a “Verified driver” badge — never your licence details.
• Safety & moderation: reports you make, and actions taken by admins, are logged to keep the community safe.
• Notifications (optional): a device token, only if you turn notifications on.

How we use it

• To run the app: sign you in, show nearby posts, and let neighbours see what you share.
• To keep the community safe: moderate reported content and suspend abusive accounts.
• To improve reliability and fix problems.

What other people can see

Your display name, profile picture, trust score, verified badge and the posts you publish are visible to other users. Your email address, phone number and CNIC are never shown to other users.

Google user data

If you choose “Continue with Google”, Be Alert receives the following from your Google Account, and nothing else:

• What we access: your name, email address and a Google account ID (from Google’s sign-in token). We do not ask for access to your contacts, Gmail, Drive, calendar or any other Google data.
• How we use it: only to create your Be Alert account and sign you in, and to suggest your display name the first time. Your email address is never shown to other users.
• Sharing: we do not sell, rent or share Google user data with anyone, and we do not use it for advertising.
• Storage and protection: it is stored with your account in our Supabase database over encrypted connections, protected by access rules so only you (and the app owner/admins, for safety) can read it.
• Deletion: delete your account in Profile → Privacy & data → Delete my account and this data is removed straight away. You can also remove Be Alert’s access at any time in your Google Account under Security → Third-party connections.

Services we use

• Supabase — secure database, file storage and sign-in.
• OpenStreetMap / Nominatim — maps and city search (your search text is sent to look up places).
• Google Sign-In — only if you choose “Continue with Google”.
• Cloudflare Turnstile — a bot check on the sign-in screen; it reads technical browser signals, not your content.
• Email delivery — your sign-in and password-reset codes are sent through our email provider.
• Firebase Cloud Messaging — push notifications, only if enabled.
• GitHub Pages — hosting of bealert.online and app.bealert.online.

Data is sent over encrypted connections (HTTPS). Access to the database is restricted by row-level security rules.

Your choices and rights

• Download your data: Profile → Privacy & data → Export.
• Delete your account: Profile → Privacy & data → Delete my account, or on the web at app.bealert.online/delete-account. This permanently removes your account, posts, comments, photos and listings straight away.
• You can turn off location permission and notifications at any time in your phone settings.

Data retention

We keep your data while your account exists, except verification photos, which are deleted once reviewed. When you delete your account, your personal data and content (including any verification photos still waiting for review) are deleted. Records of admin moderation actions are kept without your personal details.

Children

Be Alert is not intended for children under 13, and we do not knowingly collect their data.

Changes

If we change this policy we will update the date above and, for important changes, tell you in the app.

Questions or requests: use “Report” on any post, or contact the Be Alert team through the app. Website: bealert.online