Privacy Policy
Effective date: 2025-07-14
App name: Watch^N (also referred to as N-Watch)
Developer: RME Solutions Technology Australia
Contact: support@rmesolutions.com.au
1. Overview
Watch^N is a neighbourhood emergency alert app. We are committed to protecting your privacy and collecting only the minimum data required to deliver the service. This policy explains what data we collect, how we use it, and your rights.
2. Data we collect
| Data | Where stored | Purpose |
|---|---|---|
| Email address | Firebase Authentication (Google Cloud) | Sign-in identity, account management |
| Display name | Firebase Authentication | Shown to group managers for member identification |
| Device push token | Firestore (Google Cloud) | Delivering push notifications for emergency alerts |
| Group membership | Firestore | Routing alerts to the correct neighbourhood group |
| Incident records | Firestore | Audit log of alerts triggered (no personal content) |
Data we do NOT collect
- Home address: Your address is stored only on your device (AsyncStorage). It is never sent to our servers in plain text. If you choose to include it in an alert, it is encrypted end-to-end using post-quantum cryptography (ML-KEM-768 / AES-256-GCM) before leaving your device.
- Precise location / GPS coordinates: Watch^N does not use GPS or continuous location tracking.
- Contacts, photos, camera, microphone, or files.
- Advertising identifiers or cross-app tracking data.
3. How we use your data
We use your data exclusively to:
- Authenticate you via Firebase Authentication (Google Sign-In or Sign in with Apple).
- Deliver emergency push notifications to members of your neighbourhood group via Firebase Cloud Messaging (FCM).
- Manage group membership so alerts reach the right people.
- Maintain audit logs of triggered incidents for safety accountability.
We do not use your data for advertising, analytics profiling, marketing, or sale to third parties.
4. Third-party services
| Service | Provider | Purpose | Privacy policy |
|---|---|---|---|
| Firebase Authentication | Google LLC | Identity & sign-in | firebase.google.com/support/privacy |
| Cloud Firestore | Google LLC | Database | cloud.google.com/terms/cloud-privacy-notice |
| Firebase Cloud Messaging | Google LLC | Push notifications | firebase.google.com/support/privacy |
| Cloudflare Workers | Cloudflare Inc. | API hosting | cloudflare.com/privacypolicy |
| Apple Push Notification service | Apple Inc. | iOS push delivery | apple.com/legal/privacy |
5. Data encryption
All alert payloads containing sensitive information (such as your address) are encrypted on-device before transmission using post-quantum cryptography:
- Key encapsulation: ML-KEM-768 (NIST FIPS 203)
- Symmetric encryption: AES-256-GCM
The server never holds your address in plaintext. Encrypted payloads are re-wrapped per-recipient so only intended group members can decrypt them.
6. Data retention
- Account data is retained for as long as your account exists.
- Incident logs are retained for up to 12 months, then permanently deleted.
- Device tokens are automatically pruned when they become invalid or when you delete your account.
7. Your rights
You have the right to:
- Access your data by viewing your profile in the app.
- Delete your account and all associated data at any time using the "Delete account" option in the app. This removes your user record, device tokens, and group memberships from our servers. Your Firebase Authentication account is also deleted.
- Withdraw consent by signing out and uninstalling the app.
For Australian residents, your rights under the Australian Privacy Act 1988 apply. For EU/EEA residents, your rights under the General Data Protection Regulation (GDPR) apply, including the right to data portability and the right to lodge a complaint with a supervisory authority.
8. Children's privacy
Watch^N is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the app after changes constitutes acceptance.
10. Contact us
If you have any questions about this privacy policy or your data, contact us at:
RME Solutions Technology Australia
Email: support@rmesolutions.com.au
Website: https://nwatch.incitat.io