1. Information We Collect

Account Information

We collect limited personal information from you during account creation. You may create an account using either:

• Google Sign-In: Your email address, profile picture, and display name are collected through Google authentication.
• Email/Password Registration: Your email address and encrypted password are collected when you sign up directly with Shield Message.

This information is collected solely for account creation, authentication, and service delivery.

Message Content

When you create shield messages, you provide us with message content including recipient information (name and email), message subject, message body, and deadman switch duration settings. This content is stored securely in our database and is only accessed by our automated systems for the purpose of delivering your messages.

Check-In Data

We automatically record timestamps when you check in to reset your deadman switch timer. This data is essential for the proper functioning of the failsafe message delivery system.

Automatically Collected Information

We may automatically collect certain information when you visit our website, including your browser type, operating system, IP address, and browsing behavior. This information is used for security, analytics, and improving website performance.

2. Use of Information

Shield Message uses your information solely for platform functionality. We use your information for the following purposes:

• Account Authentication: Your email address and authentication credentials (Google account or email/password) are used to create, secure, and maintain your account
• Message Delivery: Your stored messages and recipient information are used to deliver shield messages according to your deadman switch settings
• Check-In Monitoring: Your check-in timestamps are monitored to determine when to send your shield messages
• Email Notifications: We send emails to your designated recipients when your deadman switch timer expires

All messages stored in our database can be deleted at any time through your account dashboard. To request complete account deletion and removal from our system, please contact us at contact@shieldmessage.com with the subject line "Account Deletion Request." We do not share, sell, or distribute your personal information or message content to third parties except as necessary to deliver your messages (via our email service provider).

3. Data Security and Encryption

We utilize enterprise-grade encryption provided by Microsoft Azure for database storage and Google Firebase for authentication services to protect your personal information and message content. All user data and messages are encrypted both at rest and in transit:

• Encryption at Rest: All personal information, message content, and account data stored in our databases are encrypted using encryption algorithms to protect against unauthorized access.
• Encryption in Transit: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols (HTTPS) to prevent interception or tampering during transmission.
• Access Controls: Message content is only accessed by our automated systems for the purpose of scheduled delivery. We maintain strict access controls to ensure your data remains private and secure.

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

4. Message Delivery and Third-Party Services

Shield Message uses third-party service providers to deliver your shield messages:

• Email Delivery (Resend): When your deadman switch timer expires, your message content and recipient email addresses are transmitted to our email service provider solely for the purpose of delivery.
• MMS Delivery (Twilio): For premium users, MMS messages and recipient phone numbers are transmitted to our MMS service provider for text message delivery when your deadman switch timer expires.

We do not store or share your message content with any other third parties beyond what is necessary for delivery.

5. Children's Privacy

Our service is not directed at individuals under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at contact@shieldmessage.com, and we will take appropriate steps to remove the information.

6. Data Retention

We retain your account information and message content for as long as your account remains active. Messages marked as "sent" are retained in your account for your records but can be deleted at any time. If you delete a message before it is sent, it is permanently removed from our database. Upon account deletion, all associated messages and personal information are permanently deleted from our systems.

7. Legal Compliance and Your Rights

We comply with applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). If you are a resident of these regions, you may have specific rights regarding your personal data:

• The right to access your personal data
• The right to correct inaccurate data
• The right to delete your data
• The right to restrict or object to data processing
• The right to data portability

To exercise these rights, please contact us at contact@shieldmessage.com.

8. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any significant changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly to stay informed about how we protect your information.

9. Contact Us

If you have any questions about this Privacy Policy, data deletion requests, or concerns about your personal information, you can contact us at:

Email: contact@shieldmessage.com