Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you create an account or use the Service, we collect:

• Identity information: first name, last name, username, email address, profile photo
• Account credentials: email address and hashed password (managed by Firebase Authentication)
• Profile information: bio, BlvckMeta handle, social links
• Vehicle information (Techs/Providers): year, make, model, trim, color, engine type, oil weight, fuel type, vehicle photo
• Compliance documents (Techs/Providers): driver's license, proof of insurance, and other verification documents
• Service request details: distress type, notes, lockout key status, fuel requirements
• Communications: messages or reports you send to our support team

1.2 Information Collected Automatically

• Location data: precise GPS coordinates when you drop a signal or when Techs are active. We require "When In Use" location permission as a minimum; Techs may enable background location during active shifts.
• Device information: device type, operating system version, app version, device identifiers (IDFV)
• Usage data: features used, signals dropped, services completed, session duration, crash reports
• FCM token: Firebase Cloud Messaging token used to deliver push notifications
• APNS token: Apple Push Notification Service token for iOS notification delivery

1.3 Payment Information

Payment transactions are processed by Stripe, Inc. We do not store your full card number, CVV, or bank account details on our servers. Stripe may collect and store your payment information pursuant to their own privacy policy. We receive only a tokenized payment reference and transaction confirmation from Stripe.

1.4 Information from Third Parties

If you connect your BlvckMeta account, we may receive your profile information (name, username, handle) from the BlvckMeta platform to pre-populate your SGNLS profile.

2. How We Use Your Information

We use your information to:

• Create and maintain your account
• Match Users with nearby Techs based on location and capability
• Process payments and manage subscriptions
• Send transactional notifications (signal accepted, Tech en route, job complete)
• Enforce compliance and safety standards for Tech onboarding and ongoing operations
• Analyze platform usage to improve the Service and develop new features
• Detect and prevent fraud, abuse, and violations of our Terms of Service
• Comply with applicable legal obligations
• Respond to your support requests and communicate about your account

We do not sell your personal information to third parties for their own marketing purposes.

3. How We Share Your Information

3.1 With Techs (Providers)

When you drop a signal, your first name, distress type, general location, and signal notes are displayed to nearby Techs. Once a Tech accepts, your precise location is shared to enable navigation. Techs do not receive your email address, full legal name, or payment information.

3.2 With Users (Drivers)

When a Tech accepts a signal, the User receives the Tech's display name, profile photo, driver level, and real-time location for tracking purposes.

3.3 Service Providers

Provider	Purpose	Privacy Policy
Google Firebase (Auth & Firestore)	Authentication, database storage	firebase.google.com/support/privacy
Firebase Cloud Messaging	Push notification delivery	firebase.google.com/support/privacy
Firebase Storage	Profile photo & document storage	firebase.google.com/support/privacy
Stripe, Inc.	Payment processing	stripe.com/privacy
Apple (APNs & App Store)	Push notifications, in-app purchases, app distribution	apple.com/legal/privacy

3.4 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect safety, prevent fraud, or protect SGNLS's legal rights.

3.5 Business Transfers

If SGNLS is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you prior to such transfer.

4. Location Data

• Signal dropping: We collect your one-time location when you drop a signal to share it with nearby Techs.
• Active sessions: Location is tracked during an active service session for real-time provider navigation.
• Tech location sync: Active Techs' location is continuously updated to enable proximity-based matching. This only occurs while the Tech has the app open and active.
• Retention: Location data associated with completed signals is retained for 90 days and then deleted.

You may revoke location permissions at any time via your device settings, but doing so will prevent core functions of the Service from operating.

5. Push Notifications

We use Firebase Cloud Messaging (FCM) and Apple Push Notification Service (APNs) to send service-related notifications. You may opt out of notifications in your device settings, but this may affect your ability to receive time-sensitive updates about signals and service status.

6. Data Retention

We retain your account information for as long as your account is active. Upon account deletion:

• Profile, vehicle, and capability data are deleted within 30 days
• Signal history is anonymized and retained up to 12 months for fraud prevention
• Payment records are retained up to 7 years per financial regulations
• Uploaded compliance documents are deleted within 60 days of account closure

7. Data Security

We implement commercially reasonable technical and organizational measures to protect your information, including encryption in transit (TLS), Firebase Security Rules, and limited staff access on a need-to-know basis. No system is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

SGNLS is not directed to children under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we learn we have collected information from a child under 18, we will delete that information promptly. Contact us at legal@sgnls.app if you believe we have collected information from a child.

9. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights:

• Right to Know: request disclosure of categories and specific pieces of personal information we have collected in the past 12 months
• Right to Delete: request deletion of personal information we have collected, subject to certain exceptions
• Right to Opt-Out: SGNLS does not sell personal information, so no opt-out of sale is required
• Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA rights

To exercise these rights, contact us at legal@sgnls.app. We will respond to verified requests within 45 days.

10. International Users / GDPR

SGNLS is currently operated and targeted at users in the United States. If you are located in the EEA or UK, you have rights under GDPR including access, rectification, erasure, restriction, portability, and objection to processing. Contact us at legal@sgnls.app to exercise these rights.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, by in-app notification. Continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact Us

SGNLS / BASS Technologies — Privacy Team
Email: legal@sgnls.app
Website: sgnls.app