Privacy Policy

SafeMate AI ("we", "us", "our") helps people create safety documents such as risk assessments, method statements, toolbox talks, emergency plans and incident reports. We keep this policy short and in plain English. If anything is unclear, contact us at admin@safemate.mt.

Who we are

SafeMate AI is a Malta-based software service for safety document drafting. For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller for the personal data described below.

What data we collect

We collect only what we need to run the service:

• Your email address and password, used for your account.
• Basic account details you give us, such as your name and the industry you select.
• The documents you create: the information you type into forms (task, location, people present, equipment, controls, and similar), any photos you upload, and the documents we generate from them.
• Details if you join our waitlist, send us a message, or book a demo.
• Billing details for paid subscriptions, handled by our payment provider. We do not see or store your card number.
• Basic technical information such as your sign-in activity and error logs, so we can keep the service working.

Why we collect it

We use your data to create and manage your account, save the documents you generate so you can find them again, remind you when a document is due for review, answer your messages, process payments, and improve the service. We rely on our legitimate interest in operating the service and, where relevant, on performing our contract with you. We do not sell your data, and we do not use your documents to advertise to anyone.

Where your data is stored

Your data is stored securely with our hosting provider, Supabase, on European Union infrastructure. Access is protected by encryption in transit and at rest, and our systems are set up so that only you can see the documents in your account. Photos and files you upload are stored in the same secure environment and are not made public.

Who can see your data

Only you can see the documents in your account, unless you choose to share them (for example by downloading a PDF or sending it to someone). Our team can access account data only where needed to support you or fix problems, under confidentiality obligations. We use a small number of processors — hosting, email delivery and payment processing — and we choose providers that meet GDPR standards.

How long we keep your data

We keep your account and documents while your account is active. If you delete your account, we delete your personal data and documents, except where we must keep something for legal or accounting reasons (for example invoicing records, kept for the period Maltese law requires). Waitlist and contact messages are kept for up to 12 months after we last contact you.

Your rights

Under the GDPR you have the right to: access the personal data we hold about you; correct it if it is wrong; delete it; export it in a portable format; restrict or object to how we use it; and withdraw consent where we rely on consent. To use any of these rights, email admin@safemate.mt — we will respond within one month. You also have the right to complain to the Information and Data Protection Commissioner (IDPC) in Malta at idpc.org.mt.

Changes to this policy

If we change this policy, we will update this page and the "Last updated" date. If a change materially affects your rights, we will tell you by email or in the app.

Contact us

Questions about privacy? Email admin@safemate.mt or use our contact page.