LEGAL · PRIVACY

Privacy Policy

Last updated: April 2026 · Effective immediately

CORE PRINCIPLE

SAFUU does not collect, store, or share your identity — ever. Reporter anonymity is not a feature. It is the foundation.

1. What We DO NOT Collect

Telegram username or user ID

We never record these. The moment a report arrives, only a cryptographic hash is derived. The identifier is discarded.

Phone number

SMS reports go through Africa's Talking. Your number is one-way hashed. We cannot reverse it.

Real name

Never requested, never stored.

IP address

Our intake pipeline does not log IP addresses of reporters.

Device or browser data

The web form does not use analytics, cookies, or fingerprinting.

2. What We DO Store

SHA-256 hash of reporter identifier

A one-way mathematical fingerprint used only to prevent spam flooding from the same source. Cannot be reversed to reveal identity.

Report content

The text, audio transcription, or image of your report. Stored encrypted with AES-256-GCM.

Report metadata

Date, language, channel (Telegram/SMS/web). No personal data.

Evidence hash chain

Every report is sealed into a cryptographic ledger. The ledger records hashes of report content — not personal data.

3. Encryption

At-rest encryption

All stored report fields are encrypted with AES-256-GCM using PBKDF2 key derivation (SHA-512, 310,000 iterations).

In-transit encryption

TLS 1.3 only. HSTS preload enabled. All connections encrypted.

Key management

Master encryption key is stored only in server environment variables. Not in the database, not in the codebase.

4. Data Sharing

Ethiopian accountability agencies

When a case is escalated, a case summary is shared with FEACC, Federal Police, EHRC, Ombudsman, or OFAG — as appropriate. This summary never includes reporter identity.

Civil society partners

Aggregate, anonymized statistics only. No individual report data.

Law enforcement

We may be compelled by valid Ethiopian court order. However, because reporter identity is never stored, there is nothing identifying to produce.

Third parties

We do not sell, share, or monetize any data. No advertising. No tracking.

5. Your Rights

Right to anonymity

Guaranteed by design. No account. No login. No history tied to you.

Right to erasure

Since we cannot identify you, we cannot erase your specific reports. However, all report content is AES-encrypted and hash-chained — accessible only to authorized administrators.

Right to information

This document constitutes full disclosure of our data practices.

6. Security

76 automated security tests

Run on every code deployment. Results published on GitHub.

Tamper-evident ledger

Any modification to stored reports is mathematically detectable.

RBAC access controls

Administrator roles are strictly scoped. No single administrator has unrestricted access.

No third-party analytics

No Google Analytics, no tracking pixels, no CDN-level logging of reporter behavior.

7. Changes to This Policy

We will post any changes to this page with an updated date. Material changes will be noted in the platform changelog on GitHub.

8. Contact

Questions about this privacy policy can be sent via the SAFUU Telegram bot or filed as a GitHub issue at github.com/sifgamachu/safuu-intel.

safuu.net · Privacy Policy · April 2026
SAFUU Intel · ሳፉ · Oromo: "Moral order"
github.com/sifgamachu/safuu-intel