Effective September 30, 2026, Bastet Unity (“Bastet Unity,” “we,” “us”) makes the Bastet Unity mobile app (the “App”) for survivors of sexual assault and domestic violence. This policy explains what information the App uses, where it goes, and the choices you have. We wrote it in plain language because your safety depends on knowing exactly what happens to your information.
- There are no accounts. We don’t ask for your name, email, or phone number.
- Your records, photos, recordings, reports, safety plan, and contacts are stored only on your phone. We never receive them, and we cannot see, recover, or hand them over.
- The one exception is the AI documentation guide: the messages you type to it are sent to an AI service to get a reply. We don’t store them.
- No ads, no analytics, no tracking, no advertising ID, and we never sell or share your information.
- Anything else leaves your phone only when you choose to send it, for example an export, an SOS text, or a phone call.
1. Information that stays on your phone
The following is created by you and stored only in the App’s private storage on your device. It is not sent to us or to anyone else unless you choose to share it.
| What | How it’s protected |
|---|---|
| Your written records (the documentation chat history) and report drafts | Encrypted on your device with a key kept in your phone’s secure keystore. |
| Secure Vault: photos, audio recordings, and PDF reports you create in the App | Encrypted with AES-256-GCM. Opened only with your separate vault PIN or Face ID / fingerprint. |
| Details saved with each vault item: capture date and time, time zone, phone model and system version, app version, and a SHA-256 “fingerprint” of the file. Location only if you turn on “Record location.” | Encrypted in the vault together with the item. |
| The vault’s access log (each time an item is viewed, exported, added, edited, or deleted) | Encrypted, and protected against changes. |
| Your safety plan, trusted contacts, and app settings | Stored in the App’s private storage. |
| Your app PIN and vault PIN | Kept in your phone’s secure keystore (iOS Keychain / Android Keystore). The vault PIN is never stored in readable form. |
Photos taken in the App are never saved to your photo library, and recordings are never saved to your Files app. Vault encryption keys are marked “this device only,” so they are not synced to iCloud Keychain or restored to another phone, and phone backups contain only encrypted vault data. On Android, the App opts out of automatic backup.
2. Information that leaves your phone
AI documentation guide
When you use the “Document My Experience” chat, the text of your messages in that conversation (and the guide’s earlier replies, so it can follow the conversation) is sent over an encrypted connection to our server, which forwards it to Anthropic (the maker of the Claude AI model) to generate a reply. The same happens if you ask for an AI summary of a conversation.
- Our server passes the messages along and does not save them. Our server is hosted by Netlify, which, like any web host, briefly processes technical information such as your IP address to deliver the request.
- Anthropic processes the messages under its commercial terms, which do not allow using them to train its AI models, and keeps them only for a limited period for safety and abuse monitoring, as described in Anthropic’s privacy policy.
- Photos, recordings, reports, your safety plan, and your contacts are never sent to the AI service.
- Type only what you are comfortable sharing. You can use every other part of the App without the AI guide.
Things you choose to send
- Exports. When you export from the vault, the App creates a file with the original items and a fingerprint manifest, and your phone’s share menu opens. You decide where it goes (for example, to your attorney). Once shared, that copy is handled by whoever receives it.
- SOS messages. If you use SOS, the App opens your phone’s messaging app with a pre-written message, including your current location as a map link, addressed to the trusted contacts you saved. Nothing is sent until you send it from your messaging app.
- Calls, texts, and websites. Hotline, 911, and resource buttons open your phone’s dialer, messaging app, or browser. Those services have their own privacy practices.
3. Phone permissions
The App asks for these permissions only when you use the related feature. You can turn any of them off in your phone’s settings.
- Camera: to take photos that go straight into your encrypted vault.
- Microphone: to record audio into your vault. If you start a recording, it keeps going when your screen locks until you tap Stop. Your phone always shows a recording indicator (iPhone) or notification (Android) while recording; the App cannot hide it.
- Notifications (Android): required by Android to show that a recording is in progress.
- Location: used on your phone to show help near you (your location is not sent anywhere for this), to add your location to an SOS message you choose to send, and, only if you turn it on, to record where vault photos and recordings were taken.
- Face ID / fingerprint: optional, to unlock the App or vault. Your phone checks your face or fingerprint; the App never receives biometric data.
4. What we don’t do
- We don’t require an account or collect your name, email, or phone number.
- We don’t show ads, use advertising IDs, or use analytics, tracking, or crash-reporting tools.
- We don’t sell, rent, or share personal information, and we don’t use it for advertising.
5. How long information is kept and how to delete it
- Information on your phone stays there until you delete it. You can delete individual records and vault items, delete all records in Settings, or erase the entire vault in Vault Settings. Deleting the App deletes everything it stored.
- Because we don’t have a copy, we cannot recover deleted items, a forgotten vault PIN, or data from a lost phone. Export anything important to someone you trust.
- AI guide messages are not stored on our server. Anthropic’s retention is described in its privacy policy.
6. Requests from others, including law enforcement
We don’t hold your records, photos, recordings, or chat messages, so we have nothing of yours to provide in response to a request. Your information is on your phone and under your control.
7. Security
We use encryption on your device and in transit, keys kept in your phone’s secure hardware, a separate vault PIN with limits on repeated guesses, and a tamper-evident access log. No system is perfectly secure. Anyone who knows your vault PIN, or whose face or fingerprint is enrolled on your phone if you turn on biometric unlock, could open the vault, so choose a PIN others can’t guess. If someone may be monitoring your phone, consider using the App’s quick-exit and lock features, and reach out to a hotline from a safer device.
8. Children
The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under 18 and need help, the resources in the App, such as loveisrespect.org, can help you.
9. Your privacy rights
Depending on where you live (for example, California under the CCPA/CPRA, or the European Union under the GDPR), you may have rights to know, access, correct, or delete personal information about you and to not be discriminated against for using those rights. Because the App keeps your information on your device, you can exercise most of these rights yourself in the App. For any question or request, contact us at the email below.
10. Changes to this policy
If we change this policy, we will update the effective date above, and for significant changes we will let you know in the App before they take effect.
11. Contact us
Bastet Unity
Email: safeme.usa@gmail.com
If you are in immediate danger, call 911. For confidential support, call the National Domestic Violence Hotline at 1-800-799-7233 or the RAINN National Sexual Assault Hotline at 1-800-656-4673.