Operated by: SENA App, Inc, a Delaware Public Benefit Corporation ("SENA," "we," "our," "us")

Applies to: the SENA beta mobile application (the "App") and the SENA website (the "Website") together, the "Platform." 

Effective Date / Last Updated: June 1, 2026 

Contact: privacy@senaapp.org

​

At a Glance

The full details are below, but the whole policy comes down to six commitments:

 

• Core resources (hotlines, non-profits, safety and mental-health apps) work without an account, a name, or your story. Only the Awareness section asks you to sign in, with just an email address.

• All content is built into the App and works offline. What you read, save, and color stays on your phone. SENA operates no servers that hold your activity.

• If you use location to find nearby resources, the matching happens on your device. Your location never leaves your phone and is never stored.

• To improve the App, we count which features get used, as anonymous totals never connected to your identity, account, or location.

• If the App crashes, a technical crash report goes to Google's Firebase Crashlytics so we can fix bugs. It never contains what you read, searched, or typed.

• No ads. No data sales. No behavioral profiles. Ever. The beta is free.

1. Who We Are, and Why This Policy Reads Differently

SENA is a private safety resource infrastructure addressing gender-based violence. The App organizes existing resources, including hotlines, non-profit organizations, government agencies, and legal, medical, mental-health, and safety information, and educates users about their rights and options.

 

Most privacy policies describe how a company limits its use of the data it collects. This one mostly describes data we deliberately never collect. That is not a marketing posture; it is the product's architecture. Many of our users may live with someone who monitors their phone, and some may one day face a legal proceeding in which an abuser's attorney seeks records about them. We resolve both threats the same way: information that is never collected cannot be seen, leaked, subpoenaed, or misused. Where we do handle data, this policy names each item, why it exists, where it lives, and how to remove it.

 

What SENA is not. SENA has no advocates, counselors, or crisis staff. No person at SENA sees or responds to anything you do in the App, and SENA has no personnel who are mandatory reporters; using SENA never triggers a report to any authority. SENA does not dispatch police or emergency services, and nothing you do in the App sends anyone to your location. SENA does not create case files, evidence records, or histories about you. Platforms that dispatch help or build case records must collect identity and location. Because SENA educates rather than dispatches, it does not need to know who you are, so it does not ask.

 

2. The Two Tiers of the App

Free core resources, no account. The hotline directory, non-profit directory, safety-app and mental-health-app directories, and the App's safety features require no account, no name, no email, and no personal information of any kind. You can install SENA and use everything in this tier without ever telling us you exist.

 

The Awareness section, account. SENA's educational Awareness content requires creating an account. An account needs exactly two things: an email address and a password. We ask for nothing else. No name, no phone number, no date of birth, and your email address does not need to contain your real name. Section 3.1 describes exactly how account data is handled.

 

During the beta, everything in the App, both tiers, is free.

3. The Complete Data Inventory

This section lists every category of data that exists anywhere in SENA's systems or those of its service providers. If a category is not listed here, SENA does not collect it.

3.1 Account information (only if you create an account)

​

• Email address. Held by Firebase Authentication (Google). Used for sign-in and account recovery.

• Password, stored as a secure hash that is never readable. Held by Firebase Authentication (Google). Used to authenticate you.

• Account identifier (a random UID). Held by Firebase Authentication (Google). Used to distinguish your account technically.

• Account timestamps (when the account was created and when it last signed in). Held by Firebase Authentication (Google). Standard authentication metadata generated by the sign-in service.

 

Authentication is provided by Firebase Authentication, a Google service. Your credentials are stored on Google's infrastructure, not on SENA servers; SENA operates no server of its own holding account data.

 

What your account is not connected to: SENA's systems contain no record of what you read, save, search, color, or do in the App linked to your account. The only account-related activity data that exists is the sign-in timestamps listed above. The authentication service records when an account signs in, but nothing about what happens afterward. The account exists to unlock the Awareness section, and that is all it does.

3.2 Feature-usage counts (all users)

To understand which features actually help people, the App reports product-usage events, for example "a resource category was opened" or "a feature was used." These events are designed so they cannot describe you:

 

• Events are recorded under a random identifier generated on your device, never your account ID, email, or anything derived from your identity.

• Events never contain what you typed or searched, your location, or resource detail finer than category level.

• Data is analyzed as aggregate totals, such as "this feature was used N times this week," not as individual usage streams.

 

We are completing our selection of a privacy-focused analytics provider for this measurement. This policy will be updated to name the provider and its retention window before the App launches, and the provider will not be an advertising-ecosystem analytics product.

3.3 Crash reports (all users)

If the App crashes or encounters an error, Firebase Crashlytics (a Google service) automatically receives a report containing the technical error details, standard device metadata (such as device model and operating-system version), short internal feature labels written by our developers, and a random installation identifier that Crashlytics generates for each App installation so repeated crashes on the same device can be grouped.

 

To be precise about what that identifier means: crash reports are pseudonymous, not perfectly anonymous. Reports from the same installation share an identifier, but that identifier is not your account, is never joined to your email or account ID, and resets if you reinstall the App. Crash reports never contain the content you viewed, saved, searched, or typed. Crash reporting exists so we can find and fix bugs. It is disabled in our internal development builds and governed by Google's Crashlytics retention policy.

3.4 Website technical data

The Website is hosted by Wix.com Ltd. As with any hosted website, Wix processes standard technical data, such as visitor IP addresses, browser type, and similar server information, as part of providing hosting. The Website requires no account and offers its informational resources to everyone.

3.5 Email you send us

If you email privacy@senaapp.org or otherwise contact us, we receive what you choose to send. We use it only to respond, and we discourage including sensitive personal details in any message to us.

 

That is the entire inventory. No names (unless your email contains one), no phone numbers, no contacts, no photos, no messages, no reading history, no search logs, no location records, no advertising identifiers, no behavioral profiles.

4. What We Deliberately Do Not Collect

The following categories are not collected by design; the App contains no code paths that could collect them:

 

• Descriptions of abuse or personal narratives. The App never asks what happened to you, and has no free-text field that transmits to us.

• Reading, browsing, or search history. Content is on your device, and browsing it creates no record with us.

• Location records. See Section 5. Location is processed on your device and never transmitted or stored.

• Contacts, photos, microphone, or files. The App does not request these permissions.

• Legal case records, medical records, identity documents.

• Advertising or cross-app tracking identifiers. The App contains no advertising SDK and performs no cross-app or cross-site tracking.

5. Location: On Your Device, Only in the Moment

The App can show resources near you. Here is exactly how that works, because the design is unusual and deliberately so.

 

The full resource directory ships inside the App. When you grant location access, your device's own operating system provides your position to the App, the App matches it against the directory on the device itself, and shows you what is nearby. Your coordinates are never transmitted to SENA or anyone else, never included in usage events or crash reports, never written to any log, and never stored. The moment the search is done, the location is gone. No location history exists anywhere: not on your device, not on any server, not with any third party.

 

Location permission is requested only "while using the App," never in the background. It is entirely optional: you can decline it and select your borough or area manually, with full functionality.

 

If a court ever ordered SENA to produce a user's location history, we would answer that none exists, by architecture, not by a policy choice that could quietly change.

6. What Stays on Your Device

Everything you do in the App lives only on your phone: your settings, saved resources, coloring pages, security preferences, and the record that you accepted these terms. All resource content ships inside the App, so browsing works offline and generates no server traffic. SENA operates no backend server holding user data; there is no server that could observe your activity even in principle.

 

One honest caveat about your own device. Your phone's operating system (Apple's or Google's) may include app data in the device backups it makes under your settings. That process belongs to your phone, not to SENA. If someone else has access to your device, its cloud account, or its backups, review your device's backup settings. More broadly, no app can protect you from a device that someone else controls or monitors. If you are concerned your phone is monitored, consider using a safer device, such as a public library computer, and consult technology-safety guidance from organizations such as the Safety Net project of the National Network to End Domestic Violence.

7. Safety-by-Design

SENA is built for people who may use it in unsafe circumstances, including on shared or monitored devices. The App includes discreet-access features, including optional access protection chosen by you and screens that hide sensitive content when switching between apps. For safety reasons, we do not publicly document the full mechanics of these features: a public manual would defeat their purpose. You can learn exactly how they work inside the App itself.

8. Young Adults Only (16+)

 

The Platform is intended solely for users 16 years of age or older. SENA does not knowingly permit use by, or collect personal information from, anyone under 16. If we learn that a person under 16 has created an account, we will delete it. Some content on the Platform addresses difficult subjects; it is written to inform, and users should consult the professionals and organizations listed on the Platform for guidance about their specific situation.

9. Service Providers

SENA uses a small number of service providers, each processing only what its function requires:

 

• Firebase Authentication (Google). Account sign-in. Processes email, hashed credentials, account UID, and account timestamps.

• Firebase Crashlytics (Google). Crash reporting. Processes crash reports and the installation identifier (Section 3.3).

• Wix.com Ltd. Website hosting. Processes standard website technical data.

• Analytics provider, to be named in this policy before the App launches. Aggregate feature-usage counts. Processes anonymous usage events (Section 3.2).

 

These providers act as processors on SENA's behalf under their terms of service. SENA does not sell personal data to anyone, does not share personal data with anyone for advertising, and has no data-sharing relationships beyond this list. A current version of this list is always available on request at privacy@senaapp.org.

10. Legal Requests and Government Demands

Because of the architecture described above, SENA holds very little that anyone could demand. If SENA received a subpoena, court order, or other legally binding demand concerning a user, the complete universe of potentially responsive data is: the account email, identifier, and account timestamps (creation and sign-in times) held at Firebase, if that user created an account; anonymous aggregate usage totals that cannot be tied to any individual; and crash reports grouped by installation identifier, containing neither identity nor content. There is no reading history, no search log, no location record, no message archive, and no record of what any account did inside the App.

 

If SENA is ever legally compelled to disclose information, we will disclose only what we are compelled to disclose; challenge overbroad or improper demands where reasonably possible; and, where legally permitted and where any means of contacting the affected user exists, notify that user before disclosure. SENA does not voluntarily provide user information to law enforcement or immigration authorities.

11. Data Security

Safeguards in place include: encryption of data in transit for all network traffic the App generates; credential storage as secure hashes via Firebase Authentication (SENA cannot read your password); the on-device data model itself, which is the strongest safeguard, because data that never leaves your phone cannot be breached from a server; and access controls limiting SENA's internal systems to essential personnel. No digital platform can guarantee absolute security, and we will not pretend otherwise, but we have arranged things so that the consequences of any breach are as small as the data we hold.

12. Data Breach Notification

If a security breach affecting personal information occurs, SENA will notify affected users and applicable regulators as required by law (including state breach-notification statutes) without unreasonable delay, describing what happened, what information was involved, and what steps you can take.

13. Retention and Deletion

​

• Account (email, credential, UID, timestamps): until you delete your account.

• Anonymous usage totals: retained as aggregates that identify no one. The provider's retention window will be stated here before the App launches.

• Crash reports: per Google's Crashlytics retention policy. The installation identifier resets if you reinstall the App.

• Email to SENA: deleted once no longer needed to respond.

• Everything on your device: yours, deleted when you delete the App or its data.

 

Deleting your account: available at any time, directly inside the App, or via senaapp.org/delete-account. Deletion removes your account record: email, credentials, identifier, and timestamps. Because your account was never linked to your in-App activity, there is no activity record to chase. Deleting the account removes everything SENA's providers hold about you as an identifiable person.

14. Your Privacy Rights

You may request access to, correction of, deletion of, or a copy of your personal data, and you may withdraw consent for optional processing, by emailing privacy@senaapp.org. You will not be treated differently for exercising any right.

 

Given our data model, here is what exercising these rights actually looks like. For users without accounts, our truthful answer is that we hold no data about you, and we will confirm that in writing. For account holders, the data we can produce is your account email, identifier, and account timestamps, and the fastest deletion path is the in-app control, no email required.

 

California residents (CCPA/CPRA): you have the right to know the categories of personal information collected and the purposes (Sections 3 and 9 are that disclosure); the right to opt out of "sale" or "sharing" of personal information (SENA does not sell or share personal information as those terms are defined in the CPRA); and the right to limit use of sensitive personal information (SENA does not use sensitive personal information beyond permitted service purposes). SENA does not sell or share personal information, including that of users under 16, so no parental or opt-in consent mechanism for sale is required.

 

Residents of other U.S. states with comprehensive privacy laws (including New York, Colorado, Connecticut, Virginia, and Texas) may have similar rights under those laws.

 

We verify rights requests using minimal reasonable means. We will never demand identity documents from a user base we deliberately do not identify. We respond within the timeframe applicable law requires (generally 30 to 45 days). If we deny a request in whole or part, we will explain why, and you may lodge a complaint with your state attorney general or applicable supervisory authority.

15. International Users

SENA is operated from the United States, and the beta is oriented to New York City resources. If you access the Platform from outside the U.S., the limited data described in this policy may be processed in the United States and other countries where our service providers operate. Where required, SENA relies on appropriate safeguards for such transfers.

16. Do Not Track and Global Privacy Control

The Platform honors Global Privacy Control signals where applicable law requires. Because SENA does not sell personal data or serve advertising, such signals do not change the Platform's core behavior; there is nothing to opt out of.

17. Changes to This Policy and to SENA

SENA will grow, and future versions may add features that involve data. For example, planned on-device AI features are being designed so conversations never leave your device and SENA cannot read them. Any such change will update this policy before the feature launches, with material changes highlighted in the App and prior versions available on request. What will not change are the commitments this policy is built on: collect the minimum, keep it the shortest possible time, design so there is as little as possible to disclose, and never introduce advertising, data sales, or behavioral profiling.

18. Contact

SENA App, Inc (a Delaware Public Benefit Corporation) Email: privacy@senaapp.org Registered agent: Corporation Service Company,
251 Little Falls Drive, Wilmington,
New Castle County, Delaware
19808