Privacy policy

Who we are

Elshafra (“we”) makes QR bracelets that help a lost child get back to their family. This policy explains what we collect in the Elshafra app and on elshafra.com, why, and what you can do about it.

What parents give us

Your account: your email address, and if you add them, your name, phone number and preferred language. If you sign in with Google or Apple, we receive your account ID, email and name from them.

Your child’s profile: first name, and only if you add them, last name, birth date, gender, photo, blood type, allergies, medical notes, special needs and a message for the person who finds your child.

Emergency contacts: name, relation, phone number and whether the number is on WhatsApp.

Your phone’s notification token, so we can send you alerts.

What a finder sees

When someone scans your child’s bracelet, they see only: first name, age (not the birth date), photo, blood type, allergies, medical notes, special needs, your message, whether your child is marked as lost, and your contacts’ names, relations, phone numbers and WhatsApp availability.

They never see the last name, the exact birth date, your email or your address.

Anyone who scans the bracelet or has its link can see this page, so only add what you are comfortable sharing with a stranger who is helping your child.

What we record when a bracelet is scanned

The time of the scan, the approximate city and country (from the internet connection), the type of phone and browser, and a scrambled form of the internet address that cannot be turned back into the address.

If the finder chooses: their location, a message and a phone number.

We use this to alert you, to show you the scan history, to stop abuse (for example, too many messages), and to help you if you contact support. Scan records are deleted after 90 days.

If you found a child

If you scan a bracelet, the family is told that it was scanned, roughly where (the city) and when. If you choose to share your location, send a message or leave your phone number, the family receives them. We do not ask for your name and we do not use this information for anything else.

Who helps us run the service

Cloudflare delivers the website and stores photos. A hosting provider runs our servers. An email provider sends login codes. Google Firebase delivers app notifications. Google and Apple handle sign-in if you choose them.

They only process data to provide these services to us.

How long we keep data

Your account data stays until you delete it. Scan records are deleted after 90 days. Login codes expire after 10 minutes and are deleted within two days.

Your choices

You can change or delete a child’s profile, unlink a bracelet, or delete your whole account in the app.

Deleting your account removes your profile, your children’s profiles and photos, contacts and scan history.

You can also ask us to delete your account by email (see “Contact us”). We will do it within 30 days.

Children

Accounts are for parents and legal guardians, who create and control their children’s profiles.

Security

Your connection to our app and website is encrypted (HTTPS). Photos are cleaned of hidden data, such as GPS position, before they are stored.

What we never do

We do not show ads, we do not sell your data, and we do not use tracking or advertising cookies. The website only remembers your language choice and, for our staff, a sign-in cookie.

Changes to this policy

If we change this policy, we will update the date at the top of this page. We will also tell you in the app about important changes.

Contact us

For any privacy question or request, contact us using the details below.