Privacy Policy
Effective 15 October 2026 (replaces the version of 10 October 2026). Controller: OKIDOOKI AG, Wartenbergstrasse 41, 4052 Basel, Switzerland (UID CHE-369.103.516). Contact: legal@nowtrust.app.
NowTrust is an on-demand private security app for Switzerland. We process personal data under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). Data is stored on Google Firebase servers in Europe (europe-west6, Zurich, and europe-west1, Belgium).
1. What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account data: name, email, phone number, password hash, role (client or guard), profile photo | Creating and securing your account, contacting you about bookings and emergencies | Contract |
| Identity verification: photos of the front and back of your ID document or passport (clients and guards), reviewed by NowTrust staff; for guards also the cantonal security licence, liability insurance, criminal record extract and training certificate, each with its expiry date | Verifying that clients are real persons and guards are licensed professionals, as required for security services. Documents are reviewed by our own staff, not by an automated system. | Contract, legal obligation (security industry rules), legitimate interest (safety) |
| Location: your position while you use the App; for guards who go online also periodic position updates (shared with clients during a booking and, for company guards, with their company); during an SOS your position is sent to the guards dispatched to you; for the optional panic button, background location so the button can wake the App | Finding guards near you, dispatching the nearest guards in an emergency, confirming a guard's arrival | Consent (you can withdraw it in the system settings; some features then stop working) |
| Panic-button recording (optional): when you pair the panic button you can allow the App to record video and audio with your phone's cameras during an SOS, in short clips, until the SOS ends | Evidence for you, the responding guard and, in a dispute, NowTrust | Consent, given when pairing the button (switch it off there at any time) |
| Bookings and emergencies: times, addresses, type of service, chat messages with your guard, incident reports, optional evidence photos and videos | Providing the service, resolving disputes, legal claims | Contract, legitimate interest |
| Payments: handled by Stripe Payments Europe Ltd. We receive a customer id, the last four digits and brand of your card, and payment status. We never store card numbers. | Charging bookings and emergency fees, refunds, guard payouts (Stripe Connect) | Contract |
| Device data: push notification token, app version, crash and error logs | Notifying you about bookings and emergencies, keeping the App working | Legitimate interest |
| In-app assistant (optional): what you write to the NowTrust assistant and the data it needs to answer (your bookings, SOS status, earnings, company team), sent to Anthropic's Claude API to generate the reply | Answering your questions and preparing actions that you confirm in the App | Consent (you open the assistant), contract |
| Connected assistants (optional): the identifier of a partner assistant you linked, the limits (mandate) you set, and the orders it placed | Letting an AI assistant book for you within your limits (APP v0) | Consent, contract |
| Security companies: company name, address, canton, licence number and licence document, contact details of the owner | Registering and reviewing a security company on the platform | Contract, legal obligation |
2. Who receives data
- Guards and clients see each other's first name, photo, rating, the booking address and, during a booking or emergency, live location and chat.
- Your security company, if you are a guard who joined one with an invite code: your name and email, whether you are online and your position while online, your jobs and earnings on the platform, and the status of your verification documents (not the documents themselves).
- Anthropic PBC (USA) processes assistant conversations through the Claude API to generate replies; under Anthropic's API terms this data is not used to train its models. Only what you send to the assistant and the context it needs leaves our servers.
- NowTrust staff review identity and licence documents and handle disputes.
- Google Firebase (hosting, database, authentication, push notifications, storage), EU data centres.
- Stripe for payments and guard payouts (own privacy policy applies).
- Apple / Google for push notifications and app distribution.
- Partner networks only when you connect an assistant: Okidooki and MakeItFun receive the data needed for the order you asked for, never your card data.
- Authorities where the law requires it (for example in connection with an emergency).
We do not sell personal data and do not use it for third-party advertising.
3. Retention
Account data: until you delete your account. Bookings, emergencies, payments, payouts, incident reports, reviews, chat messages and evidence files: 10 years from the booking (Swiss commercial record-keeping, Art. 958f CO) and for the duration of any dispute; after you delete your account they stay without your name, email or phone number (only an internal identifier remains). Identity and licence documents: as long as your account exists, because the verification must be repeatable and licences expire; a replaced document overwrites the previous file; everything is deleted with the account. Location: only your latest position is stored while you are online or in an SOS; positions tied to a booking or emergency stay with that record; panic-button diagnostics 30 days. Assistant conversations: kept on your device and in our logs for up to 90 days. Technical logs: up to 90 days.
4. Your rights
You can access, correct, export or delete your data, object to processing based on legitimate interest, and withdraw consent at any time. Delete your account directly in the App: Settings, Delete account (requires your password); see what is deleted and what is kept. Other requests: legal@nowtrust.app. You may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.
5. Security
Data is encrypted in transit (TLS) and at rest. Access is restricted by role; status changes of bookings and emergencies are made only by our servers. Identity and licence documents are visible only to their owner and our verification staff, and a reviewed document cannot be replaced without a new review.
6. Children
The App is for persons aged 18 or older.
7. Changes
We will announce material changes in the App. The current version is always available at nowtrust.app/privacy.