Privacy notice

Last updated: 17 July 2026 · Working notice for the Salvus field-test / co-design prototype. Not legal advice.

This notice covers the public Salvus website at salvusaffirmations.com, the temporary compatibility host sayings.uk, and the Salvus Affirmations mobile app used in Dynamic Devices Ltd field testing. Salvus is not a replacement for emergency services.

Who we are

Controller: Dynamic Devices Ltd (England & Wales), Companies House 05010341
Registered office: C/O DoES Liverpool, First Floor, Tapestry Building, 68–72 Kempston Street, Liverpool, L3 8HL
ICO registration: ZC180994
Privacy contact: privacy@dynamicdevices.co.uk

What the website collects

The public pages do not use analytics cookies or third-party trackers. Standard web-server logs (IP address, user agent, requested URL, and timing) may be retained briefly for security and reliability. Signed alert and contact links are sensitive; pages that carry them use a strict referrer policy so they are not leaked to third-party sites.

What the app processes

Depending on how you use the field-test app, we may process:

Optional contact email and verification codes for device registration
A pseudonymous device identifier, device model, and app version
Audio, video, and still images captured during a safety session
Precise location when a GPS fix is available during an alert
Trusted / emergency contact details you nominate (email and/or phone)
Encrypted evidence packages and integrity metadata uploaded to our server

Captured media and location are high-risk personal data. Incidental third parties may appear in audio/video. We do not sell personal data and we do not publish evidence on a public map.

Purposes

Discreet safety capture and sealed evidence upload during field testing
Alerting trusted contacts that you may need a check-in
Device onboarding, troubleshooting, and co-design evaluation

Working lawful bases

For the current lab/R&D phase our working positions (subject to solicitor confirmation and DPIA/LIA completion before any wider pilot) are:

Consent for optional contact email and for alert routing you choose
Consent of the contact via double opt-in before they receive alerts
Legitimate interests for pseudonymous device telemetry needed to operate the lab
Consent / vital interests / legal claims for a user’s own evidence
Legitimate/vital interests and legal claims for incidental third parties in AV — not consent

Trusted contacts vs evidence access

Confirmed trusted contacts receive an immediate alert only (and a map link when GPS is available). They do not automatically receive the recording or evidence download. Evidence follow-up links are limited to lab / device-routed operator contacts configured for the field test.

Recipients and processors

Trusted contacts you nominate and who confirm
Gmail SMTP (Google) for outbound email transit
Twilio for SMS when SMS alerting is enabled
Our MQTT broker at mqtt.sayings.uk for lab telemetry
OpenStreetMap when a recipient opens a map link
Google Play for app distribution / updates (no app content uploaded by the app itself)

Evidence storage for the field test is on Dynamic Devices infrastructure (currently the CT107 lab host). There is no third-party storage processor for sealed bundles in the current deployment.

Retention and deletion

Uploaded evidence auto-expires 30 days after capture
User-initiated deletion (Profile → Delete my data) schedules server purge after a 30-day recovery window, so coercive deletion cannot instantly destroy evidence
Verification codes are short-lived and stored hashed
Application logs are redacted and rotated

Your rights

Under UK GDPR you may request access, rectification, erasure, restriction, and object to certain processing, and you may complain to the Information Commissioner’s Office (ICO). Contact privacy@dynamicdevices.co.uk. We aim to respond without undue delay and within one calendar month for formal rights requests. We will verify identity before disclosing private archive material.

Lab / prototype limitations

Salvus is an active co-design prototype. Features, processors, and retention may change as the field test evolves. DPIA and LIA drafts remain outstanding hard gates before any wider pilot. Compatibility hostname sayings.uk may continue to serve existing test clients while salvusaffirmations.com is the canonical public service URL.

Changes

We may update this notice as the prototype changes. The date above shows the latest revision.