Privacy

Privacy by design

Afalagi should collect only information needed for its safety and reunification purpose. Public case pages should not expose family phone numbers, private addresses, private messages or sensitive documents.

Location privacy

Exact locations can create risk. Production implementations should support approximate public locations and restricted precision for authorized users.

Images

Uploaded images should be validated, access-controlled and stored in private object storage when they are not intended for public display.

Security

Production deployment requires secure authentication, authorization, encryption, rate limiting, audit logs and appropriate retention policies.