Privacy and security

Built around permission, exact access and visible evidence.

Tracking power requires narrow boundaries. Salama separates identity, ownership, payment and location permission.

Consent first

Only voluntarily registered installations can send evidence. A SIM change never creates device identity.

A private key stays non-exportable on the Android device while signed telemetry is verified by Salama.

Every location read needs an active relationship, purpose, scope, expiry and audit reason. There is no unrestricted staff map.

Location events waiting for connectivity are encrypted on the device and removed only after exact server acknowledgement.

Recovery notes and reports are private. Temporary links are exact-scope, expiring and revocable.

Salama does not secretly activate a microphone or camera, identify a person, guarantee powered-off transmission or promise recovery.

Next step