Security & Trust

• All traffic to and from the platform is encrypted in transit using HTTPS.
• Sensitive identity details — your legal name, address and phone number — are held in a restricted private vault, separate from your public profile.
• Emergency contact information is protected with split-key encryption so it can only be opened by an authorised admin when a member triggers a safety alert, and every access is logged.
• Where we need to recognise a returning person for safety reasons, we store only one-way hashes — never a readable copy of a phone number or address.

• Every member can only see their own private records. Database row-level security enforces this on the server, not just in the app.
• Administrative tools are limited to verified admins, and trust tiers control how widely a member can see the community.
• Financial and ledger entries are visible only to the member they belong to.
• Builder and partner application details are visible only to the applicant and our admins — never to the wider membership.

Community safety features include verified phone sign-up, doorstep arrival checks for home visits, trusted-contact alerts and a panic button. You can read more in our Safeguarding policy.

You can access, correct, export or delete your data at any time. See our Privacy Notice and Your Rights pages for how to make a request.

If you believe you have found a security or privacy issue, please tell us so we can put it right quickly. Email safety@rooted-common-ground.world with the details. We take every report seriously and aim to respond promptly.

This page describes protections we have implemented ourselves. It is not an independent certification or audit.