Security & Trust
Last updated: 20 June 2026
Trust is the foundation of a community built on kindness. This page explains the practical steps we take to keep your account, your personal details and your neighbours safe. We treat this as living project documentation and keep it up to date as our protections evolve.
Protecting your data
- All traffic to and from the platform is encrypted in transit using HTTPS.
- Sensitive identity details — your legal name, address and phone number — are held in a restricted private vault, separate from your public profile.
- Emergency contact information is protected with split-key encryption so it can only be opened by an authorised admin when a member triggers a safety alert, and every access is logged.
- Where we need to recognise a returning person for safety reasons, we store only one-way hashes — never a readable copy of a phone number or address.
Access controls
- Every member can only see their own private records. Database row-level security enforces this on the server, not just in the app.
- Administrative tools are limited to verified admins, and trust tiers control how widely a member can see the community.
- Financial and ledger entries are visible only to the member they belong to.
- Builder and partner application details are visible only to the applicant and our admins — never to the wider membership.
Member safety
Community safety features include verified phone sign-up, doorstep arrival checks for home visits, trusted-contact alerts and a panic button. You can read more in our Safeguarding policy.
Your rights and privacy
You can access, correct, export or delete your data at any time. See our Privacy Notice and Your Rights pages for how to make a request.
Reporting a security concern
If you believe you have found a security or privacy issue, please tell us so we can put it right quickly. Email safety@rooted-common-ground.world with the details. We take every report seriously and aim to respond promptly.
This page describes protections we have implemented ourselves. It is not an independent certification or audit.