Effective 5 September 2026. This version replaces the policy dated 12 February 2023.
School Safety Self-Assessment Survey (SSSAS) ("the Application") is part of the RiskrApps platform and is published on Google Play and operated by Swiftmade OÜ ("Swiftmade", "we", "us"), a private limited company registered in Estonia, registry code 14173141. We operate the Application as a technical service provider — a data processor within the meaning of the EU General Data Protection Regulation (GDPR). Your account data and submissions are controlled by the organisation running the programme you register with (the data controller); each deployment's portal is listed in section 6. Information about the programme operator for your deployment is available from the portal or on request at privacy@swiftmade.co.
The RiskrApps platform is funded by Risk RED (Risk Reduction Education for Disasters), a U.S.-based 501(c)(3) non-profit organisation. Risk RED has administrative access to the deployment portals and may receive your account data and submissions for programme monitoring and evaluation; for that use it acts as a data controller in its own right. You can contact Risk RED directly via riskred.org; requests sent to privacy@swiftmade.co that concern Risk RED's processing will be forwarded to Risk RED.
For technical and diagnostic data (device information and crash reports), which we process to keep the Application working, Swiftmade acts as the data controller.
Account data and content are processed solely to provide the service: creating and maintaining your account, storing your submissions and syncing them with your programme's portal. We process this data on the instructions of the data controllers and do not use it for our own purposes. Technical and diagnostic data is processed on the basis of our legitimate interest in keeping the Application secure, stable and working.
The Application uses the following third-party services, each governed by its own privacy policy:
Data is stored on DigitalOcean servers located in Singapore and operated by us. DigitalOcean processes it as our hosting provider under a data processing agreement, including standard contractual clauses where required. We protect your data with industry-standard safeguards; however, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If you have created an account in the SSSAS app, you can have your account and the personal data associated with it deleted at any time. Deletion requests are handled by Swiftmade OÜ on behalf of the relevant data controllers.
Option 1 — from the portal:
Option 2 — by email: write to privacy@swiftmade.co from the email address on your account, asking for your SSSAS account to be deleted. We may ask you to verify your identity before acting on the request.
| Deployment | Portal |
|---|---|
| Fiji | https://fiji.riskrapps.net |
| Laos | https://laomoes.riskrapps.net |
| Solomon Islands | https://sbsssas.riskrapps.net |
| Solomon Islands (FSP) | https://sbfsp.riskrapps.net |
| Tonga | https://tosssas.riskrapps.net |
Information about the programme operator (data controller) for your deployment is available from the portal or on request at privacy@swiftmade.co.
Deletion removes your profile, the personal data associated with it, and your submissions from the systems we operate. Copies of your data previously received by the programme operator or Risk RED are handled by them as data controllers; we will forward your deletion request to them. Certain data may be retained where the law requires, for the period required.
We keep your account data and submissions until your account is deleted, or for as long as the programme operator instructs or applicable law requires. Technical and diagnostic data is kept only as long as needed for stability and security monitoring.
Depending on the law that applies to you, you may have rights to access, correct, delete, or receive a copy of your personal data, or to restrict or object to its processing. You can send any such request to privacy@swiftmade.co; where the data controller must decide it, we will forward it and let you know. You may also lodge a complaint about our processing with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or with the data protection authority in your own country, where one exists.
The Application is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us personal data, contact us and we will delete it.
We will post updates to this page with a new effective date.
Swiftmade OÜ, registry code 14173141 — privacy@swiftmade.co