Privacy Policy | Offshore Safety Manager

1. Who we are, and who is responsible for your information

Offshore Safety Manager ("the App") is a safety app for offshore energy installations: operators, equipment, sites and shifts. It is made and run by DTI Consulting FZ-LLC ("DTI", "we", "us"), VUET2362, Compass Building, Al Hulaila, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates.

The App is for people who work for a company that has signed up. The company you work for decides what is recorded and why, and is the controller of the safety records its people make in the App. DTI is the processor: we store and handle those records on the company's behalf. For your account, for signing in, for the website and for billing contacts, DTI decides how the information is used and is the controller.

Contact us at info@dticonsultancy.com.

2. What we collect, and why

Name, email address and user ID. To create your account and sign you in. Your company invites you or gives you a join code (a manager can also sign up a new company). You choose a password, which we store only in scrambled (hashed) form.
Age confirmation. That you confirmed you are 18 or over, and when. We do not keep your date of birth. [Draft: final wording is Dave's.]
Role and company. Whether you are an Advanced (manager) or a Basic (operator or worker) user, which company you belong to, and your site.
Phone number (optional; escalation contacts). If you add one, or your company adds you as an emergency contact. When your company has set you up as an alert contact or recipient, it is used to call you for alerts and Critical safety notices. If you raise an SOS or miss a check-in, the alert sent to your company's alert contacts (including contacts who do not use the App) can contain your name, the time, your location (or say it is not known) and your phone number if you have one, so they can call you. The email sent to alert contacts with an email address carries the same details, with a map link to your location; the push notification shows only your name. If nobody answers, the alert also goes to your company's managers and Health and Safety duty holders. We do not use phone numbers for marketing.
City and profile photo (optional). Shown to your company on your profile.
Location (precise, or approximate if you allow only that). We receive it for three things only. A hazard or incident report you choose to add a position to: one position, taken once when you add it, shown to your company's supervisors and managers with the report. An SOS you start: your position is shared with your company's alert contacts until you tap "I am safe", your company closes the alert, or 2 hours pass, including while your screen is locked; this is the only time the App uses your location in the background. A check-in timer you start: one position when you start it, when you check in, when you add time, when it ends, and when its alarm goes off. We do not follow your position at any other time. A test SOS never collects your location. If the App cannot send an SOS over data, and the App has contact numbers for your alert contacts, it offers to send a text from your phone's own messaging app to them; that text includes your position when the phone has one, and does not pass through our servers. While an SOS is sharing your location on Android, a visible notification stays on your screen. [Draft: final wording is Dave's.]
Shift times. When you start and end a shift (answering the fit for work declaration starts it). Managers and Health and Safety duty holders see them. They hold no position.
Photos and documents. Pictures you attach to a failed inspection item or pre-use check, a defect, a near miss, a hazard or incident report, a closed corrective action, a training certificate or a document, and PDF documents uploaded to a person's or a piece of equipment's record (for example an operator certificate, a thorough examination report or a service record). The App asks for camera access when you take a photo or scan a QR label.
Other content you write. Inspection and pre-use check answers and notes, equipment hour-meter readings, defects, stops and sign-offs, near misses and observations, permits to work (the people named, times, approvals and your drawn signature), hazard and incident reports with witness statements and root causes, corrective actions, toolbox talk attendance, equipment and certificate records with their dates, training and quiz results, certificates and site induction acknowledgements, and messages you acknowledge.
Fit for work declaration (health information). You can answer Yes or No to questions about rest, alertness, alcohol or drugs, medication, eyesight and illness or injury at the start of a shift. Health information is a more sensitive kind of personal information. Only you, your company's managers and people it has given the Health and Safety duty can see the answers. If an answer means you should not work, the managers and Health and Safety duty holders of your site are alerted (if your site has none, those of your company). The alert and its email do not name you or contain the answers: they see who it is in the App after signing in. The report for this checklist never contains photos.
Device ID and push token. A code from Apple or Google (through Firebase) that lets us send you notifications on that phone.
Voice (dictation). If you dictate a note, your phone's own speech service turns the speech into text. On an iPhone that is Apple's service; on Android it is the phone's speech service, which may use Google's servers. The App and our servers never receive or keep the audio, only the text you confirm.
Emails we send you (sign-in codes, alerts, document reminders) and a record that they were sent or failed.
Technical logs. Our servers log each request with the internet (IP) address it came from, and what was asked. We use these to keep the service secure and to block repeated failed sign-in attempts.
On your device. So that checks work without a signal, the App keeps unsent work on your phone, protected by the phone's own encryption (on an iPhone, Apple's Data Protection; on Android, an encrypted database). If you tick "Remember me", it keeps your session for 30 days and asks for Face ID, fingerprint or your phone's PIN when you reopen it. That check happens on your phone only; no face or fingerprint data ever reaches us.

We do not use advertising, we do not track you across other apps or websites, and we do not sell personal information. The App has no analytics or crash-reporting tool of its own.

3. How we use it

To run the App: sign-in, inspections and pre-use checks, stops, defects and sign-offs, near misses, permits to work, hazard and incident reports, corrective actions, toolbox talks, equipment and certificate records and their expiry reminders, training, safety notices and their read receipts.
To raise alerts: SOS and missed check-ins reach the contacts your company chose, by push and email, and escalate if nobody answers.
To keep the service secure, prevent misuse and fix faults.
To bill your company for its subscription (managers' contact details only).
To answer your questions and requests, and to meet legal duties.

Where the law asks for a legal basis, we rely on performance of the contract with your company and its legitimate interest in the safety of its people (and, for DTI's own purposes, our legitimate interest in running a secure service). For health information and location, the processing is for the company's safety duties as employer. Your company may tell you more.

4. Who we share it with, and where it is stored

We share personal information only with the companies that help us run the App, and with your own company:

Your company: its managers and alert contacts see the records and alerts relevant to them. People in other companies cannot see them.
Render (application hosting, Frankfurt, Germany) and MongoDB Atlas (database, Frankfurt, Germany).
Cloudflare R2 (private file storage for photos, documents and reports, in the European Union).
Stripe (payment processing for company subscriptions). We never see or store card numbers.
Resend (emails: sign-in codes, alert emails, document reminders).
Google Firebase and Apple (push notifications). Apple and Google also run the app stores.
Google Translate: only if you choose a language other than English on this website, it loads Google's translation script. Google then receives your internet (IP) address, browser details and the text of the pages you view, to translate them. If you stay in English, your browser makes no request to Google Translate. Choosing a language sets a cookie in your browser (googtrans) that remembers it; choosing English again removes it. The App itself does not use it.
Authorities, where the law requires it.

Some of these providers handle information outside your country, including outside the European Union and the United Arab Emirates. Where the law asks for it, we rely on the safeguards these providers offer, such as standard contractual clauses.

5. How long we keep it

Safety records (inspections and pre-use checks, hour-meter readings, stops, defects, near misses, permits to work, hazard and incident reports, actions, toolbox talks, training records, alerts, documents) stay with your company for as long as its account is open, because they are its safety record. When a company closes its account, its data is deleted from our live systems; backups are kept for up to 35 days.
Location: for an SOS or a check-in timer we keep the first and last point; the points in between are deleted 30 days after they were received.
When a person deletes their account, their profile and sign-in are deleted, and the company's safety records they made are kept with their name and contact details removed (see the Delete your account page).
Server logs are kept for a limited time by our hosting provider.

6. Your rights

You can ask to see the information we hold about you, to correct it, to delete it, to restrict or object to its use, and to receive a copy. Because most records belong to your company, we may refer your request to it. We answer within 30 days. Write to info@dticonsultancy.com. You may also complain to your data protection authority.

To delete your account yourself, see Delete your account. Deleting your account does not cancel a subscription. If you are the only member of a company that has a live subscription (one that has not ended), deleting your account would close the company, so it is refused until the subscription has ended: your company's manager handles that, or we can help at info@dticonsultancy.com.

7. Security

Information travels over encrypted connections (HTTPS). Photos and documents are kept in private storage and are given out only as short-lived links to people allowed to see them. Work the App keeps on your phone is protected by the phone's own encryption. No system is perfectly secure, and we ask you to keep your password and phone safe.

8. Not for children

The App is for workplace use by adults (18 and over). It is not meant for anyone under 18, and we do not knowingly collect information from them.

9. Cookies on this website

The website uses only the cookies it needs: sign-in and security cookies, and cookies that remember the language you choose (including Google's translation cookie, googtrans, set only when you choose a language other than English). We use no advertising or analytics cookies of our own.

10. Changes

We will update this page when the App or the law changes and show the date above. For important changes we will tell company managers in the App or by email.