Sexual Harrasment Policy
Sexual Harrasment Policy
Effective date: 19 August 2026
App: SafeReport
Developer: Mbarara University of Science and Technology
Contact: safereport@must.ac.ug
Phone: +256-485-420512
SafeReport is a campus safety and sexual-harassment reporting application operated by Mbarara University of Science and Technology (MUST).
This Privacy Policy explains how SafeReport collects, uses, stores, shares, and protects personal information when you use the application.
By using SafeReport, you acknowledge this Privacy Policy.
Depending on how you use the application, we may collect:
Full name
Email address
Telephone number
Student identification number
Department, faculty, study level, and role
Gender, where voluntarily provided
Authentication and account information
Incident description
Date, time, and location of an incident
Information about alleged perpetrators or witnesses
Report category and severity
Follow-up responses and case communications
Anonymous-report tracking token, where applicable
If you choose to attach evidence, SafeReport may access and upload:
Photographs
Videos
Audio recordings
Other files that you deliberately select
Evidence is optional. You can submit a report without attaching evidence unless the application specifically indicates otherwise.
We may process limited technical information required to operate and secure the application, including:
Device and application information
Authentication identifiers
Notification tokens
Connectivity and diagnostic information
Security settings stored locally on your device
If you grant notification permission, SafeReport processes a Firebase Cloud Messaging notification token to send:
Report-status notifications
Safety notifications
Support communications
Important service announcements
You can disable notifications through your device settings.
We use information to:
Receive and manage harassment and safety reports
Allow users to track and update their reports
Provide support, counselling, medical, legal, and emergency resources
Contact users about their reports where they have provided contact details
Protect users and respond to urgent safety situations
Authenticate accounts and prevent abuse
Send requested notifications
Maintain, secure, and improve SafeReport
Generate administrative summaries or insights to help authorized MUST personnel review reports
Comply with legal, regulatory, and institutional obligations
We do not sell personal information.
SafeReport may allow you to submit a report anonymously.
Anonymous reporting does not mean that every technical detail is impossible to associate with a submission. The application may retain a tracking token and limited technical information needed to prevent abuse, enforce service limits, and allow you to track the report.
Anonymous reports are accessible only to authorized personnel for legitimate case-handling, safeguarding, investigation, and support purposes.
SafeReport requests access to the microphone only when you choose to record audio evidence.
SafeReport requests access to the camera, photo library, or files only when you choose to take or select an image, video, profile photo, or other evidence.
These permissions are:
Requested at the time the feature is used
Optional unless you choose to use the related feature
Used only for the feature you selected
Not used to monitor you in the background
You can revoke these permissions at any time in your device settings. Revoking permission may prevent the related feature from working.
SafeReport does not:
Read SMS messages
Read call history
Collect SMS content
Collect call-log information
Send SMS messages automatically
Make phone calls automatically
When you select an emergency call or SMS option, SafeReport opens the phone or messaging application on your device with the selected contact or message. You review and approve the action in that application.
Your mobile network provider’s normal fees, terms, and privacy practices may apply.
SafeReport uses third-party services to operate the application, including:
Firebase Authentication for account authentication
Firebase Firestore for application data and reports
Firebase Cloud Messaging for notifications
Firebase services and Vertex AI for authorized administrative report analysis and support features
Cloudinary for selected audio or video evidence
ImgBB for selected image evidence
These providers process information only to provide their services to SafeReport. Their own terms and privacy policies may also apply.
Before publishing this policy, verify that the actual Cloudinary, ImgBB, Firebase, and AI configurations match this description.
We may share report information with authorized MUST personnel who need the information to:
Receive and investigate reports
Manage safeguarding and case response
Provide counselling, medical, legal, or emergency support
Protect users from immediate harm
Fulfil legal or institutional obligations
We do not share information for advertising or sell it to third parties.
Information may also be disclosed where required by law, court order, or an emergency involving a serious risk to life or safety.
We use access controls, authentication, secure connections, and role-based administrative access to protect information.
No electronic storage or transmission system can be guaranteed to be completely secure. Users should avoid including unnecessary personal information about other people in a report.
We retain account, report, evidence, and case information for as long as reasonably necessary to:
Provide the SafeReport service
Handle and document safeguarding cases
Meet legal, regulatory, and institutional requirements
Resolve disputes
Prevent fraud and abuse
Maintain security and audit records
Retention periods may differ depending on the type and sensitivity of the information.
Subject to applicable law and institutional requirements, you may request to:
Access personal information held about you
Correct inaccurate information
Ask how your information is being used
Request deletion of information where deletion is legally and operationally possible
Withdraw optional permissions
Withdraw from a reporting process
Disable notifications
Submit an anonymous report
Some information may need to be retained for legal, safeguarding, investigation, audit, or public-safety reasons.
To make a privacy request, contact safereport@must.ac.ug.
SafeReport is intended for members of the MUST community and is not directed at children. We do not knowingly collect personal information from children without appropriate legal or institutional authorization.
SafeReport is not a replacement for emergency services. If you are in immediate danger, contact the appropriate emergency authority directly.
We may update this Privacy Policy when the application, services, or legal requirements change. The updated policy will be published at this same URL, together with a revised effective date.
For questions, complaints, or requests concerning privacy and data protection, contact:
Mbarara University of Science and Technology
Email: safereport@must.ac.ug
Phone: +256-485-420512
You may also contact the MUST Gender Desk, Dean of Students Office, University Legal Office, or designated Data Protection Officer.