SafeCare

Flash the SD card

Download the image and write it to a microSD card with Raspberry Pi Imager. No terminal needed.

Plug in the Pi and connect to its WiFi

The Pi broadcasts "SafeCare-Setup". Connect from your phone. A setup page opens automatically.

Walk through the setup wizard

Connect to your WiFi, set a device password, and photograph your encryption key QR code. This key is the ONLY way to unlock your data.

Create your account and define your region

Open safecare.local in your browser, scan the QR to unlock, create your admin account, and pick your operating area on a map. Map data downloads automatically.

Built for Mutual Aid

Admin Dashboard

Manage recipients, drivers, delivery zones, and dispatch sessions. Map-based address entry with self-hosted geocoding.

Driver App (PWA)

Offline maps, GPS-guided routing, automatic tile caching. Audio alert near delivery addresses. Works on any phone.

Recipient Notifications

Signal (E2E encrypted), SMS, or WhatsApp. 7 languages. No names or addresses in messages.

Self-Hosted Maps

Geocoding and routing run on your hardware. No addresses sent to Google, Mapbox, or any external service.

Remote Wipe + Panic Erase

Admin can revoke a driver's routes remotely. Drivers can instantly erase all local data with a long-press button. No network needed.

WiFi Recovery

If your WiFi changes, the Pi automatically creates a recovery network. Reconnect from your phone. No SSH needed.

Security: Encryption Key Never on the Device

The data encryption key (DEK) exists only in memory and on a physical QR code printout. It is never written to disk.
If the Raspberry Pi is seized while powered off, the database is unreadable. There is no key to find.
On every reboot, an admin scans the QR code to unlock. No QR = no data access.
Driver phones encrypt route data with a session key that lives only in volatile memory (sessionStorage). Tab closed = key gone.
Recipient PII encrypted at rest with pgcrypto. Delivery records auto-deleted within 24 hours.
PostgreSQL query logging disabled to prevent the encryption key from leaking into log files.
Two-factor authentication with backup recovery codes for admin accounts.
Admin sessions tracked in Redis with explicit logout and server-side revocation.
All admin actions audited: login, logout, dispatch, driver revocation.
Emergency destroy script shreds all data in seconds.

Hardware

A Raspberry Pi 5 (8GB, ~$80) with a microSD card and USB-C power supply is all you need. A Pi 4 (4GB) also works for metro-area deployments. The setup wizard shows a RAM estimate based on your region size.

Pre-Built Map Data

Pre-built OSRM routing data for all 50 US states and 50 metro areas. Each deployment downloads only what it needs based on its operating region.

Flash. Plug In. Set Up from Your Phone.