Safety centre
Safety features only count if they fire correctly under stress and never leak what they shouldn't. This centre is built to that standard.
SOS with fan-out
Up to five trusted contacts. An SOS fans out SMS carrying a live-trip link and raises a critical incident in the operator console's incident queue. Emergency numbers are per-market, from market config.
Automatic ride check-in
Long-trip and stationary signals trigger automatic check-ins; a failed check-in escalates to a HIGH incident for the operator. No wearable, no extra app — the trip itself is the sensor.
Live trip sharing that can't overshare
Sharing generates a tokenized public tracking page where identity, phone numbers and money are structurally excluded from the payload — not filtered, absent. Unknown, revoked and expired tokens all 404 identically, so the URL itself leaks nothing.
Women-only rides
Market-gated; fails closed at booking before pricing, and the driver side is filtered in dispatch SQL — not in the UI.
What's deliberately deferred
Trip audio recording is designed but not shipped — the reasoning and full design are documented, because consent laws differ by market and a half-right recording feature is worse than none. That's the honest-engineering pattern applied to safety.