Privacy policy

Location (precise and coarse): collected for two separate purposes. Safety — while a safety watch you started yourself is running, the app keeps a location stream alive so that a fall can be detected with the phone in your pocket, and so that an alarm can carry your position and your floor. Attendance — during your scheduled working hours, inside the site boundary, your location confirms that you are on the assigned site.

Background location: this is what keeps the safety watch working while the app is closed and the screen is off — without it, a fall could only be detected while you were looking at the app. It also lets on-site presence be confirmed during working hours while the app is not open.

Motion sensor (accelerometer): the phone turns its readings into one motion label — still, walking, stairs or lift — and, during working hours, sends that label with each location to confirm your floor and your movement. A fall is detected on the device itself. Raw motion readings never leave the phone, and no steps are counted.

Barometric pressure: used to detect which floor of the building you are on, because indoor GPS altitude is unreliable. The floor is what a rescue team needs, and what a floor-level evacuation muster groups people by.

Bluetooth and Wi-Fi signals: recorded during working hours while you are on site — to refine which floor you are on, and to show your employer whether the beacons and Wi-Fi access points it installed on the site are still being heard. An Android phone scans the signals around it. iOS permits no such scan: on an iPhone the app reports only the identifier of the single Wi-Fi access point the phone is already connected to, and nothing about the networks around you. Every identifier is hashed on your phone before it is sent, so the server only ever sees an opaque token and never a network name; we do not connect to your personal accounts.

Account and shift data: your name/user identifier, arrival and departure times, and worked hours, so your employer can see attendance and hours.

Safety alerts: when an alarm fires, the alert record carries who you are, when it happened, your position — marked as GPS or approximate, never shown as more certain than it is — and your floor.

Notification token: your device’s push token, so an alert or an evacuation order can reach your phone.

Safety: to alert your supervisors and your site’s safety wardens when you press SOS, when a fall is detected and you do not cancel the alarm, or when you go silent during a shift; and to run a floor-level evacuation muster that accounts for everyone on site, floor by floor.

Attendance: to confirm on-site presence during working hours, detect the floor, and calculate arrival time, lateness, breaks, and total hours worked. Attendance is derived from presence you are already sharing while on site during your shift — it is not the reason the app runs in the background.

To show site managers, in a separate web panel, who is on site and on which floor.

We do NOT use your data for advertising, we do NOT sell it, and we do NOT track you across other apps or websites.

Recording is limited to your scheduled working hours, inside the site boundary (plus a small surrounding buffer). Location, barometer, Bluetooth and Wi-Fi data are recorded only then. So is the motion label that comes with each location. One final location is recorded when you leave, so your departure is registered.

Outside your working hours, nothing is recorded. If you started a safety watch yourself, the phone keeps the location, motion and pressure sensors running — that is what makes fall detection possible at all — but those readings are processed on the device for fall detection only, and are sent neither to us nor to your employer.

Outside working hours a position leaves your phone in exactly one case: when an alarm actually fires — an SOS you press, or a fall you do not cancel within the 30-second countdown. Only then are your position and your floor transmitted, and only to your site’s safety wardens. Responding to an evacuation muster sends only your acknowledgement — no position.

The safety watch is yours: you start and stop it from the app’s home screen, your employer cannot start one for you, and a watch ends automatically after 12 hours.

Nothing is recorded while you are logged out, or after you withdraw consent.

Attendance data is shared with your employer (the organization that assigned you the app) through its administrator panel.

In an emergency, your position and your floor are shared with the safety wardens of your own company — the people your employer has granted the emergency permission to — and never with another company. Alerts reach their phones through push notification services (Expo, Apple, Google).

We use infrastructure providers to host the service. We do not share data with advertisers or data brokers.

Precise location records, with their motion label, are kept for 90 days. Presence and hours records are retained for about 13 months, or for as long as your employer requires them for workforce administration, then deleted or anonymized.

Safety alert records (an SOS, a detected fall, an evacuation) are kept as part of your employer’s safety record and are not removed by the automatic location purge.

You may request access to, correction of, or deletion of your data. Because your employer controls the data, please direct requests to your employer, or contact us and we will assist.

You can revoke location, Bluetooth, motion or notification permissions at any time in your device settings, and you can stop a safety watch or withdraw consent from the app’s home screen.

The safety watch needs “Always” location access to protect you with the app closed and the phone in your pocket. With “While Using the App” it stops the moment you close the app; with location off entirely, neither the safety watch nor on-site presence can work.