Privacy Policy for RRT (Rapid Response Team)

1. Introduction

Welcome to RRT (Rapid Response Team), a community-based emergency alert mobile application. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application ("App").

By using the RRT App, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the App.

RRT is designed for animal welfare workers, volunteers, and feeders to coordinate emergency response within their communities.

2. Information We Collect

2.1 Information You Provide Directly

When you create a profile in the App, you provide:

• Name: Used to identify you when you send emergency alerts
• Mobile Number: Used as emergency contact information visible to other users when you activate an SOS alert
• Emergency Messages (optional): Text messages you may include with emergency alerts

2.2 Location Information

The App collects and uses location data for the following purposes:

• District Identification: To determine which district you are located in for routing emergency alerts to the correct community members
• Emergency Location Sharing: Your precise location (latitude/longitude) and approximate address are shared with other users when you activate an SOS alert

How Location Data is Used:

• Location is accessed only when the App is actively in use (foreground access only)
• Location data is used to determine your district using offline boundary mapping
• Your location is shared with volunteers in your district only when you actively send an SOS alert
• We do NOT track your location in the background
• We do NOT store historical location data beyond active emergency alerts

2.3 Automatically Collected Information

The App automatically collects:

• Device Information: Device type, operating system version, app version
• Unique User ID: A randomly generated UUID stored locally on your device to prevent duplicate notifications
• Firebase Cloud Messaging (FCM) Token: Used to send push notifications to your device
• Alert History: Active emergency alerts you send or receive (stored temporarily)

2.4 Information We Do NOT Collect

We do NOT collect:

• Precise location history or tracking data
• Contacts list
• Photos, videos, or media files
• Payment or financial information
• Social media accounts or credentials
• Browsing history or app usage analytics (beyond basic Firebase functionality)

3. How We Use Your Information

3.1 Primary Uses

Your information is used for the following purposes:

Emergency Alert Functionality:

• Send your name, phone number, and location to volunteers in your district when you activate an SOS alert
• Receive emergency alerts from other users in your district
• Route alerts to the appropriate geographic area

App Functionality:

• Create and maintain your user profile
• Subscribe you to relevant district-based notification topics
• Display active emergency alerts in your area
• Enable communication between alert senders and potential responders

3.2 Data Sharing

Your information is shared in the following circumstances:

During Active SOS Alerts (With Your Explicit Consent):

• Your name, mobile number, and location are shared with all users subscribed to your district's notification topic
• This occurs ONLY when you actively send an SOS alert
• You explicitly consent to this sharing during profile creation and confirm before each alert

Third-Party Services:

• Firebase (Google LLC): We use Firebase Cloud Messaging for push notifications and Firebase Core for app infrastructure. Firebase may collect device information and usage data according to their privacy policy: https://firebase.google.com/support/privacy
• Geocoding Services: We use platform-native geocoding services (Apple/Google) to convert coordinates to readable addresses

We DO NOT:

• Sell your personal information to third parties
• Share your information for advertising or marketing purposes
• Share your location data except during active emergency alerts you initiate

4. Data Storage and Security

4.1 Where Your Data is Stored

• Locally on Your Device: Your profile (name, mobile number, user ID) is stored locally using encrypted storage on your device
• Cloud Backend: During active SOS alerts, your information is temporarily stored on our backend servers to facilitate alert distribution
• Firebase: Push notification tokens and subscriptions are managed by Firebase (Google)

4.2 Data Retention

• Profile Data: Stored on your device until you delete it via "Delete My Data" in the Profile screen
• Active SOS Alerts: Stored for 60 minutes after activation, then automatically removed
• Server Logs: Retained for 90 days for security and troubleshooting purposes
• User ID: Persists on your device until you delete the app or clear app data

4.3 Security Measures

We implement reasonable security measures to protect your information:

• Encrypted Local Storage: Sensitive data stored using platform-secure storage mechanisms
• HTTPS: All network communications use encrypted HTTPS connections
• No Plaintext Passwords: The App does not use password authentication
• Limited Access: Only necessary volunteers in your district receive your information during alerts

However, please note: No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights and Choices

5.1 Access and Update

You can access and update your profile information at any time:

• Open the App → Navigate to Profile screen
• Edit your name or mobile number
• Click "UPDATE PROFILE" to save changes

5.2 Data Deletion (Right to Erasure)

You have the right to delete all your personal data from the App:

How to Delete Your Data:

1. Open the App → Navigate to Profile screen
2. Scroll to the "DANGER ZONE" section
3. Click "DELETE MY DATA"
4. Confirm deletion

What Gets Deleted:

• Your profile (name and mobile number)
• User ID and preferences
• Alert history and district subscriptions
• All app settings and data

Note: This action is permanent and cannot be undone. You will need to create a new profile to use the App again.

5.3 Location Permissions

You can manage location permissions through your device settings:

• iOS: Settings → RRT → Location → Select "Never" or "While Using the App"
• Android: Settings → Apps → RRT → Permissions → Location → Deny or Allow

Note: Denying location access will prevent the App from functioning correctly, as location is essential for district-based emergency routing.

5.4 Notification Permissions

You can disable push notifications through your device settings:

• iOS: Settings → RRT → Notifications → Toggle off
• Android: Settings → Apps → RRT → Notifications → Toggle off

Note: Disabling notifications means you will not receive emergency alerts from your community.

6. Children's Privacy

The RRT App is NOT intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

By using the App, you confirm that you are 18 years of age or older.

7. Third-Party Services

7.1 Firebase (Google LLC)

Services Used:

• Firebase Cloud Messaging (push notifications)
• Firebase Core (app infrastructure)

Data Shared with Firebase: Device tokens, district subscription topics, device information

Firebase Privacy Policy: https://firebase.google.com/support/privacy

8. Data Processing Legal Basis (GDPR & DPDPA)

We process your personal data under the following legal bases:

• Consent: You explicitly consent to phone number sharing during profile creation and before each alert
• Legitimate Interests: Operating the emergency alert service for community safety

9. Your Rights

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (right to be forgotten) - via in-app "Delete My Data"
• Restrict or object to processing
• Data portability (where applicable)
• Withdraw consent at any time

10. Summary of Data Practices

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For material changes, we will notify you via in-app notification or push notification
• Continued use of the App after changes constitutes acceptance of the updated policy

13. Compliance

This privacy policy complies with:

• Apple App Store Review Guidelines (Section 5.1)
• Google Play User Data Policy
• General Data Protection Regulation (GDPR) - European Union
• Digital Personal Data Protection Act (DPDPA) 2023 - India
• California Consumer Privacy Act (CCPA) - United States