Kaavala

Introduction

Welcome to Kaavala ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Last Updated: January 2025

Information We Collect

Analytics Data

We use Firebase Analytics to understand how users interact with our app. This includes:

• App usage patterns and feature engagement (anonymized)
• Crash reports and performance data
• General device information (OS version, device type)

This data is aggregated and does not personally identify you.

Information You Provide

• Account Information: Phone number and name when you create an account
• Emergency Contacts: Names and phone numbers of people you designate as emergency contacts
• Profile Information: Any additional information you choose to provide

Information Collected Automatically

• Location Data: Your precise location when using SOS features, location sharing, or escort services (only when you activate these features)
• Device Information: Device identifiers for push notification delivery

Information Collected During Emergencies

When you activate an SOS alert, we may collect:

• Audio Recordings: If you enable audio recording during emergencies
• Photos/Videos: If you capture evidence during an incident
• Location History: Your location during the emergency period

How We Use Your Information

Data Type	Purpose
Phone Number	Account authentication and verification
Name	Identification during SOS alerts and escort requests
Location	SOS alerts, location sharing with contacts, escort coordination
Emergency Contacts	Sending alerts and your location during emergencies
Audio/Video/Photos	Evidence preservation during incidents (stored locally and/or securely uploaded)
Device Identifiers	Delivering push notifications for alerts and updates

Information Sharing

We share your information only in the following circumstances:

With Your Consent

• Emergency Contacts: When you trigger an SOS, your name and location are shared with your designated emergency contacts
• Volunteer Responders: During an SOS alert, nearby verified volunteers receive your name, location, and alert details to provide assistance
• Escort Volunteers: When you request an escort, relevant information is shared with the assigned volunteer

For Safety and Legal Purposes

• To comply with legal obligations
• To protect your safety or the safety of others
• To respond to law enforcement requests with proper legal process

Third-Party Service Providers

We use the following third-party services to operate Kaavala:

Service	Purpose	Data Shared
Firebase Authentication	User login and verification	Phone number
Firebase Cloud Firestore	Data storage	Account and emergency data
Firebase Cloud Messaging	Push notifications	Device tokens
Firebase Analytics	App usage analytics	Anonymized usage data
Google Maps	Location display	Location coordinates

These services have their own privacy policies. We encourage you to review Google's Privacy Policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Data is encrypted in transit using SSL/TLS
• Data at rest is encrypted on Firebase/Google Cloud infrastructure
• Access to user data is strictly limited to authorized personnel
• Volunteers undergo identity verification (KYC)
• Regular security assessments are conducted

Data Retention

• Account Data: Retained while your account is active
• Location Data: Retained only for the duration needed (active SOS/escort sessions)
• Emergency Recordings: Retained for 30 days or as needed for incident resolution
• Incident Reports: Retained as long as necessary for safety purposes

Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Receive your data in a portable format
• Withdraw Consent: Disable location sharing or other features at any time

To exercise these rights, contact us using the information below. We will process deletion requests within 30 days. Some data may be retained longer if required for legal compliance, safety purposes, or ongoing incident investigations.

International Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on your consent (for location and emergency features) and legitimate interests (for app functionality and safety)
• Data Transfers: Your data may be transferred to and processed in countries outside the EEA. We ensure appropriate safeguards are in place
• Right to Object: You may object to processing based on legitimate interests
• Right to Lodge a Complaint: You may file a complaint with your local data protection authority

California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Do Not Sell: We do not sell your personal information to third parties

Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify affected users within 72 hours of becoming aware of the breach
• Provide information about what data was affected
• Describe steps we are taking to address the breach
• Recommend actions you can take to protect yourself

Children's Privacy

Kaavala is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the app and updating the "Last Updated" date. Your continued use of the app after changes constitutes acceptance of the updated policy.

Contact Us