Privacy Policy

The data controller responsible for your information is Nemanja Andjelkovic. For any privacy question or request, contact us at office@redotorescue.com.

When a SAR organization deploys the Service for its own teams, that organization acts as the controller of its operational data and we act as a processor on its behalf. In that case, requests about operational data are best directed to your organization’s administrator.

Account & personnel data

• Identity and contact details: name, username, email address, phone number, role within the organization.
• Professional details relevant to rescue work: certifications, qualifications, team and region assignment, and — where your organization records it — emergency medical information (e.g. blood type, allergies) used for responder safety.
• Authentication data: securely hashed credentials and session tokens.

Precise location data

With your permission, the mobile app collects precise GPS location while you are on duty in an active mission. This is described in detail in Section 3.

Operational content you create

• Mission records, search sectors, base locations and points of interest you draw or mark on the map.
• Coordinates of located persons, clues, hazards and other field observations.
• GPS tracks recorded during a mission and GPX route files you import.
• Mission communications, event timelines, reports, and notes.
• Equipment, vehicle and loan records, including generated documents.

Device & technical data

• Device model, operating system version, app version and language settings.
• IP address and basic connection information.
• Diagnostic and crash logs used to keep the Service reliable.

• To operate the core Service: coordinating missions, displaying the live operational map, and managing teams, equipment and fleet.
• To keep rescuers safe by maintaining situational awareness during active operations.
• To generate mission reports, loan documents and audit records.
• To authenticate users and enforce role-based access controls.
• To maintain security, prevent abuse, and diagnose and fix technical problems.
• To comply with legal obligations and respond to lawful requests.

Where the EU/EEA General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

• Consent — for collecting precise and background location, which you may withdraw at any time.
• Performance of a contract — to provide the Service to your organization and its users.
• Legitimate interests — to secure the Service, prevent misuse, and coordinate rescue operations effectively.
• Vital interests — processing that is necessary to protect the life and safety of a person during an emergency.
• Legal obligation — where we must process data to comply with applicable law.

Within your organization

Operational data — including a rescuer’s live position during a mission — is visible to authorized members of the same organization (for example coordinators and administrators) according to their role. This visibility is the purpose of the Service.

Service providers

We use a limited number of trusted providers to host and operate the Service (for example cloud hosting, map tile providers, and crash-diagnostics). They may process data only on our instructions and under contractual confidentiality and security obligations.

Legal & safety

We may disclose information where required by law, to respond to lawful requests by public authorities, or where necessary to protect the life, safety or rights of any person.

We keep personal and operational data for as long as your organization maintains its account and as needed to provide the Service. Mission records and audit trails may be retained longer where your organization is legally or operationally required to keep records of rescue operations. Location tracks are retained as part of the mission record; when no longer needed they are deleted or anonymized.

When an account is closed, we delete or anonymize personal data within a reasonable period, except where retention is required by law.

• Encryption of data in transit using industry-standard TLS.
• Role-based access control, so users only see what their role permits.
• Hashed credentials and token-based authentication.
• Audit logging of sensitive actions.
• Operational and organizational measures to limit access to data on a need-to-know basis.

No system can be guaranteed perfectly secure, but we work continuously to protect the data entrusted to us.

Depending on your location, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent (including location consent) at any time.

To exercise these rights, contact us at office@redotorescue.com or, if your data is managed by your SAR organization, contact your organization’s administrator. You also have the right to lodge a complaint with your local data-protection authority.

The Service is intended for use by adult members of professional and volunteer rescue organizations. It is not directed to children, and we do not knowingly collect personal data from children. Note that the coordinates of a person located during a rescue (who may be of any age) are operational data created by rescuers, not data collected from that person as a user of the app.

Your data may be processed in countries other than your own. Where we transfer data internationally, we use appropriate safeguards (such as Standard Contractual Clauses) to ensure it remains protected in line with applicable law.

The Service displays maps using third-party map providers and may use third-party infrastructure for hosting and crash diagnostics. These providers process limited technical data (such as IP address and map requests) to deliver their service. We encourage you to review their respective privacy policies.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you within the Service. Continued use after an update constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or how we handle your data, contact Nemanja Andjelkovic at office@redotorescue.com. Website: https://redotorescue.com.