Privacy policy

What we collect

Account details you provide: name or callsign, email address, and an optional general location (typically a town or region) used to fetch local weather and emergency alerts.

Readiness details you choose to enter: survival skills, proficiency levels, certifications, and assets or gear.

Squad content: messages, photos, videos, and plan items such as meeting points and communications methods.

Basic technical data needed to run the service, such as request logs and error reports.

Who can see it

Your profile, skills and asset inventory are private to you by default. Squad members can see the readiness details of people they share a squad with, so the squad can plan around real coverage.

You appear in member search only if you turn on the discoverability toggle in your profile. A squad appears in squad search only if its owner lists it publicly. Both can be switched off at any time.

Squad messages and uploaded media are restricted to members of that squad and are served through short-lived signed links.

We do not sell personal data, and we do not share your skills, gear or location with advertisers.

Location and alerts

Location is used to retrieve public weather and National Weather Service alert data for your area. You can enter a broad region rather than a precise address, and alerts never replace guidance from official emergency services.

Offline downloads

Squad packets you download are plain files stored on your own device. Once downloaded, their security is in your hands — treat a packet containing meeting points and frequencies as sensitive.

Agent and third-party access

If you connect an AI agent or third-party client, it can only act with a token you explicitly approve on the consent screen, and only within the same access rules that apply to your own account. You can revoke that access at any time.

Analytics and cookies

We use cookies and local storage strictly necessary for signing in and keeping your session, and for remembering your cookie choice. If privacy-respecting product analytics are enabled, they measure page views and feature usage in aggregate — never the contents of your squad messages or plans.

Retention and deletion

Your data stays while your account is active. You can delete your account at any time; profile, skills, assets and squad memberships are removed, and messages you posted are deleted or detached from your identity. Backups age out on a rolling schedule, normally within 30 days. We may retain limited records we are legally required to keep, such as payment and tax records.

Your choices and privacy controls

You can edit or remove any skill, asset or plan item, leave a squad, turn discoverability off, unlist a squad, download a copy of your data, and delete your account outright — all from Account & billing and your profile page.

You can also opt out of non-essential emails using the unsubscribe link in any notification email. Service and security emails, such as password resets and receipts, are required to run your account.

Your rights (US and EU/UK)

Depending on where you live you may have the right to access, correct, delete, or receive a portable copy of your personal information, to withdraw consent, to object to or restrict certain processing, and not to be discriminated against for exercising these rights. California residents may also request the categories of information collected and disclosed; we do not sell personal information or share it for cross-context behavioral advertising.

Most of these rights can be exercised instantly with the in-app controls above. For anything else, contact us and we will verify your request and respond within the time the law allows, normally 30 days. If you are in the EU or UK, our lawful bases are performance of our contract with you (running your account and squads), legitimate interests (security, abuse prevention, product improvement), consent (optional features such as discoverability), and legal obligation.

How we protect your data

Data is encrypted in transit with TLS and encrypted at rest by our hosting provider. Access to squad content and profile details is enforced at the database level with row-level security, so one account cannot read another's private records. Uploaded media is served through short-lived signed links rather than public URLs, and passwords are salted and hashed — never visible to us. We check new passwords against known breach lists.

No system is perfectly secure. If a breach affects your personal information we will notify you and any required regulator as the law requires. Report a suspected vulnerability or account compromise through the contact page.

Service providers

We use a small set of processors to run the Service: cloud hosting, database and authentication; Stripe for payments (we never see your full card number); an email delivery provider; weather and National Weather Service alert data sources; sign-in with Google and Apple if you choose them; and privacy-respecting analytics. Providers may process data under contract on our behalf and are not permitted to use it for their own purposes.

Children

The Service is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it.

International transfers

We operate in the United States, and our providers may process data there or in other countries. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

Changes to this policy

If we make material changes we will announce them in the app or by email and update the effective date at the top of this page. Continuing to use the Service after a change means you accept the updated policy.

Questions

Ask us anything about your data through the contact page. You can review or change your cookie choices at any time using the "Cookie settings" link in the footer, or under Account & billing → Privacy & data. We reply within one business day.