Privacy Policy

1. Who we are

RESQ+ is published by Sornsawan Ltd., a company registered in Thailand. It is the data controller for the personal data described in this policy. Contact: sales@sornsawan.com.

RESQ+ helps in an emergency; it does not replace the emergency services. In a life-threatening situation, always call your local emergency number.

For each feature, this policy says what we collect, why, where it goes and how long we keep it. It describes version 4.6 of the app and says where earlier versions differ.

2. Your emergency profile

Your profiles (yours and those of relatives you add) can contain health data and identifying details: blood type, allergies, conditions, medicines, surgeries, organ-donor status, age or date of birth, a photo, phone number and e-mail, notes, family doctor, preferred hospital, emergency contacts and insurance. On your phone, the profile store is encrypted (AES-256, Android Keystore) when the phone's secure key store is available; the app's offline copy of your account data and the profile photos are kept in the app's own storage without this extra encryption. A copy is saved in your RESQ+ account (Google Firebase, encrypted at rest by Google) so that it survives a lost or replaced phone. Other users cannot read it; our authorised staff can technically access it, and only do so to run the service or when the law requires it. You can change or delete a profile at any time in the app; its photo and a backup copy made when your account moved to the current storage format stay in your account until you delete the account.

3. What each feature uses, and why

Data is used only for the feature you are using:

• Account and sign-in: your Google account (name and e-mail address) and a phone number verified by SMS, both required; an account identifier, a notification token, your country, language and app settings, and the approximate area (about 5 km) your phone is in, used to route community alerts. Used to sign you in, to restore your settings, to protect the community from abuse and to deliver alerts to you.
• SOS: when you trigger an SOS, your name and position are sent to your emergency contacts by SMS from your own phone (through your carrier), by e-mail (through Resend) and through a private live-tracking link. The circles you select for SOS receive your name, position and altitude, the live link and, unless you turn them off in Settings, your blood type and critical allergies (your medicines, conditions and surgeries only if you turn them on). The phone records video with sound during the SOS (on by default); anyone who has the live link can follow your position and watch the video without an account. We also record technical data from your phone during the SOS: battery, network, screen state, type of movement, button presses and fall or crash detection. If you turn on the help request, the SOS also posts an anonymous community alert with your position.
• Trips: when you declare a trip, your emergency contacts are told when you leave, arrive or cancel: by e-mail to every contact with an address (the e-mail includes your phone number) and by SMS from your phone to your main contact. Both are on by default and can be turned off. If you do not confirm your arrival, an SOS countdown starts.
• Circles (Team Connect): your name and membership, the alerts and messages you send (each alert includes your position and, unless you turn it off, your blood type and allergies), your live position and trips when you share them, meeting points, and automatic notices with your position when you arrive at or leave a place saved in the circle. Members of the circle see this; anyone who has the circle's invite code can join it.
• Community alerts: the alerts you post (type, text, position, address and altitude, your name unless you post anonymously, and any photo, voice note or video) and your messages in their chats can be seen by any RESQ+ user; the app shows them to people within about 5 km and notifies people in the area. An anonymous report hides your name, but the alert still carries your account identifier, which other users' apps can technically read and link to your other posts. Chat messages are translated automatically by Google's AI. Once a week, a statistical summary of recent alerts is prepared with Google's AI (alert types and counts, and the beginning of up to 10 alert texts with their address, are sent to it); the summary keeps the figures and the AI's comment.
• Reports and blocking (version 4.6): when you report an alert, a message or a person, we record your account identifier, the reason and the date; the person reported is never told who reported them. Content reported by three different people is hidden automatically (an emergency is sent to human review instead); anything reported by three people is reviewed by our team, which can ban an account. Blocking someone happens on your phone only: nothing is sent to us or to that person.
• First Aid Assistant: what you type, what you say (turned into text by your phone's speech-recognition service), the photos you add, the recent messages of the conversation, your country and its emergency numbers, and the items of your first-aid kit are sent to Google's AI (Gemini, on Google Cloud) to answer you. The medical record of the chosen profile is sent only if you agree (section 4, which also explains how versions before 4.6 differ). Conversations stay on your phone only, encrypted when the phone's secure key store is available, and are not included in phone backups; each profile keeps its current and its previous conversation, up to 100 messages each. Photos taken for the assistant are deleted from the phone after one day, the next time you open the assistant. Our servers keep no copy of the questions, answers or photos, only a daily count of your messages to apply the daily limit.
• Subscriptions: purchases go through Google Play. RevenueCat manages your subscription status: when you are signed in, the app sends it your account identifier, e-mail address, name and phone number, whether or not you subscribe, so that your subscription can be found when you contact us. GoMarketMe, our affiliate program, can see Google Play sales records to credit partners; it receives nothing from inside the app. When you delete your account, we ask RevenueCat to delete its record too.
• Permissions: location (also in the background during an SOS, a shared position or a trip), camera, microphone, SMS, notifications, physical activity (recorded during an SOS) and phone state (to choose the SIM for emergency SMS), plus special access you can grant for SOS reliability (display over other apps, Do Not Disturb, full-screen alerts, battery optimisation). They are used only for the features above, and you can withdraw them at any time in Android settings.
• Statistics and crash reports: Firebase Analytics and Crashlytics (Google) collect how the app is used and technical reports when it fails: device model, Android version, app events, an app-installation identifier, your phone's advertising identifier, how the app was installed, and an approximate location derived from the network. Crash reports can include the country code of your phone number. We use them to keep the app working and to improve it, never for advertising.
• Maps, routes and weather: maps, trip routes and place search, meeting points, travel times when you answer an alert, and the choice of your region's emergency numbers use your position with Google Maps Platform. Your phone's built-in address service (usually Google's) turns your position into an address for SOS messages, alerts and region detection. The weather tool sends your position to Open-Meteo at the moment you use it. The emergency directory uses your country.

4. Health data and the First Aid Assistant: your explicit consent

Health data are sensitive data. The assistant sends the medical record of the chosen profile only after you tap Share in the app, and you can withdraw that consent at any time from the assistant's menu ("Share the medical record"); it applies from the next question. Without consent, the assistant still answers, without taking the profile into account.

If you share it, each question also sends: who the profile is (profile name or relationship), age, blood type, allergies, conditions, medicines and doses, surgeries, notes, family doctor (name and phone), preferred hospital, and the relationship of your emergency contacts. Never your own name, nor your contacts' names or numbers. This data is used only to answer you.

If you enter a relative's data, make sure they agree, or that you are acting in their interest in an emergency.

Versions before 4.6: the assistant sends the chosen profile's full record with each question without asking, including the full name, organ-donor status, insurance details, the family doctor's e-mail and the names, numbers and e-mail addresses of the emergency contacts. It keeps every message on the phone without encryption and without limit, includes the conversation in the phone's Google backup and phone-to-phone transfers, and does not delete the photos taken for the assistant. Version 4.6 lets you choose what is shared; install it as soon as it is offered on Google Play.

5. Legal bases

We process personal data: to provide the service you ask for (contract); with your explicit consent before the medical record is sent to the AI (version 4.6); to protect life or health during an SOS (vital interest); for our legitimate interests in security, preventing abuse and improving the app; and when the law requires it (for example, accounting records). The health data you enter in your profiles, back up to your account and share with your circles is processed so that it is available to you and to the people you chose in an emergency; you decide what to enter, and you can turn sharing off or delete it at any time.

6. Where your data goes

Our cloud database and files (Google Firebase) and our statistics and crash reports (Google Firebase Analytics and Crashlytics) are in the United States. The First Aid Assistant, automatic translation and the weekly alert summary use Google Cloud in Singapore and the United States. Google Maps Platform, Resend (which keeps a history of the e-mails it sends) and RevenueCat operate in the United States. Open-Meteo has servers in Europe and North America and keeps its server logs, which can contain the position, for 90 days. The live-tracking page uses Google reCAPTCHA to block automated access and shows the map with OpenStreetMap tiles (OpenStreetMap Foundation, United Kingdom), which receive the approximate position shown and the viewer's internet address. Google, Resend and RevenueCat process data on our behalf under their data-processing terms; Open-Meteo and OpenStreetMap receive only what is needed to return the weather or the map. We do not sell your data and we do not use it for advertising.

7. How long we keep it

These periods are applied automatically: server jobs that run every day delete expired alerts, media, SOS sessions, trips and reports; the other periods follow your account, your circle or the law, as stated below.

• Profile and account: as long as your account exists, and deleted with your account. Deleting one profile removes it from the app and from its cloud record; its photo and an older backup copy stay in your account until you delete the account.
• Photos, voice notes and videos of community or circle alerts: 7 days after upload.
• Community alerts resolved or cancelled, with their messages and reports: deleted once 7 days have passed since they were posted.
• Community alerts hidden after reports, or left active: deleted once 30 days have passed since they were posted (time to contest a hiding).
• Circle alerts and messages: as long as the circle exists; everything under a circle is deleted with it.
• SOS: on our servers, the recordings, the position history, the list of contacts alerted and the live-tracking link are deleted 30 days after the SOS. Until then, your position and the video can be seen by anyone who has the SOS link (your emergency contacts, and your circles if you share it with them); the detailed event log is limited to you and to our staff for support. A copy of the video stays in your phone's gallery until you delete it; the alert sent to your circles, with your position, stays as long as the circle exists; messages already delivered cannot be recalled.
• Trips, trip notifications and meeting points: 30 days.
• Reports about a person, the review queue and weekly summaries: 12 months. When an account is deleted, the reports it made, the reports about it, its review entry and any ban on it are deleted with it.
• First Aid Assistant (version 4.6): conversations stay on your phone (the current and the previous conversation of each profile, up to 100 messages each); the daily message count is kept with your account.
• Backups: deleted database records remain recoverable for 7 days (point-in-time recovery), and deleted files for 7 days; these copies are used only to recover from an incident.
• Subscription records: your subscription status is kept with your account; payment event records are kept for accounting and tax purposes, without your account identifier once the account is deleted.

8. Your rights

Under Thailand's Personal Data Protection Act, you can access your data and receive a copy, have it corrected, have it deleted, object to or restrict its use, receive it in a portable format, withdraw a consent at any time (without affecting what was done before), and complain to the Office of the Personal Data Protection Committee (PDPC).

You can delete your account and its data from the app (Settings → Delete my account), or without the app by writing to us, as explained at resqapps.com/delete-account.html. For any other request, write to sales@sornsawan.com; we answer within 30 days.

9. Security

Data is encrypted in transit and at rest on our servers. Access to the database is limited by security rules and by Firebase App Check, which accepts only the genuine app and our live-tracking page. An SOS live-tracking link, with its position and video, can be opened without an account by anyone who has it, so share it only with people you trust. No system is perfectly secure; if a breach affected your data, we would inform you and the authorities as the law requires.

10. Children

RESQ+ is not intended for children under 13. A parent or guardian can create a profile for their child and remains responsible for it. Users under 20 should ask a parent or guardian before sharing a health record with the First Aid Assistant. If you think we hold data about a child without such consent, contact us and we will delete it.

11. Changes and contact

We update this policy when the app changes; the date at the top shows the last revision. If a change affects a consent you gave, the updated app will ask you again before the change applies. Questions: sales@sornsawan.com.

© 2026 Sornsawan Ltd. — RESQ+