Code 3 Rescue Tech ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, Code 3 Rescue (the "App"), and our related services (collectively, the "Service"). Please read this policy carefully.

Information We Collect

We collect different types of information depending on whether you are a member of the public reporting an incident or an authorized staff member using the App's management features.

For Public Users (Reporting an Incident)

• Incident Information: We collect the type of emergency (e.g., Medical, Security) and a description of the emergency you are reporting.
• Location Information: With your permission, we collect your precise real-time location (GPS coordinates) to dispatch help effectively. You may also provide a manual text description of your location (e.g., "near the main stage").
• Personal Information (Optional): You may choose to provide your name, age, and phone number. This information is optional but can be vital for first responders.

For Staff Users (Responders & Admins)

• Account Information: To create and manage your staff account, we collect your email address and password for secure authentication.
• Profile Information: We store your display name, role (e.g., "Medic," "Security Lead"), and assigned venue ID to provide you with the correct permissions and information.
• Address Book & Contacts (Safety Timer): When using the Safety Timer feature, you may choose to select an emergency contact from your device's address book. We do not access, upload, or store your entire address book. We only access the single contact you explicitly select, and their phone number is used exclusively to send an automated SMS alert if your timer expires.

Information Collected Automatically

• Device and Usage Information: We automatically collect a Firebase Cloud Messaging (FCM) token from your device. This token is a unique, anonymous identifier that allows us to send you critical push notifications, such as new incident alerts.
• On-Device Data: The App stores certain preferences locally on your device using its secure storage. This includes your list of saved venues and your designated favorite venue. This information is not transmitted to us.

How We Use Your Information

We use the information we collect solely for the purpose of providing the Service:

• To Provide Emergency Services: To transmit your incident report, location, and any provided personal details to the appropriate event staff, security, and/or emergency medical services ("Responders").
• To Facilitate Response & Command Mapping: To allow Responders to locate you, assess the situation, and contact you if necessary. For staff users, we use background location tracking to display active units on the live command map for rapid dispatch.
• To Manage Staff Accounts: We use staff account and profile information to authenticate users, manage roles and permissions, and ensure you have access to the dashboard for your specific venue.
• To Send Notifications: We use FCM tokens to send real-time incident alerts and chat messages to Responders.

SMS and Text Messaging

If you opt-in to receive SMS updates when filing an emergency report, or if you designate an emergency contact in the Safety Timer, we will send automated text messages on your behalf via our communication partner (Twilio). By using these features, you acknowledge that standard message and data rates may apply. You or your contact may opt-out at any time by replying "STOP" to any message received.

Data Sharing and Disclosure

Your privacy is paramount. Your information is shared only with the authorized Responders for the specific event you are attending. We do not sell, trade, or otherwise transfer your personal information to outside parties for marketing or any other purposes.

• Third-Party Services: We use trusted third-party services to operate our App.
  • Google Firebase: We use Google Firebase for our backend infrastructure, including Authentication, Firestore Database, Cloud Storage, and Cloud Messaging. Your data is stored securely within this environment.
  • Twilio: Used strictly for transmitting SMS alerts for the Safety Timer and incident updates.
  • Open-Meteo: To provide weather information, we send your geographic coordinates to the Open-Meteo API. This data is not linked to any personal identifiers.
• White-Label Platform: The Service is a white-label platform. This means the data you submit is managed by the event organizer or venue that has subscribed to our service. Their use of your data is governed by their own privacy policies.

Device Permissions

To ensure full functionality, the App may request the following permissions on your device. These are strictly required to pass Apple's App Store Review guidelines:

• Location Services (Foreground & Background): Essential for reporting your location during an emergency. For authorized staff members, the app tracks your location in the background while you are "Checked-In" to ensure command center mapping is accurate and to route backup efficiently. Background location tracking immediately stops when a staff member checks out.
• Contacts: Required solely to allow you to select an emergency contact for the Safety Timer feature. We only read the specific contact you pick.
• Camera: Required to scan venue setup QR codes during onboarding and to operate the device's flashlight utility. We do not capture, record, or transmit photos.
• Notifications & Live Activities: Required for staff members to receive real-time incident alerts, and to display active countdown timers on the Lock Screen or Dynamic Island.
• Biometric Authentication (Face ID/Touch ID): If you enable this feature, the App will use your device's local authentication to secure access without transmitting biometric data to us.

Data Security

We implement a variety of security measures to maintain the safety of your personal information. All data is transmitted over secure channels (HTTPS) and stored in a secure, encrypted database managed by Google Firebase.

Data Retention

Incident data, including any personal information you provide, is retained for the duration of the event and for a limited period afterward as determined by the event organizer for reporting and analytical purposes. After this period, the data is securely deleted. Staff account data is retained for as long as your account remains active with a subscribing venue.

Your Rights & Choices

As the information you provide is for an in-the-moment emergency report, we do not offer a feature to access or delete your report after submission. If you have concerns about the data you have submitted, please contact the event organizer directly.

• Staff Users: To update your profile information, or to permanently delete your account and all associated data, you may use the "Delete Account" button located in your in-app Profile Settings, or contact your designated administrator.
• Managing Permissions: You can manage or revoke the App's permissions (Location, Contacts, Camera) at any time in your device's system settings.

Children's Privacy

Our Service is not intended for use by children under the age of 13, and we do not knowingly collect personal information from children under 13.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App and on this page. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Code 3 Rescue Tech, LLC
P.0. Box 6763
Rutland, VT 05702
support@c3rescue.com