Silncy is a personal panic button and an app that alert the trusted people you choose. Because what we handle is sensitive, this policy tries to say exactly what data we use and why, with no small print.
1. Data controller
- Controller: Joaquim Quadrada Jané
- Tax ID (NIF): 38830594Q
- Address: C/ Josep Pla i Casadevall, 5, 08310 Argentona (Barcelona), Spain
- Contact email: [email protected]
2. What data we process, why and on what legal basis
If you join the waiting list on the website
- Data: your email address, your country, the language of the page and the date.
- Purpose: to tell you about the launch and keep your reservation discount.
- Legal basis: your consent, which you give by ticking the box on the form. You can withdraw it at any time by writing to [email protected].
- Retention: until the launch and the reservation campaign, or until you ask us to delete you.
If you use the app
- Account: email address, password (stored encrypted, never in plain text), the name you want to show, phone number and country. If you sign in with Google, we receive your email and a Google identifier. We use them to create and verify your account and so your contacts can recognise you.
- Trusted contacts: the people you choose to receive your alerts and, if you add them by phone, their number and the name you give them. Your address book never leaves your phone: the app only checks with our server the numbers you search for, to find out whether that person uses Silncy.
- Location: sent only while an alert is active, and only to your trusted contacts. The app asks for “always” location permission because the system requires it to detect the button over Bluetooth while the app is closed, but it does not send your position outside an alert.
- Button and Bluetooth: the identifier of the button you link to your account. Your phone detects it over Bluetooth to know when you have asked for help.
- Alerts: when each alert starts and ends, the last position sent, which contacts received it and who responded to it.
- Device: the token used to send you notifications, an installation identifier and the device name, to keep you signed in and deliver alerts.
- Crash reports: technical data about app failures (phone model, version, where it failed), without your name, email, phone number or location.
Legal basis: performance of the service you ask us for (Article 6(1)(b) GDPR): without an account, contacts and location during an alert, Silncy cannot work. Crash reports rely on our legitimate interest in the app not failing when it is needed most (Article 6(1)(f)). Location and contacts are only used if you grant the corresponding permissions on your phone, and you can withdraw them at any time in your system settings.
Website statistics
The website uses Cloudflare Web Analytics, which counts visits in aggregate without cookies and without identifying you. The website only stores the language you choose in your browser, to show it to you next time.
3. How long we keep data
- Account: for as long as it is active.
- Closed alerts: 180 days, in case what happened in an emergency needs to be reviewed. They are deleted afterwards.
- Device sessions: 90 days.
- Email verification codes: 30 days.
- Waiting list: as stated above.
4. Deleting your account
You can delete your account from the app itself, at any time. When you do, we turn off protection, delete your email, phone number, name, password, device tokens and sessions, remove your sign-in identity and unlink your contacts. The history of closed alerts is kept anonymised until it reaches 180 days and is then deleted.
5. Who we share data with
We do not sell your data or use it for advertising. We only share it with:
- Your trusted contacts, who receive your alerts and your location during an alert. That is the purpose of the service.
- Providers that help us run the service, under data processing agreements:
- Oracle Cloud: hosting of the app server, in Madrid (Spain).
- Google Firebase: sign-in, notifications and crash reports.
- Cloudflare: website hosting, waiting list and cookie-free statistics.
- Resend: sending the waiting-list emails.
- Authorities, only where the law requires it.
Google, Cloudflare and Resend may process data outside the European Economic Area, mainly in the United States. In those cases the transfer relies on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
6. Security
Communications between the app, the website and our servers are encrypted. Passwords are stored with irreversible encryption and access to data is restricted. No system is infallible, but we treat this data with the care it deserves.
7. Minors
You must be at least 14 to create an account, or the minimum age set by the law of your country if it is higher. Below that age, you need the consent of a parent or legal guardian.
8. Your rights
You can ask to access your data, correct it, delete it, object to or restrict its processing, or receive it in a portable format, and withdraw your consent at any time. Write to us at [email protected] saying what you need. We will reply within one month at most.
If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD) or to the data protection authority of your country.
9. Changes to this policy
If we change anything important, we will show it on this page with the new date and, if it affects the app, we will also tell you there.
This is a translation of the Spanish version. In case of any discrepancy, the Spanish version prevails.
Important: Silncy alerts the people you choose, but it does not replace the emergency services. If you are in danger, call 112.