Revised July 25, 2026. The app works without a name, email address, or mandatory registration.
Random installation, user, and device identifiers; push token and permission states; settings; latest coarse location cell; encrypted saved places; viewed warning versions; and push delivery events.
To sync settings and places, match you with official hazardous areas, send warnings, show history, and diagnose delivery.
Location is used only to match official hazardous areas with your current location and saved places. The exact point is sent as a temporary request parameter and immediately converted into a coarse 0.05° grid cell; the original coordinates are not stored, and only the latest cell is retained for up to 30 minutes. The app updates location only when opened and while in use — it does not request background location access or transmit location in the background. Coordinates and resolved addresses for saved places are stored on the server only as AES-GCM ciphertext. You can select Saved places only, which deletes the current cell and stops sending new locations. Location data is not used for ads.
The current location cell — up to 6 hours. Technical settings changes — 30 days. Push delivery and open records — 90 days. History of shown hazards — 365 days. An inactive anonymous account and its remaining data are deleted after 180 days without activity. Settings and saved places are kept until the account is deleted or an inactive account is cleared.
FCM receives the push token and notification content for delivery. OpenStreetMap/Nominatim receives the search query you enter. Exact coordinates and addresses are not included in push messages or logs.
The “Delete my data” button in the app deletes the anonymous user and all linked devices, settings, places, locations, history, and push events from the active database, then clears local data and the notification token. A new anonymous identity is created at the next onboarding.