Privacy
What this service stores about you, why it stores it, and who else sees it.
Who is responsible
The company named in the imprint is the controller for the data described here. Write to the address above for any request about your data.
PRAGRE OG, Dornlandweg 11, 4040 Linz, Österreich — office@pragre.com
What we store
Every row below corresponds to a real table in the database. Retention says what the software actually does today, not what we intend it to do.
| Category | Kept |
|---|---|
| Account — your email, name, phone number, language and a scrypt hash of your password | Until you delete the account |
| Emergency contacts — their phone number, the name you gave them, your notes | Until you delete the contact |
| Messages — what was sent and received, attachments, and which network carried each one | Until you delete the account |
| Alerts — when you pressed the button, any note, and how many contacts were reached | Until you delete the account |
| Calls — who called whom, when, and for how long. Audio and video are relayed, never recorded | Until you delete the account |
| Contact-app devices — the push token and phone number of a contact who installed the app | Until the app is uninstalled or the push token stops working |
| Sign-in attempts — IP address and the email address tried, to stop password guessing | A rolling window, for rate limiting |
| Billing — your Stripe customer and subscription identifiers | Seven years, as Austrian tax law requires |
Who else receives it
These are the only companies that receive personal data from this service. Each is a processor under a data-processing agreement and may use the data only to provide their part of the service.
| Recipient | Why | What is sent | Where |
|---|---|---|---|
| Meta Platforms Ireland Ltd. | Delivering and receiving WhatsApp messages, including alerts | Phone numbers, message contents, attachments | Ireland, with transfers to the USA |
| Hetzner Online GmbH | Operating the servers the application, its database and its file storage run on | All account, contact, message and call data | Germany |
| Stripe Payments Europe, Ltd. | Subscription payments and invoices | Name, email, billing details, payment data | Ireland, with transfers to the USA |
| LiveKit, Inc. | Relaying voice and video calls | Audio and video streams in transit, call metadata | EEA region, company in the USA |
| Apple Inc. | Push notifications to iPhones (APNs) | Device push token, notification title and body | USA |
| Google Ireland Ltd. | Push notifications to Android phones (FCM) | Device push token, notification payload | Ireland, with transfers to the USA |
No tracking
There is no analytics, no advertising, no tag manager and no third-party error reporting in this product. The only thing stored in your browser is your sign-in token and, if you arrived through a referral link, a short-lived code identifying who referred you — nothing that follows you anywhere else.
The people you list
Your emergency contacts have not signed up for anything. You are the one choosing to store their phone number here, and by adding them you confirm you may do so. Their number is used to reach them when you raise an alert, and for nothing else. Remove a contact and their row is deleted.
Legal basis
Processing your account and message data is necessary to perform the contract between us (Art. 6(1)(b) GDPR). Storing an emergency contact's number rests on our legitimate interest, and yours, in the service working when you press the button (Art. 6(1)(f) GDPR). Billing records are kept because tax law requires it (Art. 6(1)(c) GDPR).
Your rights
You may ask for a copy of your data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable form. Deleting your account removes your data from our database. Write to the email above; we answer within a month.
Complaints
If you think we have handled your data wrongly, you can complain to the supervisory authority:
Österreichische Datenschutzbehörde — Barichgasse 40-42, 1030 Wien, Österreich