Privacy Policy
Last updated: December 9, 2024
Introduction
At Stranded, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform.
Information We Collect
Personal Information
When you create an account, we collect:
- Email address
- Username (unique identifier)
- Phone number (optional, for SMS authentication)
- Profile photo (optional)
Contact Information
With your explicit permission, we sync and store:
- Contact names
- Phone numbers
- Email addresses
- Contact photos (if available)
User-Generated Content
- Notes and documents you upload
- Files stored in your account
Usage Data
We automatically collect:
- Device information (type, operating system)
- IP address
- Browser type
- Sync timestamps
- Emergency access logs
How We Use Your Information
We use the collected information to:
- Provide and maintain our emergency access service
- Sync your contacts across devices
- Authenticate your identity using your PIN
- Send important security notifications
- Improve our services and user experience
- Detect and prevent fraudulent activity
- Comply with legal obligations
Data Security
We implement industry-standard security measures:
- 256-bit AES encryption for data at rest
- TLS/SSL encryption for data in transit
- Secure PIN hashing using SHA-256
- Regular security audits and updates
- Limited employee access to user data
- Automatic session expiry after inactivity
Data Sharing and Disclosure
We do NOT sell your personal information. We may share data only in these limited circumstances:
- Service Providers: Cloud hosting (Firebase/Google Cloud) and analytics services
- Legal Requirements: When required by law or to protect rights and safety
- Business Transfers: In the event of a merger or acquisition
Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correct: Update inaccurate information
- Delete: Request deletion of your account and data
- Export: Download your data in a portable format
- Withdraw Consent: Stop contact syncing at any time
- Object: Opt out of certain data processing activities
Data Retention
We retain your data only as long as necessary to provide our services. When you delete your account, we permanently remove your personal information within 30 days, except where required by law to retain it longer.
Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
International Data Transfers
Your information may be transferred to and stored on servers located outside your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with this Privacy Policy and applicable laws.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Significant changes will be communicated via email.
Contact Us
If you have questions about this Privacy Policy, please contact us:
- Email: privacy@stranded.online
- Visit: Contact Page