1. Introduction
Welcome to QuakeLink. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
By using QuakeLink, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our application.
2. Information We Collect
QuakeLink is designed with privacy as a core principle. This section describes the personal information that is processed by the app. It is important to distinguish between:
- • Local Processing: Data processed and stored exclusively on your device
- • Server-Side Collection: Data collected and stored on our servers (QuakeLink does not engage in server-side data collection)
2.1 Personal Information Processed Locally
The following personal information is processed locally on your device to enable core app functionality:
- Device Name: Your device's display name (e.g., "John's iPhone") is used as an identifier for peer-to-peer communication. This information is stored locally on your device and is visible to nearby devices during active communication sessions.
- Proximity Identifiers: The app generates and uses proximity-based identifiers to establish connections with nearby devices. These identifiers are ephemeral and stored locally on your device.
- Messages: All messages are end-to-end encrypted using AES-256-GCM encryption and stored locally in your device's database. We do not have access to your message content, and messages are never transmitted to our servers.
2.2 System-Level Information
The following system-level information may be processed:
- Crash Reports: Crash logs may be collected by the operating system (Apple iOS or Google Android) through their respective app distribution platforms. This collection is managed by the operating system, not by QuakeLink. You can opt-out of crash reporting through your device settings (iOS: Settings > Privacy & Security > Analytics & Improvements; Android: Settings > Privacy).
- Analytics and Tracking: QuakeLink does not use third-party analytics services, advertising networks, or tracking technologies. We do not collect usage patterns, user behavior data, or any analytics information.
2.3 Location Information
QuakeLink requests location permissions for the following features:
- UWB Ranging: To provide precise distance and direction information between devices using Ultra-Wideband technology.
- Earthquake Tracking: To filter earthquake data from the USGS API based on your country/region.
Important: Location data is processed locally on your device only. We do not collect, store, or transmit location data to our servers. Location information is used solely for the features described above and is not tracked or stored for any other purpose.
2.4 Summary
QuakeLink does not collect or store personal data on any servers. All personal information described above is processed and stored exclusively on your device. We have no access to your personal information, messages, location data, or device identifiers.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To Provide Services: Enable peer-to-peer messaging, device discovery, and earthquake tracking features.
- To Improve Our App: Analyze usage patterns to enhance functionality and fix bugs.
- To Ensure Security: Protect against fraud, unauthorized access, and other security threats.
- To Comply with Legal Obligations: Meet legal requirements and respond to lawful requests.
4. Data Storage and Security
4.1 Local Storage
All your data is stored locally on your device:
- Messages: Encrypted and stored in your device's local database.
- Encryption Keys: Securely stored in Apple's Keychain (iOS) or Android Keystore (Android).
- App Settings: Stored in your device's local storage.
4.2 Encryption
We use industry-standard encryption to protect your data:
- AES-GCM Encryption: All messages are encrypted using AES-256-GCM before transmission.
- Secure Communication: Peer-to-peer connections use encrypted channels (Bluetooth/Wi-Fi Direct with encryption).
4.3 No Cloud Storage
QuakeLink does not use cloud servers. All data remains on your device. We do not have access to your messages, location, or personal information.
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- Legal Requirements: If required by law or in response to valid legal processes.
- Safety and Security: To protect the rights, property, or safety of QuakeLink, our users, or others.
- With Your Consent: When you explicitly authorize us to share information.
Third-Party Services: QuakeLink uses the following third-party services:
- USGS Earthquake API: For earthquake data. We do not share any personal information with USGS.
- Apple App Store / Google Play: Standard app distribution platforms. Please review their privacy policies.
6. Permissions We Request
QuakeLink requests the following permissions to provide core functionality:
- Bluetooth: For peer-to-peer device discovery and messaging.
- Location: For UWB ranging and earthquake region filtering.
- Camera: For flashlight functionality during emergencies.
- Motion & Orientation: For device orientation and motion detection.
- Nearby Interaction: For Ultra-Wideband (UWB) precision ranging.
- Notifications: To alert you of incoming messages and emergency alerts.
You can revoke these permissions at any time through your device settings, though this may limit app functionality.
7. Your Rights
Depending on your jurisdiction, you may have certain rights regarding your personal information. The following rights apply where applicable under applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Economic Area:
- Right to Access: You have the right to request access to your personal information. Since QuakeLink processes all personal data locally on your device and does not maintain servers that store your data, we generally do not have user data to provide upon request. All data processed by the app is stored locally on your device and is accessible directly through the app interface.
- Right to Deletion: You have the right to request deletion of your personal information. You can delete all data processed by QuakeLink by uninstalling the app or clearing app data through your device settings (iOS: Settings > General > iPhone Storage > QuakeLink > Offload App; Android: Settings > Apps > QuakeLink > Storage > Clear Data). This will permanently remove all locally stored data from your device.
- Right to Rectification: You have the right to correct inaccurate personal information. Since data is stored locally on your device, you can update your device name and other information directly through the app settings.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format. All your messages and data are stored locally on your device and are accessible directly through the app. Message export functionality may be available in future updates.
- Right to Object/Opt-Out: You can control certain data processing activities:
- • Crash Reporting: Disable crash reporting through your device settings (iOS: Settings > Privacy & Security > Analytics & Improvements; Android: Settings > Privacy). Note that crash reporting is managed by the operating system, not by QuakeLink.
- • Location Data: Revoke location permissions at any time through your device settings. This will limit certain app features but will not affect core messaging functionality.
QuakeLink does not use analytics services, advertising networks, or tracking technologies, so there are no additional opt-out mechanisms required.
- Right to Restriction of Processing: You have the right to restrict the processing of your personal information. Since all processing occurs locally on your device, you can effectively restrict processing by revoking app permissions or uninstalling the app.
- Right to Lodge a Complaint: If you are located in the EEA, you have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.
To exercise any of these rights, or if you have questions about your rights, please contact us at support@quakelink.app. We will respond to your request within a reasonable timeframe and in accordance with applicable data protection laws.
8. Children's Privacy
QuakeLink is not directed to children under the age of 13. Although the app has a 4+ age rating on the App Store, this rating reflects the app's general audience suitability and does not indicate that the app is specifically designed for children.
8.1 COPPA Compliance
In accordance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent. If you are under 13 years of age, you may only use QuakeLink with the express consent and supervision of a parent or legal guardian.
8.2 GDPR-K Compliance
For users in the European Economic Area (EEA) who are under the age of 16 (or the applicable age of digital consent in their jurisdiction), we require verifiable parental consent before processing any personal information. QuakeLink processes limited personal information locally on the device, including device names and proximity identifiers used for peer-to-peer communication.
8.3 Parental Consent and Rights
If you are a parent or legal guardian and believe that your child under 13 has provided us with personal information without your consent, or if you wish to provide consent for your child's use of the app, please contact us at support@quakelink.app. Parents have the right to:
- Review any personal information collected from their child
- Request deletion of their child's personal information
- Refuse further collection or use of their child's information
- Revoke consent at any time
8.4 Data Processing for Children
When a child under 13 uses QuakeLink with parental consent, we process the same limited personal information as for adult users: device names and proximity identifiers. All data is processed and stored locally on the device and is never transmitted to our servers. We do not use this information for any purpose other than enabling the app's core functionality.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us:
- Email: info@quakelink.app
- Support: support@quakelink.app
- Website: www.quakelink.app
Last updated: January 2025