Privacy Policy
Last updated: September 24, 2026
1. Introduction
Panic Button ("the App") is a personal safety application. When a user presses and holds the SOS button, the App captures their location, notifies their emergency contacts by email, Telegram, WhatsApp and/or SMS, and shares a private map that can follow their live location for up to 60 minutes. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have over it.
By creating an account and using the App, you accept the practices described here.
2. Important safety notice
Panic Button is not an emergency service and is not a substitute for the police, security forces or official medical services. The App depends on your internet connection, your device's GPS and third-party services; delivery of alerts is not guaranteed. In a real emergency, always contact your country's official emergency services.
3. What information we collect
We collect only the information the App needs to do its job:
3.1. Your account data
- The name, phone number and email address you provide when you register.
- Your password, stored only as a bcrypt hash — we never store your password in plain text.
3.2. Emergency contacts
- The name, phone number and/or email address of the people you add as emergency contacts.
- The link status of each channel (confirmed by email, linked to Telegram/WhatsApp, or enabled for SMS).
By adding an emergency contact, you declare that you have their consent to provide their data and for them to receive your alerts.
3.3. Location
- Your precise or approximate location, depending on the permission you grant and the signals available to your device, is collected when you deliberately activate an SOS alert.
- After the alert is created, the App may continue collecting and transmitting location updates for a live emergency route for up to 60 minutes, including while the App is in the background or the screen is off. Updates can include latitude, longitude, accuracy, speed, bearing, and the time the location was recorded and received.
- Live collection starts only after your SOS action. It stops when you select Stop sharing or when the 60-minute session expires. The App does not use location for advertising or track you outside an active alert session.
3.4. SOS video and linked accounts
After an SOS alert, the App may request camera and microphone access and record up to five minutes of video while the App stays in the foreground. If you connected Google Drive, the App automatically sends the completed recording through our server to a file in your Drive. Our server relays the bytes and does not save a local copy; it stores only upload status, the Drive file identifier and its link. If an upload fails, the App can keep a pending copy on your phone so you can retry it. The Drive file is made viewable by anyone with its link, which can appear in the alert view and can be forwarded by a viewer.
Connecting Google Drive is optional and requires your affirmative consent on Google's authorization screen. Panic Button requests the drive.file scope, which allows the App to create and manage only the Drive files it creates. You can revoke access by disconnecting Google Drive in the App or through your Google Account security settings.
3.5. Usage and technical data
- Alert history, including the date, time, initial location, saved live route, last reported location, and alert status.
- Notification records, including the contact/channel used and whether a private alert link was opened.
- Technical logs such as request identifiers, timestamps and errors, used to operate and debug the service.
We do not collect data from sources other than what you provide or generate by using the App.
4. How we use the information
We use your data exclusively to:
- Deliver your panic alerts to your emergency contacts through the channels you have configured.
- Collect, store and display your live emergency route to you and the emergency contacts you chose while an alert is active and afterward as part of your alert history.
- Authenticate you and keep your session.
- Send you transactional emails: account confirmation, contact confirmation, password reset, and security notices when sensitive account data changes.
- Operate, maintain and improve the service and its security.
We do not use your data for advertising and we do not sell it to third parties.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used only to provide the user-facing Drive upload feature, is not used for advertising, is not sold, and is not used to train generalized artificial-intelligence or machine-learning models.
5. Who we share the information with
5.1. Your emergency contacts
When you trigger an alert, your confirmed contacts receive, depending on the channel, your name, phone number, email address, the date and time, the initially reported coordinates, and a private live-map link. The map can show your saved route and latest reported location. This user-initiated sharing is the core purpose of the App.
5.2. Service providers
To deliver the messages we use external providers that process only the data strictly necessary for that purpose:
- Email: Google (Gmail/Workspace SMTP).
- Device location: Android and Google Play services provide the device's fused location to the App.
- Telegram: Telegram Messenger.
- WhatsApp and SMS: Twilio.
- Map display: OpenStreetMap's standard tile service by default, or the map-tile provider configured by the operator. The viewer's browser requests the tiles needed for the area being displayed, so that provider can receive the viewer's IP address, browser information, this site's origin, and the tile coordinates for the visible map area.
- Hosting and infrastructure: our cloud hosting provider.
- Google Drive: receives an SOS recording automatically after you connect Drive and trigger an alert.
These providers process the data in accordance with their own privacy policies.
5.3. Legal requirements
We may disclose information if the law requires it, or to protect the rights, safety or integrity of people.
We do not sell or rent your personal data.
6. Basis for processing and consent
We process your data on the basis of performing the service you request and your consent, given when you register, configure your contacts and channels, grant location permission, and deliberately activate an SOS alert. You can end an active live-location session with Stop sharing, revoke location permission in Android settings, or withdraw your consent by deleting your account (see section 9).
7. Data retention
- We keep your account data, alert history, live-route points and latest reported locations for as long as your account is active. The current service does not automatically purge individual old alerts.
- Live location collection ends after at most 60 minutes. A contact's private map link expires after 30 days; expiration of the link does not itself delete the alert or saved route from your account history.
- Registered accounts that are never confirmed are automatically deleted after 24 hours.
- When you delete your account, we erase your associated personal data within a maximum of 30 days, except what we must retain by legal obligation.
- Our server does not keep local SOS video files. A failed upload can remain pending on your phone until it succeeds or the App's local data is cleared. Disconnecting Google Drive removes its stored authorization, but does not delete files already uploaded into your Drive; you manage those files in Google Drive.
8. Security
We apply reasonable measures to protect your information:
- Passwords are stored with a bcrypt hash (never in plain text).
- Communication with our server travels encrypted over HTTPS/TLS.
- Access to sensitive routes requires authentication, and certain account changes require re-authentication with your current password.
- Each contact notification uses a separate random private map link. We store a cryptographic hash of that link token, and the link expires after 30 days.
No system is 100% secure; we cannot guarantee absolute security.
9. Your rights
In accordance with applicable law, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data (you can edit your profile and contacts in the App).
- Delete your account and your personal data.
- Withdraw your consent at any time.
To exercise these rights, edit them directly in the App or write to us at support@panicbutton.me. We will respond within a reasonable time in accordance with applicable law.
10. Account and data deletion
You can request the deletion of your account from within the App itself, through our online account deletion form, or by sending a request by email to support@panicbutton.me. When you do, your account, emergency contacts, alert history, saved live-route points and other associated personal data are deleted within the period stated above, except what is required by law.
11. International transfers
Some of our providers (Google, Telegram, Twilio) operate servers outside your country of residence. By using the App, you understand that your data may be processed in those jurisdictions, subject to safeguards under applicable law.
12. Minors
The App is not directed at children under 13, and we do not knowingly collect data from children under that age. If you believe a minor has provided us with data, contact us to have it deleted.
13. Changes to this policy
We may update this Privacy Policy. We will publish the current version with its "last updated" date and, when the change is significant, we will notify you by reasonable means. Continued use of the App after a change implies acceptance of the updated policy.
14. Contact
For any questions about this Privacy Policy or the processing of your data:
Keycodelogics
Email: support@panicbutton.me
Website: https://keycodelogics.com/