Privacy Policy

1. Introduction

ruok Inc. ("we," "us," or "our") operates the RUOK mobile application (the "App"). RUOK is a safety monitoring app that uses sensor-based movement detection to check whether you are okay. If no movement is detected over a period of time, the App alerts your designated care network (trustees) so they can check on you.

This Privacy Policy explains what information we collect, how we use and share it, and what rights you have regarding your data. It applies to all users of the RUOK App, regardless of location.

By using the App, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use the App.

2. Information We Collect

Personal Information

When you create an account, we collect:

• Name
• Gender
• Date of birth
• Phone number

Emergency Contact Information

To set up your care network, we collect the names and phone numbers of your designated care members (trustees and primary users).

Device and Sensor Data

To detect movement and provide safety monitoring, the App collects:

• Magnetometer readings — used to detect physical movement
• Rotation and orientation sensor data — used to detect physical movement
• Battery level and status — used to alert your care network if your device battery is critically low
• Device type — used for compatibility and diagnostics

RUOK does not collect GPS or location data. Movement detection is based entirely on device motion sensors, not your geographic location.

Usage Data

We collect data about how the App operates, including:

• Beacon events (movement detected, no-movement alerts, "I'm OK" confirmations, emergency events, service start and stop)
• Timestamps for all events
• Your monitoring schedule preferences

Technical Data

We collect technical data necessary for the App to function:

• Firebase Cloud Messaging (FCM) tokens for delivering push notifications
• Crash reports and diagnostic stack traces (collected via Sentry)
• App diagnostic logs, which are automatically deleted after 7 days
• App version and platform identifier

3. Legal Basis for Processing

For users in the European Union and European Economic Area, we process your personal data on the following legal bases:

• Contract performance: We process your personal data and sensor data to provide the safety monitoring service you signed up for. This includes movement detection, emergency alerting, and notifications to your care network.
• Consent: We obtain your consent when collecting personal information during onboarding and when sending SMS verification codes for account creation. You may withdraw your consent at any time by contacting us.
• Legitimate interest: We process crash reports and diagnostic data (via Sentry) to maintain service reliability and improve the App. We ensure these interests do not override your fundamental rights and freedoms.

4. How We Use Your Information

We use the information we collect to:

• Provide core safety monitoring through sensor-based movement detection
• Send emergency alerts and notifications to your care network when no movement is detected
• Deliver push notifications between care members about status updates
• Verify your phone number via SMS during account creation
• Diagnose crashes and improve app stability
• Maintain and improve the reliability of our service

5. How We Share Your Information

With Your Care Network

Status data (such as movement detected, no-movement alerts, "I'm OK" confirmations, and emergency events) is shared between you and your designated care members. This is the core function of the App.

Service Providers

We use the following third-party service providers to operate the App:

• Firebase Cloud Messaging (Google) — delivers push notifications between care members
• Sentry — collects crash reports and diagnostic data to help us fix issues
• SMS verification provider — sends verification codes to confirm your phone number during account creation

These providers process data on our behalf and are contractually obligated to protect your information.

What We Do Not Do

• We do not sell your personal data
• We do not share your data with advertisers or ad networks
• We do not share your data with data brokers
• We do not use your data for marketing profiling

6. Data Storage and Security

We take the security of your data seriously:

• All data transmitted between the App and our servers is encrypted using HTTPS
• Your account and beacon data is stored on RUOK servers
• A local database on your device stores your profile and care network information for offline access
• Diagnostic logs are stored in a private, app-only directory on your device

While we implement reasonable security measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Data Retention and Deletion

• Your account data, beacon history, and care setup are retained for as long as your account exists
• When you delete your account, all associated data on our servers is permanently deleted
• Local diagnostic logs are automatically deleted after 7 days
• Local data stored on your device is removed when you uninstall the App

To request deletion of your account and all associated data, contact us at care@getruok.com.

8. Your Rights

For EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate personal data
• Right to erasure — request deletion of your personal data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to restrict processing — request that we limit how we use your data
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — withdraw consent at any time where processing is based on consent
• Right to lodge a complaint — file a complaint with your local data protection supervisory authority

For California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know — request information about what personal data we collect, use, and share
• Right to delete — request deletion of your personal information
• Right to opt-out of sale — we do not sell your personal data, so this right does not apply
• Right to non-discrimination — we will not discriminate against you for exercising your privacy rights

Categories of Personal Information (CCPA)

Under the CCPA, the categories of personal information we collect include:

• Identifiers — name, phone number, date of birth
• Internet or other electronic network activity — beacon events, app usage data
• Sensory data — magnetometer and rotation sensor readings
• Inferences — movement and no-movement status derived from sensor data

How to Exercise Your Rights

To exercise any of the rights described above, contact us at care@getruok.com. We will respond to your request within the timeframe required by applicable law.

9. Children's Privacy

RUOK is designed as a safety monitoring application and does not impose a general age restriction. However, in the European Union, users under the age of 16 require parental or guardian consent to use the App, in accordance with the General Data Protection Regulation (GDPR).

If you believe a child is using the App without appropriate consent, please contact us at care@getruok.com so we can take appropriate action.

10. International Data Transfers

Your data may be processed in countries other than your country of residence. When we transfer personal data outside of the European Economic Area, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards to ensure your data is protected.

Our third-party service providers (Google/Firebase and Sentry) maintain their own data transfer mechanisms that comply with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the App or by other appropriate means. The updated effective date will be posted at the top of this page.

Your continued use of the App after any changes to this policy constitutes your acceptance of the updated terms.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: care@getruok.com
• Entity: ruok Inc.