Privacy Policy

Who is responsible

RescuteKit is an app by Art Studio Panamá, based in Panama City, Republic of Panama (https://artstudiogroup.com; "Art Studio" or "we"). Art Studio is the controller of the data described in this policy.

For any privacy matter, email us at rescutekit@artstudiogroup.com. We reply in English or Spanish.

This policy covers the RescuteKit app for iOS and Android and the website rescutekit.artstudiogroup.com.

In short

• For your account we receive your name, your email and an ID. Nothing else from your Apple or Google account.
• What you save in the app (go bag, pantry, household members and details, meeting points) is stored on your phone and in a cloud backup linked to your account, so you can restore it on another phone.
• Your household's health data (special needs and pregnancy) is only stored in the cloud if you allow it.
• Your live GPS location and your family PIN never leave your phone.
• For the weather we send an approximate location, without your name or your account.
• We send crash reports to fix bugs. Usage data, only if you agree.
• We don't sell your data, we don't show ads and we don't track you across apps.
• Uninstalling the app doesn't erase your cloud backup; deleting your account does. You can do it from the app or from the web.

Your account (Apple or Google)

To use RescuteKit you sign in with Apple or Google. The account is created inside the app; there's no sign-up on the web. Sign-in is handled by Firebase Authentication, a Google service.

When you sign in, we receive:

• Your name, as you share it with Apple or Google. We use it to greet you on Home and, if you share with your family, so they can recognize you.
• Your email address. If you use Apple's Hide My Email, we only receive the relay address Apple creates for RescuteKit, not your real email.
• A user ID created by Firebase, and the provider you used (Apple or Google).
• If you sign in with Google, the link to your Google profile photo. Apple doesn't share a photo, so if you sign in with Apple we don't have one.

With this we create your account profile, which also stores the country you chose, the app version, the date you joined and your last access, whether you completed the welcome screens, your active family and, if we give you one, a RescuteKit Pro trial with its end date.

We don't receive your Apple or Google password, or the contacts, photos or files in those accounts.

The first sign-in needs internet. After that, you stay signed in, and the app opens and works offline. Signing out doesn't erase what's stored on the phone: if someone else signs in on the same phone, they will be able to see that data. To erase it, use "Delete account" or uninstall the app.

Your cloud backup

Everything you save in the app is stored first on your phone, and the app works fully offline. When you're online, the app uploads a copy to Cloud Firestore, a Google service, linked to your account. This happens for every account, free or Pro, so you don't lose your data if you lose or replace your phone: sign in with the same account and you get it back.

The backup includes:

• Your go bags and your pantry: items, quantities, expiry dates, notes and change history.
• Your household members: name, age or life stage (for example, baby) and, only if you allow it, their health data (see the next section).
• Your household details: whether you have pets and how many, whether you have a car and whether you have a generator.
• Your meeting points: name, type, coordinates, address and notes. This includes the exact location of your home if you save it as a meeting point.

Only you can see your backup and, if you have Pro and share with your family, the members of that family. No one on the RescuteKit team looks at it, unless you ask us to in order to solve a problem or the law requires it.

Uninstalling the app does not erase your cloud backup, so you can restore it. To erase it, delete your account.

Health data

If you choose to, you can note that someone in your household is pregnant or has special needs (for example, asthma or an allergy), so your go bag and pantry include what they need. This is health data, and we handle it with extra care:

• The first time you enter such data, the app will ask for your explicit consent to store it in your cloud backup, and for you to confirm that you have that person's permission or are their caregiver. This consent is separate from these terms and is not pre-checked.
• If you don't give it, the data is stored only on your phone and isn't backed up.
• You can withdraw it at any time in Profile. When you do, that data is deleted from the cloud and stays only on your phone.
• Health data is never used for analytics, advertising or any purpose other than helping you prepare your go bag and pantry.
• With Pro, it's only shared with your family if you choose to share it.

What never leaves your phone

• Your live GPS location, used by SOS, the compass and the distance to your meeting points.
• Your family PIN, which is also never stored in plain text.
• Reminders and expiry alerts, which are local notifications on the phone.
• The last weather you checked, stored so it can be shown offline.

Your location

The app asks for location permission "while using the app", never in the background. You can say no: the app keeps working, except for the features that need it.

• Live location. In SOS, the compass and the distance to your meeting points, GPS is calculated on the phone and isn't sent to anyone. RescuteKit doesn't send your location to emergency services: it shows it to you so you can read it out or copy it.
• Meeting points. When you save a point, such as your home, its exact coordinates go into your cloud backup. It's a location you choose to save, not your live location.
• Your city. To show your city's name on Home, the app asks the system location service (Apple on iPhone, Google on Android) for that name, using a location rounded to about 1.1 km.
• Address search. If you search for an address for a meeting point, the text you type is sent to that same system service, only when you're online and only when you search.

The system location services are provided by Apple and Google under their own privacy policies.

Weather

When you're online and have already granted location permission, Home shows the weather for your area. To do this, the app sends a location rounded to one decimal place, which is an area of about 11 km, to our server (Firebase Cloud Functions, by Google, in the United States), and our server requests the weather from Apple WeatherKit. Apple only receives that approximate location, from our server: it doesn't receive your name, your email, your ID, device data or your network's IP address. Like any internet connection, our server receives your network's IP address, but it doesn't store it. It checks that the request comes from a RescuteKit account, but doesn't store your ID together with the location. To avoid repeat requests, it keeps the weather for each area of about 11 km for 24 hours, with no data about who requested it. To prevent abuse, it counts how many requests each account makes per hour, without the location, and deletes that count after 2 hours. Its technical logs contain only metrics (whether the answer came from the cache, errors and response times) and are deleted after 30 days.

The weather never asks for location permission on its own. Weather data comes from Apple Weather and the sources Apple cites; the app shows that attribution next to the weather.

Crash reports and usage data

• Crash reports (Firebase Crashlytics, by Google), always on. If the app closes unexpectedly, a technical report is sent: what failed in the code, the device model, the system and app version, and an installation ID. It doesn't include your name, your email or the contents of your go bag. We need it so the app doesn't fail in an emergency.
• Usage and performance data (Firebase Analytics and Performance Monitoring, by Google), only if you accept them in "Help us improve". Which screens and features are used (for example, opening a guide or using SOS), loading times and the approximate country inferred from the IP address. It doesn't include your location, your name, your health data or the contents of your go bag. You can change your choice at any time in Profile.

We don't use the device's advertising identifier.

Sharing with your family (Pro)

With RescuteKit Pro you can create a family or join one with an invite code, and share your go bag, your pantry, your meeting points, and your household members and details with it.

• Other members can see what you share and, depending on the role given by whoever manages the family, edit it. Only share what you're comfortable with them seeing.
• Health data is only shared if you choose to, and you need the permission of the person it's about.
• Other members see your name and, if you signed in with Google, your Google profile photo, so they can recognize you. We don't upload the image: we only store the link to the photo that's already on Google's servers, and each phone loads it from there. If you signed in with Apple, there's no photo.
• You can leave a family at any time.
• The family PIN never leaves your phone.

RescuteKit Pro and purchases

• Subscriptions. RescuteKit Pro is sold as a monthly or annual subscription on the App Store and Google Play. The store processes the payment: we never receive your card details. To know whether you have Pro we use RevenueCat, our subscription provider, which receives your RescuteKit purchase history and your account ID and processes them on our behalf.
• Pro trials granted by us. We may also turn on a free Pro trial for specific accounts. To do this, we mark your account profile as Pro and, where applicable, the date it ends.

This website

The website has no forms that store data, uses no advertising cookies and doesn't measure visits with analytics tools. It stores the language you choose in your browser (in a cookie and in local storage, for one year) so it can show you the site in that language. The site is hosted on Vercel, which logs technical data for each visit, such as the IP address, to serve the page and protect it from abuse.

Why we use data and on what legal basis

• Your account and account profile: to give you access, identify you, keep your cloud backup, turn on Pro and handle your requests. Basis: it's necessary to provide the service you request by using the app.
• Your cloud backup (go bag, pantry, household members without health data, household details and meeting points): to back it up and restore it on another phone and, with Pro, share it with your family. Basis: it's necessary to provide the service.
• Health data: to prepare what each person needs. Basis: your explicit consent, which you can withdraw at any time.
• Location for the city and the weather: to show them on Home. Basis: the location permission you grant on your phone, which you can withdraw in the system settings.
• Crash reports: to find and fix bugs and keep an emergency app stable. Basis: our legitimate interest, using technical data that doesn't identify you by name.
• Usage and performance data: to understand what to improve. Basis: your consent, which you can withdraw at any time without changing anything else in the app.
• Pro purchases: to turn on Pro, manage your subscription and handle billing claims. Basis: it's necessary to provide the service you bought and to meet legal obligations.
• Complying with the law: to respond to valid legal requests and keep what the law requires.

We don't use your data to make automated decisions that affect you or to build advertising profiles.

Who we share data with

We don't sell or rent your data. It's only received by these providers, who process it on our behalf and for the purposes described here:

• Google (Firebase): sign-in, account profile, cloud backup, the server that requests the weather, crash reports and, only with your consent, usage and performance data.
• Apple and Google: sign-in with their accounts and the system location service, under their own privacy policies.
• Apple (WeatherKit): the approximate location for the weather, sent from our server, with no identifiers.
• RevenueCat: your purchase history and account ID, to manage your Pro subscription.
• The App Store and Google Play: subscription billing, under their own policies.
• Vercel: hosting for this website.

If you have Pro and share with your family, its members see what you share. We may also disclose data if a competent authority requires it under the law, or to protect people's safety. If Art Studio transfers RescuteKit to another company, this policy will keep protecting your data and we will let you know beforehand.

International transfers

Art Studio is in Panama, and our providers process data in other countries. Your account and your cloud backup are stored on Google (Firebase) servers in the United States, where the server that requests the weather also runs. RevenueCat, Vercel and Apple (for the weather) also process data mainly in the United States. This means your data leaves the country where you live, unless you live in the United States.

When that happens, we use providers that contractually commit to protecting data with safeguards equivalent to those of your country, such as the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework when the provider is certified. You can ask us for more information about these safeguards.

How long we keep data

• Your account, account profile and cloud backup: for as long as you have the account. Uninstalling the app doesn't erase them. If you delete the account from the app, they're deleted immediately; if you ask us from the web, within 30 days at most.
• Health data in the cloud: until you withdraw your consent or delete your account.
• Data on your phone: until you delete it, delete your account in the app or uninstall the app.
• Crash reports: up to 90 days.
• Usage data: up to 14 months. Performance data: up to 90 days.
• Weather on our server: the weather for each area, with no data about who requested it, 24 hours; the request count per account, without location, 2 hours; technical logs, containing only metrics, 30 days.
• Purchase history at RevenueCat: for as long as you have the account. When you delete it, we ask RevenueCat to delete your data. Receipts that Apple and Google must keep by law remain under their policies.
• Privacy and deletion requests, and consent records: we keep the date, the email and the version of the text accepted for 3 years after the request or after you withdraw consent, only to be able to show that we handled them.

Security

All of the app's connections are encrypted (HTTPS), and Google encrypts the data stored on its servers. The database's security rules only let in its owner and, with Pro, their family according to their role. Only we can change the fields that turn on Pro. The family PIN is never stored in plain text or sent off the device.

No system is infallible. If a security incident affects your data, we will notify you and the relevant authority within the time limits set by law. Protect access to your phone with a passcode or biometrics: anyone who opens it can see what you save in the app.

Your rights

Depending on the law of your country, you have the right to:

• Access: know what data we hold about you and get a copy.
• Rectification: correct data that is wrong or incomplete. You can correct almost everything yourself in the app.
• Erasure: ask us to delete it. The fastest way is "Delete account" in the app.
• Objection and restriction: object to a use or ask us to restrict it, for example the use of crash reports.
• Portability: receive your cloud backup in a commonly used format.
• Withdraw your consent at any time, without affecting what was done before.
• Not be subject to solely automated decisions. RescuteKit doesn't make this kind of decision.

These rights are recognized by, among others, Panama's Law 81 of 2019 and its regulations (rights of access, rectification, cancellation, objection and portability); the General Data Protection Regulation (GDPR) in the European Union and the European Economic Area; the General Data Protection Law (LGPD, Law 13,709/2018) in Brazil; and the data protection laws of other Latin American countries, such as Mexico, Colombia, Argentina, Chile, Peru and Costa Rica. If the law of your country gives you more rights than those described here, we respect them.

How to exercise them and where to complain

Email us at rescutekit@artstudiogroup.com from your account's email (or Apple's relay address) and tell us which right you want to exercise. If we can't confirm the account is yours, we'll ask for one more detail; we will never ask for your password. It's free and we reply within 30 days at most. If the law of your country sets a shorter deadline, we meet that one.

If you disagree with our answer, you can complain to the data protection authority in your country: in Panama, the National Authority for Transparency and Access to Information (ANTAI); in Brazil, the National Data Protection Authority (ANPD); in the European Union, the supervisory authority of your country of residence. Please write to us first: we can almost always sort it out faster.

Children

RescuteKit is intended for people aged 16 or over, which is the age shown in its store rating. We don't knowingly create accounts for anyone under that age. If you are a parent or guardian and believe a minor has created an account, email us and we'll delete it.

An adult can add the children in their household (name and age) to the app to plan the go bag and pantry. That data is stored on the adult's phone and in their cloud backup, and is the responsibility of that adult as the child's parent, guardian or caregiver.

What we don't do

• We don't sell or rent your data.
• We don't show ads.
• We don't track you across other companies' apps or websites or use the advertising identifier.
• We don't send your live GPS location to anyone, including emergency services.
• We don't use your cloud backup or your health data for analytics or advertising.

Changes and effective date

This version of the policy is effective as of November 14, 2026. If we change it, we'll update this page and its date. If the change is significant, for example if data starts being used for something new, we'll also let you know in the app before it applies and, where the law requires it, ask for your consent again.