Privacy Policy

Last Updated: 25/11/2025

This Privacy Policy explains how the UNIMAS Prihatin mobile application (the “Application”, “we”, “our”) collects, uses, discloses, and retains information. This policy is written to meet Apple App Store requirements for accurate App Privacy disclosures and to clarify third-party processing related to the Google Maps SDK and Firebase Cloud Messaging.

1. Scope and Accountability

This policy describes data handled by the Application across all supported platforms. You are responsible for granting permissions on your device. We are responsible for the accuracy of our App Store Connect App Privacy responses and for any third-party code embedded in the Application.

2. Data Collected

2.1 Precise Location (GPS)
Purpose: The Application collects your device’s precise location (GPS-level accuracy) only when you explicitly grant permission. Location is collected for safety and core app functionality (for example: identifying your exact position during emergency assistance or safety verification).

2.2 Push Notification Device Token
Purpose: When you opt in to notifications, the Application receives a device token from Firebase Cloud Messaging (FCM). That token is used solely to deliver push notifications and is not used for advertising, profiling, or cross-app tracking.

3. Third-Party Services and Their Roles

We use the following third-party service providers. Their processing may involve technical data flows outside our systems. We declare these providers here to meet App Store Connect disclosure requirements.

• Google Maps SDK — used to render maps and map tiles and to provide map-related services. Google may process IP address, device information, and location data as described in Google’s documentation. Google acts as an independent service provider; we do not use Google for advertising or analytics in this Application. See Google’s privacy information: policies.google.com/privacy.
• Firebase Cloud Messaging (FCM) — used only to deliver push notifications. We do not use Firebase Analytics, Crashlytics, or other Firebase services that collect analytics in this Application. For Firebase privacy information see: firebase.google.com/support/privacy.

4. App Store Connect — App Privacy Statements

When completing App Store Connect data fields we declare the following (accurate at the time of submission):

• Data types collected: Precise Location; Identifiers (device token for push notifications).
• Purpose of collection: App functionality; Safety; Push notifications.
• Data shared with third parties: Google (Maps SDK) and Firebase (FCM) as service providers; no sharing with advertisers or analytics vendors.
• Tracking: We do not use data for tracking in the sense Apple defines (cross-app profiling for advertising). If location or identifiers are only used for core functionality and emergency features, do not mark “Used for Tracking.”

Ensure App Store Connect responses mirror this policy verbatim. If future SDKs or services are added (analytics, advertising), update both App Store Connect and this policy before submitting updates.

5. Retention and Deletion

We retain location data only as long as necessary to provide the requested safety or map function. We do not maintain historical location logs for profiling. Push notification tokens are retained only while notifications are enabled. You may request deletion of data associated with your device; requests will be processed subject to legal and operational constraints.

6. User Controls and Consent

• You must explicitly grant location permission; the Application will present the system prompt and will not collect location before consent.
• You may change or revoke location and notification permissions at any time in your device settings.
• If you revoke permission, the Application will cease collecting that data until permission is granted again.

7. Security

We apply industry standard technical and organisational safeguards to protect data in transit and at rest. While we strive to protect information, no security measures are absolute.

8. Legal and Emergency Disclosures

We may disclose data in response to lawful requests by public authorities, to comply with legal obligations, or to protect the safety of users (for example, sharing location with emergency responders when required).

9. Children’s Privacy

The Application is not directed to children under 13. We do not knowingly collect precise location or push tokens from children under 13 without appropriate parental consent.

10. Changes to This Policy

We will post changes to this page and update the “Last Updated” date. App Store Connect responses will be updated concurrently to remain consistent with this policy.