Privacy Policy

1. Data controller

Safe Button AB, Stockholm, Sweden, is the data controller for the processing of personal data described in this policy. Questions about the processing can be sent to info@safebutton.se.

When an employer or organisation orders licences for its employees, the orderer may be an independent data controller for data concerning its employees and alarm recipients. Safe Button then processes the data on behalf of the orderer in accordance with the agreement.

2. Categories of personal data

Depending on how you use the service, the following categories of personal data may be processed:

• Contact details such as name, email address and phone number, for example when you order, activate a licence, invite a family member, or contact us.
• Order, licence and activation information, such as order number, access key, licence status, and which device a licence is activated on.
• Alarm-related data: that an alarm has been triggered, the phone's GPS position in connection with the alarm, audio recorded in connection with the alarm, and recipient details (name and phone number of your designated recipients).
• Payment and subscription information, such as billing details and payment status. Card details are handled by the payment provider and are normally not stored by Safe Button.
• Technical information needed for operation, security and troubleshooting, such as device information, log data and information about your use of the service.
• Correspondence and other information you choose to provide to us.

We do not collect more information than is needed for the service to function. Position data and audio recordings are part of the safety function and are not used for ongoing monitoring.

3. Purposes and legal bases

• To deliver the service: to trigger alarms, record audio, send SMS with position to your chosen recipients, and to administer licences, activations and subscriptions. Bases: performance of a contract (GDPR Art. 6(1)(b)) and, for the function governed by you yourself triggering an alarm, our legitimate interest in providing the safety function you have chosen to use (Art. 6(1)(f)).
• To handle purchases and payment: to process orders, payments, invoices and renewals. Bases: performance of a contract (Art. 6(1)(b)) and legal obligation, including accounting rules (Art. 6(1)(c)).
• To respond to contact and support: to answer questions, handle cases and assist with, for example, cancellation or refunds. Bases: performance of a contract or legitimate interest (Art. 6(1)(b) or (f)).
• To maintain security and operations: logging and troubleshooting to protect the service, prevent misuse and follow up on events. Basis: legitimate interest (Art. 6(1)(f)).
• To comply with the law: to disclose information when required by law or a decision of a public authority. Basis: legal obligation (Art. 6(1)(c)).

Certain functions, such as access to position and microphone on the mobile device, require you to grant your device the necessary permissions. You can change or withdraw these permissions at any time in your phone's settings, which may affect the service's functionality.

4. Recipients and processors

We share personal data with companies that help us deliver the service, as data processors. This may include providers of cloud and hosting services, SMS delivery providers, payment and subscription services, and email and support systems. For purchases via the App Store, Apple processes the purchase information under Apple's own terms.

In connection with an alarm, position and alarm information is sent to the recipients you have chosen in advance. We do not disclose personal data elsewhere for marketing purposes. Data may also be disclosed to authorities when we are required to do so by law.

5. Retention of personal data

We retain personal data only for as long as needed for the purpose of the processing or as required by law. Data relating to orders and payment is retained to comply with accounting rules. Licence, activation and subscription data is retained for as long as the licence or subscription is active and for follow-up after termination, based on our routines. Alarm-related data, such as position and audio recordings, is handled based on the purpose for which it was collected and is deleted in accordance with our routines and the policy that applies within your organisation where an employer has ordered the licence. Correspondence is retained for as long as needed to handle and follow up the matter.

6. Security

We work to protect personal data with appropriate technical and organisational measures. Traffic between the app, backend and third-party services is encrypted, access to data is role-based, and events relating to licences, activations and payments are logged for follow-up. Licences are protected by row-level access control in the backend. No technology can guarantee complete security, but we continue to improve protection. Read more on the Security and privacy page.

7. Transfers outside the EU/EEA

Some of our suppliers may process personal data outside the EU/EEA. Such transfers take place only with appropriate safeguards, such as the European Commission's standard contractual clauses, and with the level of protection required by GDPR.

8. Your rights

Under the General Data Protection Regulation (GDPR), you have the right, among other things, to:

• be informed about how your personal data is processed and gain access to it,
• have inaccurate data corrected,
• have data deleted to the extent it no longer needs to be processed,
• request restriction of processing,
• object to processing based on legitimate interest,
• receive data you have provided in a machine-readable format (data portability), and
• withdraw consent with future effect.

Contact us at info@safebutton.se to exercise your rights. If an employer has ordered the licence for you, your employer may also be able to help you with questions about data relating to the service.

If you are not satisfied with our processing of your personal data, you may lodge a complaint with the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), imy.se.

9. Cookies and technical data

The website does not use tracking cookies for advertising. Technical information, such as log data needed to deliver and secure the website, is processed as described above. The mobile service processes device information needed for alarms, position and messages to function.

10. Changes to this policy

We may update this policy as the service, legislation or our guidelines change. The version that applies is the one published on this page, with the date of the latest update shown in the header. Material changes will be communicated appropriately when required by law.

11. Contact

Do you have questions about this policy or our processing of personal data? Contact us at info@safebutton.se.