This Privacy Policy explains how personal information and device data are processed when using the SOS+ Notifications Android application (the “App”), provided by Duday. The App is intended for staff and other authorized users of organizations that use the SOS+ alarm service.
1. Who is responsible for your data?
The organization deploying SOS+ generally determines who may access the service, why alarm information is processed and how long it is retained. That organization will ordinarily act as the data controller for those activities. Duday provides and operates the technical service and, where applicable, acts as a data processor under the relevant agreement. Duday may act as an independent controller for its own business administration, service security and support activities. Actual responsibilities depend on the applicable agreements and circumstances.
For requests concerning your work account or a particular alarm, please contact your organization's administrator or privacy contact first. You may also contact Duday at support [at] myappmakers [dot] com; where appropriate, Duday will direct your request to the responsible organization.
2. Information we process
- Account and identification data: depending on configuration, your name, username, user ID, work email address, organization, and assigned roles or permissions.
- Device and application data: Firebase Cloud Messaging (FCM) registration tokens, installation or device identifiers, operating system, App version, and information needed to associate a device with an account.
- Alarm and usage information: SOS alerts, timestamps, alarm status, delivery and acknowledgment actions, and, where included, information relating to a client, resident, location or room. Alarm information may contain personal data and, depending on its contents, sensitive information.
- Technical and security information: crash reports, diagnostic information, connection and security logs, and information needed to investigate service failures or unauthorized access.
The exact fields processed depend on the App version, configuration and use. The App is not intended to track employees for advertising purposes or to collect their precise GPS location. If a future feature processes location data, the relevant disclosure will be updated.
3. How information is used
- To authenticate users and provide role-based access.
- To deliver and manage SOS alerts and other necessary operational notifications.
- To register devices and help monitor reliable notification delivery.
- To investigate failures, protect the service and prevent misuse.
- To comply with applicable legal obligations and agreements with participating organizations.
We do not use this information to display advertisements in the App and do not sell personal information.
4. Legal bases and care-related information
The participating organization determines the applicable legal basis under the GDPR for its processing of user and alarm information. Depending on the circumstances, this may include performance of a contract, compliance with a legal obligation, or legitimate interests. Where alarm information contains special categories of personal data, the responsible organization must also identify an applicable GDPR Article 9 condition. This Policy does not replace the participating organization's own privacy notice.
5. Recipients and service providers
Information is accessible only to parties who need it to provide or administer the service, which may include authorized staff and administrators of the participating organization, Duday, and contracted technical service providers. The App uses Google Firebase Cloud Messaging for push notifications and Firebase Crashlytics for error diagnostics. Server hosting may be provided by OVHcloud. These providers may process technical identifiers and other information required for their respective services under their applicable terms and privacy arrangements.
Providing information to a service provider acting on our instructions does not necessarily mean that information is shared for that provider's independent purposes. Any independent use by a third party must be assessed separately. We do not sell personal information to advertising companies.
6. International transfers
Information may be processed outside the European Economic Area, including through Google services. Where required under the GDPR, appropriate safeguards are used, such as an applicable adequacy decision or standard contractual clauses. Actual processing locations depend on the services and settings used.
7. Security
We apply appropriate technical and organizational measures, including secure connections where supported, access restrictions and user permission management. No digital service can guarantee absolute security. Security incidents are handled in accordance with applicable legal and contractual requirements.
8. Retention
Information is retained only for as long as necessary for the purposes described, subject to applicable legal retention obligations. Retention periods for accounts and alarm records are also determined by the participating organization and its agreements with Duday. Technical logs, push notification records and crash data may have different retention periods. When service provision ends, data is deleted or returned as required by applicable agreements and law.
9. Your rights and deletion requests
Depending on the circumstances, you may have rights to access, correct, erase, restrict or receive your personal data, or to object to certain processing. Please contact your organization's administrator or privacy contact regarding your work account and alarm records. For questions about Duday's technical processing, contact us at support [at] myappmakers [dot] com. Not every deletion request can be fulfilled in full, for example where legal retention duties or necessary security records apply. You may lodge a complaint with your competent data protection authority; in the Netherlands this is the Autoriteit Persoonsgegevens.
10. Accounts and device permissions
Work accounts are generally created and managed by an authorized administrator of the participating organization. The App may request permission to display notifications and use other Android features needed for its configured operation. Permissions can be reviewed or adjusted in device settings. Denying necessary permissions may affect the delivery of emergency alerts.
11. Children
The App is intended for authorized professional users and is not directed at children. Depending on an organization's use of the service, alarm content may concern clients or residents, potentially including minors.
12. Updates to this Policy
We may update this Policy when the App, service or applicable requirements change. The current version and its revision date will be published on this page.
13. Contact
For questions about this Privacy Policy, privacy-related inquiries, or requests concerning personal data, please contact:
Duday – SOS+ Notifications
Website: https://myappmakers.com/
Email: support [at] myappmakers [dot] com
For requests concerning your work account, access permissions, or specific alarm records, please contact the healthcare organization through which you use SOS+ Notifications in the first instance.
We will review privacy-related requests and respond in accordance with applicable data protection laws.
This Policy describes data processing in SOS+ Notifications. Actual data flows, retention arrangements and contractual responsibilities must match the production configuration.