1. About ZoneAlert
ZoneAlert is an emergency alert application developed and operated by Bon.do ApS, Rantzausmindevej 228, 5700 Svendborg, Denmark, CVR 43473425. ZoneAlert sends real-time emergency notifications based on your location.
This policy explains how the app collects, uses and protects location data and personal data. It is drafted in line with the GDPR and Danish data protection law.
2. Data controller and contact
Bon.do ApS is the data controller for the data collected through ZoneAlert. Contact us at info@bon.do or +45 22 44 59 22.
3. Location data
ZoneAlert collects precise location data from your device to check whether you are inside or entering an active emergency zone. The app needs background location to work when it is closed or not in use, because an alert is only useful if it arrives when you enter a zone.
Location history is stored only as long as needed to verify the zone and deliver the alert. It is not used for advertising and is not sold.
4. Account and device data
We process your email address and user ID for account creation, authentication and critical service messages. Passwords are stored in encrypted form by our authentication provider; we never see your plain-text password.
We also process a push notification token from Firebase Cloud Messaging, a device identifier, operating system, app version and device model so that alerts can be delivered and problems can be diagnosed.
5. Why we use it
We use location data to verify whether you are in an active emergency zone and to trigger the right alert. We use account and device data to authenticate you, deliver push notifications, keep the service stable and provide support.
The legal basis is your consent for location and push notifications, and our legitimate interest in operating and securing the service. You can withdraw consent in the app or in your device settings, but the alert service will then stop working.
6. Sharing and processors
We share data with the providers that run ZoneAlert: Supabase for authentication and data storage, Google Firebase for push notifications, and our hosting provider. They process the data on our instructions and under a data processing agreement.
We do not sell personal data. We may disclose data if required by law or to protect a person’s vital interests in an emergency.
7. Retention and deletion
Location data is kept only as long as needed to verify the zone and deliver the alert. Account data is kept while your account is active. If you delete your account, we delete or anonymise the associated personal data, unless a legal obligation requires us to keep it.
You can delete your account in the app, or ask us at info@bon.do.
8. Security
We use TLS for data in transit, encryption at rest for the data store, access control and least-privilege access for the people who support the service. No system is perfect, but location data is treated as sensitive and kept to the minimum needed for the alert to work.
9. Your rights
You have the right to access, rectify, erase, restrict or object to the processing of your personal data, and to data portability. You can withdraw consent at any time. To exercise a right, email info@bon.do. You can also complain to Datatilsynet at datatilsynet.dk.
10. Changes
We may update this policy when the app or the law changes. The current version is always available on this page, with the date at the top.
Contact: info@bon.do · CVR 43473425