Privacy Policy

Introduction

Trygg ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our healthcare visit safety application.

Data Collection Summary

🔒

Database Storage

Only these items are stored in our secure database:

✓ Username ✓ Password (hashed)

📱

Device Storage

Stored locally on your device only:

Full name Phone number Emergency contacts Visit templates

🚫

Not Stored

Processed but never saved:

✗ Location data ✗ SMS content ✗ Visit alerts

Information We Collect

1. Account Information (Database)

Username: Required for account creation and login
Password: Securely hashed and stored for authentication

2. Profile Information (Local Device Only)

Full name
Phone number
Emergency contact names and phone numbers
Emergency contact relationships

3. Visit Information (Local Device Only)

Healthcare worker name
Patient/service recipient name
Visit notes and templates
Visit duration and timestamps

4. Location Data (Not Stored)

Real-time location: Collected during active visits only
Permission required: Location access requested when needed
Usage: Included in emergency SMS alerts but NOT stored in database

5. Bluetooth Data (Local Processing Only)

Device scanning and connection information for safety device pairing
Processed locally and not transmitted to servers

How We Use Your Information

                🔐 Maximum Privacy: We only store your username and hashed password in our database. Everything else stays on your device or is processed without storage.
            

Emergency SMS Service

When you trigger an emergency alert:

Your location (if available), visit details, and healthcare worker name are sent via SMS to emergency contacts
Data passes through our AWS Lambda function for SMS delivery via AWS SNS
No emergency alert data is stored in our database

Third-Party Services

AWS (Amazon Web Services): Authentication API, SMS delivery, secure data transmission
React Native BLE PLX: Local Bluetooth device connectivity
React Native Geolocation: Location services during visits

Data Security

We implement industry-standard security measures:

🔐 Passwords are hashed before storage using secure algorithms
🔒 HTTPS/TLS encryption for all data transmission
☁️ Secure AWS infrastructure with EU data centers
📱 Local device storage uses React Native's secure storage mechanisms

Your Rights and Choices

Data Access and Deletion

Profile and visit data stored on your device can be deleted by uninstalling the app
To delete your account and username from our database, contact us

Location Permissions

You can revoke location permissions anytime through device settings
The app functions without location access, but emergency alerts won't include location information

SMS Delivery

You control which contacts receive emergency alerts
SMS quota limits may apply based on usage

Data Retention

Database: Username and password retained until account deletion requested
Device: Local data retained until app deletion or data cleared
Emergency SMS: No message content or recipient data retained after delivery

Children's Privacy

Trygg is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children.

International Users

Trygg primarily serves users in Norway. Data is processed through AWS servers in the EU-North-1 (Stockholm) region to comply with European data protection standards including GDPR and the Norwegian Personal Data Act.

Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated through:

In-app notifications
Updated "Last Updated" date at the top of this policy