Privacy
SojoSafe Privacy Policy
SojoSafe is a personal-safety system: a Bluetooth emergency button, an iPhone app and a server. When an alarm is raised, the contacts you chose get a notification with your location right away and can listen in live. This page explains which data this needs and what we do with it.
- No ads
- No tracking
- No recordings
- Location only during an alarm
- Live audio is never recorded
- No ads, no tracking
- Only your own contacts see it
- Delete your account in the app
Last updated: 2 November 2026 · This website itself sets no cookies and uses no analytics.
Who is responsible?
MR-Beveiliging B.V., Kauwenhoven 30, 6741 PW Lunteren, the Netherlands. Contact: [email protected].
What data do we process?
| Data | Why | When |
|---|---|---|
| Name you enter yourself | So your contacts see who an alarm is from and who responds | At sign-up |
| Role and family group (who wears the button, who receives alarms) | To decide who receives an alarm | At sign-up and pairing |
| Device and notification token (Apple Push) | To deliver alarms and notifications to the right phone | As long as you are signed in |
| Precise location (also in the background) | To show where the wearer is during an alarm | We send your location to the server only during an alarm. Without an alarm the app only uses coarse movement notifications from iOS to keep running; that location does not leave your phone. |
| Microphone audio | Live listening and talking back during an alarm | Only during an alarm, live. We do not record or store audio. |
| Button and app status (connected, battery, fall detection on/off, last sign of life) | To warn your contacts when the button or app stops working | As long as you are signed in |
| Alarm history and log (time, who saw it, who responded) | Overview for the family and help with problems | Until you delete your account |
We do not ask for an email address, phone number or password. We show no ads, do not track you across apps and websites, and do not sell data.
Who do we share data with?
- Only with the contacts in your family group. An alarm also has a secret map link; it works until 24 hours after the alarm ends.
- Apple delivers push notifications (Apple Push Notification service).
- Our server is in Germany (Hostinger, Düsseldorf). Traffic passes through Cloudflare. Live audio runs through our own server (LiveKit), not a third party.
Retention and deletion
We keep data as long as your account exists. You can delete your account yourself in the app: Settings › Delete account. Your name, device, buttons, alarms and locations are then erased from the server. If you are the last parent in a family, the whole family is deleted. Server back-ups disappear automatically after 14 days. If it does not work in the app, email us and we will delete your data within 30 days.
Your rights
You can request access, correction, deletion and restriction of your data, and object to processing (GDPR). Email [email protected]. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Children
A child uses SojoSafe under the supervision of a parent or guardian, who manages the account and family group. A parent can always have the child's account deleted.
Not a replacement for emergency services
SojoSafe passes an alarm on to your own contacts. It is not an emergency number and not a medical device. In immediate danger, call 112 (or your local emergency number).
Security
Traffic is encrypted (HTTPS). Access tokens are stored only as hashes. Only members of your family group see your data.
Changes
If we change this policy, we will publish the new version here with a new date.
This website
sojosafe.nl sets no cookies, uses no analytics and loads no external fonts or scripts. Our hosting provider and Cloudflare process technically necessary data (such as your IP address) to serve the site securely.