1. Scope and operator
FAAL RADAR is a disaster signal visibility and offline relay service operated by Faaltek. Contact furkanokuk@faaltek.com for privacy questions and data requests.
2. Privacy principles
- Dog-tag information is encrypted on the device by default.
- A signal includes only the state, audience and fields permitted by the user.
- Close Circle does not continuously track location.
- Push notifications do not contain dog-tag or exact-location data.
- Processing is limited to what is needed for disaster functionality and security.
3. Data we may process
| Category | Examples | Source and choice |
|---|---|---|
| Anonymous app identity | FAAL user ID, device ID, platform, signing public key or hash | Created locally at setup; used to validate packets and prevent replay. |
| Emergency signal | Safe, Help or automatic Unknown status; timestamps, validity, signature and relay counters | Created by user action or the documented disaster rule. |
| Location | Permitted exact/approximate position, accuracy and time; regional H3 cell for server-side earthquake watch | Obtained with system permission. An earthquake-watch request is reduced to a region cell for persisted watch storage. |
| Permitted dog-tag fields | Display name, blood type, health/accessibility note, battery and last-signal time | Included only when the sharing rule permits the field. Sensitive fields require an explicit user action. |
| Close Circle | Membership, public-key hash, invite and latest status | Processed when an invite is created or accepted. Personal aliases remain encrypted locally. |
| Notifications | FCM/APNs token, platform, minimal event identifier and delivery result | Registered when notifications are enabled. |
| Purchases | Anonymous app user ID, product, entitlement and subscription state | Processed by RevenueCat and the app store when Pro is selected. FAAL RADAR does not receive payment-card data. |
| Security and operations | Request time, error, queue/delivery state, hashed rate-limit identifiers; infrastructure-level IP and device/network metadata | Generated to protect, operate and troubleshoot the service. |
| Support | Email address, description and attachments you send | Received only when you contact us. |
4. Purposes and legal bases
Data is processed to create, validate, relay and display signals; determine the newest state; deliver earthquake/impact notifications; provide Close Circle and Pro; secure and troubleshoot the service; and comply with law. Depending on applicable law, processing may rely on contract, an explicit user request or consent, vital interests, legitimate security interests or legal obligations. Sensitive dog-tag and precise-location fields are added only through an explicit user choice.
5. Nearby relay
Signed signals may travel to other FAAL RADAR devices over Bluetooth, local peer-to-peer transports or QR. A carrier may temporarily keep a packet in an encrypted queue and upload it after internet access returns. Relaying does not reveal dog-tag fields that were not permitted, but recipients can see fields explicitly included in the signal.
6. Providers and international processing
The service may use Cloudflare for hosting, D1, R2, Queues and security; Google Firebase Cloud Messaging; Apple Push Notification service; RevenueCat; and the app stores. Earthquake data comes from USGS and EMSC; user dog-tag data is not sent to those sources. Providers may process data in different countries, subject to appropriate contractual, technical and legal safeguards.
7. Retention and visibility
- Signals remain map-visible only while valid and as the newest valid state.
- Stopping a broadcast sends a signed revocation and removes the raw signal object; limited integrity and abuse-prevention records may be retained longer.
- Carried packets are removed from device queues after delivery, expiry or revocation.
- Invalid push tokens are retired.
- Security, delivery and support records are kept only as needed for their purpose or an applicable legal requirement.
- Deleting the app removes local app data. A Recovery QR you exported remains separately under your control.
8. Security
Signals are signed with Ed25519; sensitive local data is protected by platform secure storage; HTTPS and supported peer-session encryption protect transport. Packet size, replay, signature and rate limits are enforced. No system can guarantee absolute security or continuous availability during a disaster.
9. Choices and rights
You can change location, nearby-device, camera and notification permissions in system settings. You can stop a signal, remove a Close Circle member and change sharing rules in the app. Contact furkanokuk@faaltek.com for access, correction, deletion, restriction or objection requests. Because the service has no account login, ownership may need to be proven through a signed in-app challenge without disclosing your private key. Never email a Recovery QR or private key.
10. Children
FAAL RADAR is not a social service directed to children. Where local law requires it, minors should use the app with a parent or guardian. Official emergency services remain the appropriate channel for urgent assistance.
11. Website and cookies
This promotional website uses no advertising, behavioral analytics or marketing cookies. Cloudflare may process essential network logs for delivery and security. External websites apply their own policies.
12. Changes and contact
This policy may be updated as the product or law changes. The effective date will be revised for material updates and notice will be provided where appropriate. Contact furkanokuk@faaltek.com.