Privacy policy
Last updated: 18 October 2026
SirenPress is a personal safety app. This policy explains which data the app uses, what stays on your own device and what does leave it. In brief: your recordings stay on your iPhone, and your location is sent only to the guardians you have invited yourself: during an alarm, and during a trip with On the way (Onderweg) if you have following switched on. Anything else you share is your own choice: a photo of yourself, your medical card during an alarm, or a link that lets someone without the app follow along.
Who is responsible
Studio Levai, Chamber of Commerce number 42167359. Privacy questions? Email info@studiolevai.nl.
There is no account
You do not have to sign up anywhere. We do not ask for your email address or telephone number. The app does ask for a first name; a nickname is fine too. That name is kept on your own device and with your device number on our server. That way your guardians can see who an alarm is from, and you can see who your guardian is.
What stays on your iPhone
| What | Why |
|---|---|
| Your recordings: video and audio | Evidence of what happened. Stays on your device; we cannot access it. A copy of every recording also goes into the Hidden album in Photos. That copy is in your own photo library and is included in your iCloud backup if you have it enabled; if you delete the recording in the app, that copy remains until you remove it there yourself. |
| Your home address | So the app knows how long you are travelling and automatically checks you out when you are home. This address does not leave your device. |
| Your medical card | What you fill in: conditions, medication, allergies, blood type and what a helper should know. Stored securely on your device. It only goes to your guardians if you switch on “Send with an alarm”, and then only during an alarm (see below). |
| Phone numbers you choose yourself | To call someone with one tap, or to send a text during an alarm to someone without the app. That text goes through your own Messages app. The numbers stay on your device. |
| The names you type in yourself for your guardians | So you can see who is who. A name that you type in for someone stays on your own device. The first name someone has entered in the app themselves reaches you through our server. |
| Your settings | What you have turned on or off. |
What does go to our server
The first time it starts, the app registers your device with us. We only keep data about an alarm if you have a linked guardian. If you do not, we keep nothing about your alarm, not even your location.
| What | When | How long |
|---|---|---|
| A device number and a secret, both created by us | The first time the app starts | Until twelve months after your device last contacted us, and only if no link is active by then |
| Your device's push token | As soon as you allow notifications | The same. Needed to send your guardians a notification |
| Your precise location with the time, and the place, municipality, province and country, plus what started the alarm: the button, a detected fall, or not arriving on time | Only at the moment an alarm starts. If a trip with On the way (Onderweg) turns into an alarm — you do not arrive, or a fall is detected — your location is included | Sixty days after the alarm ends, then deleted |
| Your medical card | Only if you have switched on “Send with an alarm”, and only at the moment an alarm starts. Only the guardians of that alarm can see it | Erased as soon as the alarm stops, and always after twelve hours. It is not kept with the alarm |
| That you have started a trip with On the way (Onderweg), and the time you are expected | When a trip starts, if you have a guardian. Your guardians then get a message with your name saying you are on your way, and a message when you have arrived safely. While the trip is running, your guardians can see in the app that you are on your way and when you are expected, also when live following is switched off. This also lets our server warn your guardians if you do not check in, even if your phone is off or the app has been closed | Erased as soon as you check in or are home. Otherwise after twelve hours at the latest. Without following, no position is included |
| Your last position during a trip with On the way (Onderweg) | Only if you have switched on “Wachters kijken mee” (guardians follow along), or switch it on during the trip, and you have a guardian. Then about every fifteen seconds while the trip is running. Your guardians see that position on the map | Erased as soon as you arrive or the trip stops. We keep only the last position, not a route; each new position replaces the previous one. If your device goes quiet, the position is gone after twelve hours at the latest. If you do not arrive and an alarm is raised, your last position is included in that alarm and the retention period for an alarm applies |
| A photo of what you are wearing | Only if you take one yourself when heading home, and following is switched on. It helps your guardian recognise you if they need to come to you. Your guardians see it during the trip | Erased with the trip, after twelve hours at the latest |
| Your profile photo | Only if you choose a photo of yourself in the app. Your guardians and the people you are a guardian for can see it, so they recognise you | Until you remove or replace it in the app. Otherwise the same period as the device number |
| A follow link | Only if you create a link yourself during a trip, for someone without the app. Whoever has the link sees, on a page on studiolevai.nl, your first name, whether you are on your way or in an alarm, when you are expected home, and your last position if following is switched on or an alarm is running. We only keep a secret code with your device number | The link stops working once the trip and the alarm are over, and after twelve hours at the latest. You can have at most ten at a time |
| Whether a guardian has seen your alarm and is on their way | During an alarm. You see who responded. The other guardians of the same person see each other's first name and whether they are coming, so not everyone sets off at once | Sixty days after the alarm ends, then deleted |
| How far away a guardian is | Only if a guardian has switched on “Show how far away I am during an alarm”; it is off by default. The guardian's app works out on their own phone how far away they are. Only that distance, rounded to fifty metres, goes to our server, never their location. You and the other guardians see who is closest | Erased as soon as the alarm stops, and always after twelve hours |
| When a Head home trip ended, and how | If you have a guardian and end a trip: what time it started and ended, and whether you got home, arrived somewhere else or stopped the trip. No place and no route. Your guardians see this in an overview of the last week | Seven days, then deleted |
| Youth mode, for ages 12 to 16 | If you choose at the start that you are 12, 13, 14 or 15. We store that this device is in youth mode, which parent or carer gave permission and when, whether the medical card may be shared, and an encrypted form of the parent code. We do not store the code itself | Until youth mode is switched off. Otherwise the same period as the device number |
| Which iPhone model you have, and which version of the app and of iOS it runs | When registering, and when the push token is updated | The same period as the device number |
| The first name you enter in the app | When registering, and when you change it | The same period as the device number. Your guardians and the people you are a guardian for can see this name |
| The name you enter when you invite someone | While the invitation code is open | Erased as soon as the code is redeemed. An unused code expires after seven days and is cleaned up afterwards |
| Which links exist between you and your guardians | When connecting | While the link is active; sixty days after that |
| That an invitation code has been used | When it is redeemed | Thirty days |
| How often your device tried an invitation code in the last hour | When a code is entered | The counter starts again every hour. It prevents anyone from guessing codes |
Counts. We keep counts of finished alarms: per month and per municipality, how many alarms there were, what started them, how many were false alarms, how many people raised an alarm and how quickly a guardian responded. These counts contain no device number, no location, no time and no medical data. They cannot be traced back to you and are kept, also after the alarm itself has been deleted after sixty days.
What does not go there: the video and audio of your recordings, your home address, your contacts and the phone numbers you choose, the names you type in yourself for your guardians, your medical card while “Send with an alarm” is off, and your location at any moment other than those listed above. If you are a guardian, your own location never goes to us; at most the rounded distance, if you switch that on yourself.
Your medical card
A medical card contains health data. That is extra sensitive, so it is only shared if you explicitly switch it on with “Send with an alarm”. If you switch it off or delete the card, nothing is shared any more. On our server it only exists while an alarm is running, and for twelve hours at most. We do not use it for anything else and it is not part of the counts. If you are under sixteen, only switch it on together with your parent or carer; the app asks about this too.
Who processes it
Our server function and database run at Supabase. Notifications to your guardians go through Apple's push service. We have not engaged any other parties: no advertising networks, no statistics services, no trackers.
Our Supabase project is in the Frankfurt region, Germany. Everything held on our server — your device number, your first name, your photo, your links, your alarms with their location and your medical card during an alarm — is stored and processed within the European Union. The follow page on studiolevai.nl fetches the status directly from that server; the page itself stores nothing and uses no cookies or trackers. To deliver notifications to your guardians we use Apple's push service, which operates worldwide. Your device's push token is sent there together with the text of the notification. For an alarm that text contains only the place name, for example “Alarm bij Bleiswijk”. Your coordinates, your name, your photo and your medical card are not included in that notification.
Which permissions the app asks for
| Permission | Purpose |
|---|---|
| Camera and microphone | Recording during an alarm. The camera also when you take a photo of yourself or of what you are wearing. |
| Location | Your location during an alarm, and during On the way to see whether you have arrived. During a trip this continues with the screen off; your iPhone indicates this itself. If you are a guardian with “Show how far away I am during an alarm” switched on, the app uses your location on your own phone to work out the distance. |
| Motion sensor | Detecting a fall in cycling mode. |
| Notifications | Messages from your guardians, and the question of whether you have arrived. |
| Photos | To save a copy of every recording in the Hidden album. If you do not give permission, the recording stays in the app only. |
| Face ID, Touch ID or passcode | If your iPhone has a passcode set: to confirm that it is you stopping the alarm or opening your personal area. Without a passcode, the app does not ask for confirmation. Your face stays with Apple; we only receive yes or no. |
You can refuse each permission. The app will still work, except for that component.
The app does not ask for access to your contacts. If you choose someone to call or to text during an alarm, iOS opens your contacts itself and the app only receives that one number.
Payment
A subscription runs through your App Store account. Apple handles the payment. We do not see payment details and we keep no record of your purchases on our server: whether you have a subscription is tracked on your iPhone itself, through Apple.
No monitoring centre
SirenPress sends your alarm to the people you have invited yourself. There is no monitoring centre behind it, and the app does not call the emergency services itself. SirenPress does not replace 112 or Apple's Emergency SOS. If you are in immediate danger, call 112.
Your rights
You manage everything on your device yourself: delete a recording, your photo or your medical card in the app, or delete the app and everything is gone. What we hold clears itself according to the periods above. We cannot see whether you delete the app; for your device data those twelve months therefore start at the moment your device last contacted us. If you want us to erase it sooner, or want to know what we hold, email info@studiolevai.nl. You can always withdraw consent you gave, for example for your medical card, by switching it off. You also have the right to lodge a complaint with the Dutch Data Protection Authority.
Children
SirenPress is intended for people aged twelve and over (thirteen and over in the United States). At the start the app asks how old you are. If you are 12, 13, 14 or 15, the app runs in youth mode. First a parent or carer links up as a guardian and gives permission in their own app; the law requires this for everyone under sixteen. Until that permission is given, only the button to call 112 yourself works.
The parent chooses whether the medical card may be shared during an alarm, and sets a parent code. Settings, recordings and the subscription only open with that code. The parent can withdraw permission at any time. If you are under twelve, SirenPress is not meant for you.
Changes
If something important changes, we will update this policy and change the date at the top. We will also announce major changes in the app.