ImpactGrid Companion Privacy Policy

This policy describes how ResponderStack handles information used by the ImpactGrid Companion app to share a device’s location with an ImpactGrid team. It applies to the companion app’s team connection and location-sharing features.

Connecting to a team

You connect the companion app to a team using a team-specific URL or QR code provided by your response organization. The connection identifies the team that will receive your location updates. A QR code is a way to open or import the team connection; it does not replace your device’s location permission.

Treat team URLs and QR codes as sensitive access information. Share them only with intended team participants. If a link is shared with the wrong person, contact your team coordinator so they can replace or revoke the team link.

Information used for location sharing

To provide team location sharing, the app processes:

• Device location: geographic coordinates and available location accuracy information. Depending on the permission you grant, this may include precise location.
• Team connection information: the team URL or connection token used to associate location updates with the intended team.
• Location update context: the time of an update and device or session information needed to distinguish reporting devices within a team.

Location updates can reveal your movements while sharing is active. A team connection may also associate those updates with you when your organization knows which device or participant is using it.

How location is used and shared

Location is sent to the connected ImpactGrid service to associate your device with the selected team and support field coordination, team accountability, and the incident’s operational map. Your location may be visible to team coordinators, command staff, and other people your organization authorizes to view team locations in ImpactGrid.

Your response organization determines who has access to its operational records. Ask your team coordinator who can view your team’s location before you begin sharing. Connecting to a team does not mean that location is visible only to the person who gave you the URL or QR code.

ResponderStack may process information to operate, support, and protect the service, including through service providers acting on its behalf. Information may also be disclosed when required by law.

Permissions and your choices

Location sharing requires your device’s location permission. You can deny that permission or revoke it at any time in your device’s settings. Without location permission, the app cannot provide device location updates to your team.

Your device’s permission settings control whether location access is allowed only while using the app or, where supported and enabled, in the background. If background sharing is supported and you grant the required permission, location updates may continue when the app is not on screen. To prevent further location access, revoke the app’s location permission in device settings; do not rely solely on switching to another app.

If you use the camera to scan a QR code, camera permission is used for that scan. You can instead connect using the team URL without scanning a QR code.

Stopping location sharing or revoking permission stops future location access. It does not by itself delete information already received by ImpactGrid or copies retained by your response organization.

Retention and deletion

Location and related team information are retained for the operational purposes described in this policy and for applicable security, recordkeeping, or legal needs. Retention depends on the response organization’s incident-record requirements and the service’s configuration.

To ask about retention, request access to your information, or request deletion, contact your response organization or ResponderStack at [email protected]. Include the organization or team name and the approximate dates of use so the relevant records can be located. Do not send your team URL, connection token, or QR code by email. Some records may need to be retained to meet legal or incident-record obligations; a deletion request does not automatically remove your organization’s separately retained copies.

Protecting your information

Protect access to your device and team connection information. Contact your team coordinator promptly if your device is lost or your team URL or QR code is exposed. Location accuracy and update availability depend on your device, permissions, and connectivity.

Changes to this policy

We may update this policy as the companion app or its information practices change. The effective date at the top of this page identifies the current version. Review this page for updates.

Contact

For questions about this policy or the ImpactGrid Companion app’s handling of your information, contact ResponderStack at [email protected].