Privacy policy

Kom is a personal alarm app for iPhone. This page describes what information the app processes, why, for how long — and what you decide yourself. The data controller is Lars (jegerlars.dk), hej@jegerlars.dk. For organisations using Kom for their staff, the organisation is the controller for employee data, and Lars is the processor.

What we process

• Your name (the one you type) and a technical device key so your groups know you. No password. If you choose "Link Apple ID", we store Apple's anonymous user ID and — if Apple passes it on — the email you chose to share (often Apple's hidden relay address). Never your Apple password.
• Phone number, only if you enter it. It is shared with the members of your private groups — and with colleagues on shift, if your organisation has enabled the directory — so they can call you during an alarm. The app keeps your group's numbers on the phone itself, so you can make the call yourself if no one answers an alarm — even when the server cannot be reached.
• Contacts you add yourself ("Forward to Mum"): the name and phone number of the people you choose. If you forward an alarm to one of them, the text message is sent from your own phone — never from our server. On the link in the message, they see the sender's name, position and address, and can reply "I'm coming". The link is a one-time key and only works while the alarm is running.
• Location — only when you trigger an alarm: last known position plus fresh positions for up to one hour. Day to day, the app only uses the system's "significant location changes" so a reasonably fresh position is always ready; it isn't sent anywhere until you press.
• Responder location — if you tap "I'm coming", your position is shared with the alarm's participants until you arrive or the alarm ends.
• Check-in and "Follow me home" — if you set a timer, we store the time and your last known position so the alarm can be sent if you don't answer. If you choose "Follow me home", your position is shared along the way with the people who would have received the alarm; sharing stops when you mark yourself ok, or when the timer runs out.
• Technical self-test — when you test the chain, your phone and the phones that answer send their position, so the test can show how many recipients are nearby. Only the number is shown, never who, and the positions live only in the server's temporary memory while the test runs (5 minutes).
• Incidents: who triggered, when, who was notified, who replied and when, who forwarded, when it ended.
• Battery level and connection type at the time of triggering, so recipients can assess the situation.
• Push tokens from Apple, so we can send messages to your phone.
• Kom Plus: if you subscribe, we store Apple\'s transaction ID, the product and the expiry date, so we know what you have access to — never payment details; only Apple has those. If you redeem a Plus code, we store which code you used.

Who sees what

• Your location and address are seen only by those who received your alarm — while it's active, and afterwards only by those who accepted it ("I'm coming") and by the sender.
• In an organisation, administrators can see the incident log and reports. Every view is logged (audit trail).
• We don't sell data, show ads or use tracking.

For how long

• Positions are deleted automatically after 30 days (organisations can set a shorter period).
• The incident log without positions is kept for up to 2 years for documentation, then deleted.
• The audit trail (who saw what) is kept for up to 5 years.

Where

Data is processed on servers in the EU (Denmark). Messages are delivered through Apple's Push Notification service. Addresses are looked up on your own phone (Apple Maps) — not on our server.

Your choices

• You can always see who's in your groups, leave a group or remove an organisation.
• "Delete account" in Settings removes your personal data immediately. Incidents you took part in are kept without your name, because they're other people's documentation.
• Permissions (notifications, location) are controlled in iPhone Settings. Without "Always" location, the app can't send your position from the lock screen — the app says so clearly.
• Critical alerts cut through silent mode and Focus, and they're only sent to phones whose owner has allowed them. You can turn them off again in iPhone Settings; you'll then get the alarm as an ordinary notification. Only the alarm itself is critical — replies, shift reminders and drill alarms never are.

Contact

Questions about your data: hej@jegerlars.dk. You can complain to the Danish Data Protection Agency, datatilsynet.dk.