BackBy Privacy Policy

1. Introduction

Welcome to BackBy. BackBy is an activity safety and check-in platform designed to help users share activity status updates and safety alerts with trusted contacts. This Privacy Policy explains how BackBy collects, uses, stores, and shares information when you use our services, website, and applications. This Privacy Policy is incorporated into and subject to our Terms of Use. By using BackBy, you acknowledge the practices described in this Privacy Policy. If there is a conflict between this Policy and our Terms of Use, the Terms of Use shall control.

2. Information We Collect

Information You Provide

When you use BackBy, we collect:

• Name, phone number, and email address.
• Safety Contact information (names, phone numbers, and email addresses of your chosen contacts).
• Activity details, custom notes, and scheduled check-in times.
• Communications, feedback, and support requests.

Information Collected Automatically

We automatically collect information when you access or use the platform, including:

• Device model, operating system, browser type, IP address, app performance data, and diagnostic logs.

We do not currently use tracking cookies on our primary application interface; if this changes, we will update this policy accordingly.

Location Data

When you create an activity, you may choose to use the map tool to center the map on your current device location, which requires your explicit permission. We do not collect or store your location at this stage; the device location is used solely to center the map so that you can manually set the start point and end point of your activity, which are then stored as part of your activity details. We do not engage in real-time location tracking.

If you trigger a safety alert or request help during an activity, we may provide activity information to your designated safety contacts, which may include your current location (such as coordinates and a link to a map showing your location) if it is available at that time.

Legal and Consent Records

To administer the service, we record:

• Your acceptance of our Terms of Use and this Privacy Policy (version, date, and time).
• Your consent to receive required transactional SMS communications.

Safety Contact Information

Users voluntarily provide contact details for their trusted Safety Contacts. You represent and warrant that you have obtained the explicit, verifiable permission of these individuals to receive automated alerts (via SMS, email, or push notifications) before providing their information to BackBy. We process this data solely on your instruction to facilitate safety workflows.

3. How We Use Information

BackBy uses collected information to:

• Operate and maintain the platform.
• Monitor scheduled check-in times and trigger alerts if a check-in is missed.
• Send required transactional SMS, push notifications, and emails to you and your designated contacts.
• Coordinate safety notifications among designated contacts when an alert is triggered.
• Verify accounts, maintain legal records, and prevent fraud.
• Troubleshoot bugs and improve platform functionality.
• Comply with legal obligations.

BackBy does not sell your personal information or your Safety Contacts' personal information, nor do we share it for advertising or behavioral targeting purposes.

4. Communications and Third-Party Carrier Disclaimer

BackBy sends transactional communications related to account verification, activity check-ins, and safety notifications. These are not marketing messages. Delivery of notifications relies on third-party telecommunication networks; therefore, BackBy cannot guarantee the delivery, accuracy, or timeliness of any communication. Message and data rates may apply.

5. Safety Contact Notifications & Alert Workflows

When you designate a trusted Safety Contact, they may receive automated notifications if you fail to complete a scheduled check-in. Safety Contacts may opt out of receiving future notifications at any time. If a Safety Contact opts out, BackBy is not responsible for any subsequent failure to notify that individual regarding your safety status.

When an overdue alert is triggered:

• Coordination Among Safety Contacts: If you have designated more than one Safety Contact for an activity, BackBy may share the names, phone numbers, and email addresses of all designated Safety Contacts with one another. This allows contacts to communicate directly, verify whether anyone has heard from you, and coordinate any necessary outreach or escalation.
• Downstream Safety Disclosures: Safety Contacts who receive an overdue alert gain access to your activity information, including planned routes, turnaround times, start/end points, vehicle information, notes, and last known coordinates (if available). In the event of an overdue alert or suspected emergency, your designated Safety Contacts may, for your health, safety, and rescue, share these activity details with third parties outside of the designated Safety Contact group (such as family members, local emergency authorities, law enforcement, or search and rescue personnel). BackBy does not control and is not liable for disclosures made by your designated Safety Contacts.

6. Safety Contact Data Rights

If you have been designated as a Safety Contact by a BackBy user, BackBy holds limited personal information about you (your name and phone number, and/or email address) for the purpose of sending safety alerts and coordinating response efforts with other designated contacts. You may: (i) request to know what information BackBy holds about you; (ii) request correction of inaccurate information; or (iii) request deletion of your information. To submit a request, contact us at info@backby.app with “Safety Contact Privacy Request” in the subject line. If you request deletion, we will remove your information and notify the user who designated you. You may also opt out of receiving notifications at any time by replying STOP to any BackBy text message.

7. Sharing of Information

BackBy shares information only when necessary:

• Service Providers: With third-party processors (SMS/email providers, cloud hosting) that help us operate the platform. We require our service providers to process personal information only on our behalf and in accordance with our instructions, and to maintain appropriate security measures.
• Safety Contacts & Multi-Contact Coordination: With your designated Safety Contacts as part of the core safety alert functionality. If multiple Safety Contacts are assigned to an activity, we may share the contact information of all assigned Safety Contacts among each other to enable mutual coordination during an overdue alert.
• Emergency Responders: With Search and Rescue (SAR) teams, law enforcement, or medical personnel where we reasonably believe disclosure is necessary to protect the life or physical safety of an individual at imminent risk of serious harm or to assist in facilitating a rescue.
• Legal Compliance: To comply with legal process, court orders, or government requests.
• Business Transfers: In connection with a merger, acquisition, or sale of company assets.
• Mobile Messaging Privacy: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

8. Data Storage and Security

We implement reasonable safeguards, including encryption in transit and at rest, access controls, and regular logging to protect your data. While we strive to protect your information, no method of transmission over the internet is completely secure.

9. Data Breach Notification

In the event of a security breach involving personal information, BackBy will notify affected individuals in accordance with applicable law. For Colorado residents, notification will be provided within thirty (30) days of determining that a breach occurred that is reasonably likely to result in the misuse of personal information. Notification will be sent via email to the address associated with your account. We will also notify applicable regulatory authorities as required by law.

10. Data Retention

• Account Data: Retained while your account is active and for 90 days following account deletion to allow for account recovery.
• Activity Data (such as plans, routes, gear, party details): Retained for twelve (12) months following the activity date, then deleted or anonymized.
• Alert History: Retained for 24 months for safety and dispute resolution purposes, then deleted or anonymized.
• Safety Contact Data:Retained while the designating user's account is active and for 90 days following account deletion; deleted within 30 days of the contact's removal or the expiration of that 90-day period, whichever occurs first.
• Legal/Consent Records: Retained for three (3) years or as required by applicable law, whichever is longer.
• Support/Log Records: Retained for twenty-four (24) months for operational, security, and dispute resolution purposes, then deleted or anonymized.

Notwithstanding the foregoing retention periods, we may retain any information for a longer period when required by applicable law, legal hold, regulatory investigation, or pending or reasonably anticipated litigation. When we determine that information is no longer required for any of the purposes described in this section, we will delete or anonymize it.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from an individual under 18, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at info@backby.app.

12. Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the processing of your personal information. You may delete your account and associated data through the app's Account Settings. To submit a privacy request, please contact us at the address below with “Privacy Request” in the subject line. We may require information to verify your identity.

Colorado Residents (CPA). If you are a Colorado resident, you have the right to: (i) confirm whether we process your personal data; (ii) access your personal data; (iii) correct inaccuracies; (iv) delete your personal data; (v) obtain a portable copy of your data; and (vi) opt out of targeted advertising, the sale of personal data, or profiling. BackBy does not sell personal data or engage in targeted advertising. To exercise these rights or to appeal a denied request, contact us at info@backby.app with “Colorado Privacy Request” in the subject line.

California Residents (CCPA/CPRA). If you are a California resident, you have the right to: (i) know the categories and specific pieces of personal information we collect and the purposes for collection; (ii) request deletion of your personal information; (iii) opt out of the sale or sharing of your personal information (BackBy does not sell or share personal information for cross-context behavioral advertising); and (iv) not be discriminated against for exercising your rights. To submit a request, contact us at info@backby.app with “California Privacy Request” in the subject line.

13. International Users

If you access BackBy from outside the U.S., please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ.

14. Changes to This Policy

We may update this Privacy Policy periodically. If changes are material, we will require you to acknowledge the updated policy before continuing to use the service.

15. Contact Us

If you have questions about this Privacy Policy, please contact our support team at: info@backby.app