Privacy Policy

Last updated: September 30, 2026 · Policy version 2026.09.4

DashResQ (“DashResQ,” “we,” “us”) provides a personal emergency-response service through our mobile app and companion Apple Watch app. This policy explains what we collect, why, and your choices. Your safety and your privacy are both priorities.

1. Information we collect

Account information. When you sign up we collect your name and email address (or the identifier from Sign in with Apple, Google, or a phone number you verify). We do not receive your Apple or Google password.

Health and vitals data. With your permission, the Apple Watch app reads vitals from Apple Health (HealthKit) — heart rate, blood oxygen (SpO₂), heart-rate variability, and resting heart rate — to monitor your condition and detect a possible emergency. This data is processed to keep you safe and, during an emergency, may be shared as described below.

Location data. With your permission, we collect your device location to detect incidents, share your position with responders and emergency contacts during an SOS, and route help to you. You control location permission in your device settings.

Sharing your location with your circle. If you turn on location sharing for a circle, the people in it can see where you are on a map, the route you have taken, and how fast you are moving. That trail is kept for 72 hours — three days — and then permanently deleted. A paid plan extends how long your own history lasts, up to a month; it changes nothing about who can see you or what they see. Turning sharing off stops it immediately and does not remove you from anyone’s emergency path — if an incident is detected, your circle is still alerted. The one exception to turning it off is an under-18 account whose parent or guardian is keeping its sharing on (“If you are under 18”, below).

Checking on your vitals. An adult in your circle can ask for your current vitals — your heart rate and related readings from your watch. Whether they get an answer without you tapping is your standing choice, made per circle (“Let this circle check my vitals” on the join screen and in that circle’s settings). Where you have switched it on, the answer is immediate; everywhere else, each request waits for your yes. Nothing is switched on for you. Either way you are notified every time a check happens, there is no setting that turns that notification off, and every request is listed in your app for 72 hours, including the ones you refused. That list is never extended by a paid plan: a record of who has been checking on you is a protection, and we will not sell anybody a longer view of their own surveillance. It deliberately stores no vital values, only the fact that a check occurred.

If you are under 18. An account under 18, or one that has not confirmed a date of birth, is not shown to its circle. Nobody in the circle can see it on a map, and nobody can see its vitals without the young person themselves tapping to allow it, once, for that single request. The one exception, since 28 September 2026, is a parent or guardian on record: an adult who has confirmed themselves as the young person’s guardian by saying “I’m their parent or guardian” — on an invitation or in the circle — and whom the young person accepted, on their own phone, with that adult’s name in front of them. An invitation alone makes nobody a guardian. That adult alone can see their location, trips, readings and daily card, and gets an immediate answer when checking their vitals. The young person is told every time. Since 29 September 2026 a guardian can also keep the young person’s location sharing on in a circle they are both in: while it is kept on, the young person cannot switch it off there, leave that circle, make their location less exact, or withdraw location consent in the app, and the app always shows them that it is locked and by whom. It never switches sharing on, it ends when they turn 18 or the adult stops being their guardian, and it cannot stop them turning off location for DashResQ in their phone’s settings. No other member of the circle sees any of it, an account with no guardian on record is not shown to anyone, and an account that has not confirmed a date of birth cannot acquire a guardian at all. This is our reading of section 9(3) of India’s Digital Personal Data Protection Act, 2023 — monitoring by a verifiable guardian, for the child’s safety, and by nobody else.

Medical profile you provide. If you choose to add it: allergies, medications, conditions, blood type, date of birth, and insurance details, so responders are prepared. You control this and can edit or remove it anytime.

Emergency contacts. Names and phone numbers you add so we can notify them in an emergency.

What you send DashAid. DashAid is the assistant in the app. What you type or say to it, the readings it looks up to answer you, and any prescription or report you upload for it to read are sent to the AI providers named in section 3, to write the reply, turn your voice into text, search for guidance or read the document.

Device and usage information. Device model, app version, push-notification token, and diagnostic logs to operate and improve the service.

2. How we use your information

• Detect possible crashes or medical events and start a cancellable SOS.
• Share your live location, vitals, and medical profile with the responders, agents, hospital, and emergency contacts you have chosen, during an active emergency.
• Show your position, recent route and speed to the circle you chose, while you have sharing turned on.
• Show your current vitals to an adult in your circle who asks for them — without your tap only where you have allowed that circle to — and tell you that they did.
• Record how the app is used — a circle created, an invite accepted, a trip started or arrived, a check-in answered, a notification delivered, a field added to your medical vault — against your account, to see whether the safety features work. Never a location, a reading or a vault value; never for anyone under 18, except the record of an emergency escalation.
• Send you and your contacts alerts and notifications.
• Authenticate you and secure your account.
• Operate, maintain, troubleshoot, and improve the service.

We do not use your health, fitness, or location data for advertising, and we do not sell your personal data. Health data obtained through HealthKit is used only to provide the DashResQ safety features and is never used for marketing or shared with third parties for their own use.

3. When we share information

• During an emergency: with the responders, agents, hospital, and emergency contacts you’ve configured, so they can help you.
• Service providers: hosting and infrastructure vendors who process data on our behalf under contract (for example, cloud hosting).
• AI providers, when you use DashAid: what you send DashAid, and documents you upload for it to read, are processed by Anthropic, whose Claude models write DashAid’s replies, including the report after a doctor consultation, and read your documents. If you talk to DashAid instead of typing, your recording is turned into text, and its spoken replies into speech, by ElevenLabs. When DashAid searches its library of medical references for guidance that fits your question, the text of your question goes to Voyage AI, which does the search and ranks what it finds. Each processes it on our behalf: Anthropic’s terms for the service we use do not let it train on what you send, we have switched off ElevenLabs’ and Voyage AI’s use of it to improve their models, and none of it is used for advertising.
• Legal: if required by law, or to protect the safety of you or others.

We do not otherwise sell or rent your personal information.

4. HealthKit

DashResQ uses Apple HealthKit to read the vitals listed above, only with your explicit permission. Data read from HealthKit is used solely to provide DashResQ’s monitoring and emergency features. We do not use HealthKit data for advertising or data-mining, and we will not share it with third parties except as needed to respond to your emergency or as you direct. If you ask DashAid about your readings, the readings it needs to answer are sent with your question to Anthropic (section 3), to answer you and for nothing else. You can revoke access anytime in the Health app or your device settings.

5. Data retention and security

We keep your information for as long as your account is active or as needed to provide the service and meet legal obligations. We use industry-standard safeguards (encryption in transit, access controls) to protect it. No method of transmission or storage is 100% secure.

Two things are kept for 72 hours and no longer. Your location trail — the positions and speeds that draw your route on your circle’s map — is deleted 72 hours after it is recorded. The record of who checked your vitals is deleted on the same clock. Both are removed by an automatic sweep rather than on request, so “72 hours” is a property of the system and not a promise about our intentions. Data captured during an active emergency is retained separately, because an incident record that vanished overnight would be useless to the hospital treating you.

What a paid plan changes, and what it does not. A subscription extends how long your own location history is kept — a week on Plus, a month on Pro — and nothing else. It does not widen who can see you, what they see, or how often. The 72-hour floor applies to every account, paid or not, so the shortest answer to “how long do you keep my location” is never shorter than three days. The record of who checked your vitals stays at 72 hours on every plan and is not extendable.

What changed in version 2026.09.4. Two things widened, and every existing consent is being asked for again in the app because of them. We now name the two other companies that process what you send DashAid: ElevenLabs, when you talk to it instead of typing, and Voyage AI, which searches DashAid’s medical references for your question (section 3). We have switched off both companies’ use of it to improve their models. Everything version 2026.09.3 told you still holds, including a guardian’s lock on an under-18’s sharing and how someone becomes a young person’s guardian (sections 1 and 7).

A correction to version 2026.09.3. When version 2026.09.3 was first published, on September 29, 2026, it also said DashAid’s doctor consultation went through a second company, OpenRouter. It did not. The code that would have sent it there had been disconnected since July, and the consultation and the report after it are written by the same Anthropic models as the rest of DashAid. We corrected the wording the same day and deleted that code. The correction named fewer companies than before, so nobody was asked to agree again for it.

A correction to our previous notice. The policy published as version 2026.08.2 said your location trail was kept for 24 hours. The deletion job was in fact running at 48. For as long as that notice stood we kept your trail a day longer than we told you — no longer than that, and nowhere other than the same table the sweep empties, but longer than we said. The gap is closed: the number in this notice is now the only number the system has, and a test compares this page to the code rather than a comment asking someone to remember.

6. Your choices and rights

• Access, correct, or delete your data from within the app or by contacting us.
• Turn off Health, Location, or Notification permissions in your device settings (some safety features will stop working).
• Delete your account, which removes your personal data subject to legal retention requirements.
• Depending on where you live, you may have additional rights (access, portability, erasure, objection). Contact us to exercise them.

7. Children

DashResQ is not directed to children. In India, the Digital Personal Data Protection Act, 2023 treats anyone under 18 as a child, and we do not knowingly process a child’s personal data without the verifiable consent of a parent or lawful guardian. Elsewhere the threshold is the minimum age set by local law. We do not track a child’s behaviour for any purpose, and we never show targeted advertising to anyone.

Concretely: an account under 18, or an account that has not confirmed a date of birth, is never displayed to its circle, never continuously located for its circle, and never scored or profiled for its circle. If someone in the circle asks to see their vitals, nothing is disclosed unless the young person taps to allow that specific request, and an allowance covers one look rather than granting standing access. The single exception is a parent or guardian who has said they are the young person’s parent or guardian and whom the young person accepted (section 1, “If you are under 18”): that adult sees the young person’s location, trips, readings and daily card and can check their vitals, and the young person is told each time. That adult can also keep the young person’s location sharing on in a circle they share, which the young person always sees, with the adult’s name. A guardian can step back at any time, one child at a time, from the circle screen. These rules are enforced by the service itself, not by a preference that could be switched off.

If you believe a child has used DashResQ without that consent, write to us and we will remove the data.

8. If you are in India

This section applies in addition to everything above and reflects the Digital Personal Data Protection Act, 2023 (“DPDP Act”). Where it conflicts with anything else in this policy, this section governs for users in India.

Who is responsible. The Data Fiduciary for your personal data is Shriyansh Trivedi, operating DashResQ. That is the person who decides why and how your data is processed, and who is accountable for it.

Notice and consent. We ask for your consent before processing your data, and we ask separately for each purpose — location sharing with your circle, trip telemetry, vitals, your medical vault, and emergency dispatch are each their own decision. Agreeing to one does not agree you to the others. Every consent is recorded against the version of this policy that was current at the time, which is the version printed at the top of this page.

When this policy changes. When the version at the top of this page changes, the app shows you what changed — the old promise beside the new behaviour — and asks again. Until you answer, your circle cannot see where you are: not on the map, not in place alerts and not in trip arrivals. Anything that gets you help in an emergency keeps working whatever you answer. A change that describes how a feature works — which company processes what you say to DashAid, for example — applies whenever you use that feature. Nobody is opted in by an update.

Withdrawing consent. You can withdraw any consent from inside the app, in the same place you gave it, in the same number of taps. Withdrawal takes effect immediately and stops the corresponding data flow; it does not affect the lawfulness of processing that already happened. Some safety features stop working when their consent is withdrawn, and the app tells you which ones before you confirm. The one exception is location for an under-18 account: the young person cannot withdraw it in the app while a parent or guardian is keeping their sharing on, and the app shows who is.

Your rights. You may ask us for a summary of the personal data we process about you and the processing activities involved, ask us to correct or complete inaccurate data, ask us to erase data we no longer need, and raise a grievance. You may also nominate another person to exercise these rights on your behalf if you die or become incapable of exercising them yourself — for an emergency app this is worth doing, and you can arrange it by writing to the address below.

Grievance redressal. If you are unhappy with how we have handled your data or your request, contact our Grievance Officer:

Shriyansh Trivedi, Grievance Officer, DashResQ
grievance@dashresq.com

We will acknowledge your grievance within 72 hours and aim to resolve it within 30 days. A postal address for service is available on request. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Where your data is processed. Our servers and infrastructure vendors may process your data outside India. We use them under contract and only for the purposes described in this policy.

9. Not a medical device

DashResQ is not a medical device and does not provide medical advice, diagnosis, or treatment, and it does not replace official emergency services. Always contact your local emergency number (112 / 911 / 108) in an emergency.

10. Changes

We may update this policy. When we do, we post the new version here and change both the date and the policy version at the top. If a change affects why or how we process data you have already consented to, your earlier consent does not carry over — we ask you again under the new version rather than assuming.

11. Contact

Questions or requests: privacy@dashresq.com
DashResQ — Shriyansh Trivedi