Privacy Policy

Sara is a Smart Automated Rescue Assistant developed to enhance personal safety and support emergency coordination in real-time situations. The platform is designed to help users quickly communicate distress signals, share relevant information with trusted contacts, and facilitate timely response during high-risk or urgent events. By accessing or using the Sara mobile application or our website, you acknowledge that certain personal information may be collected, used, stored, and processed in accordance with this Privacy Policy and applicable data protection laws. Your continued use of the platform signifies your understanding of, and agreement to, the practices described herein. This Privacy Policy is provided to promote transparency regarding how we handle personal data. It does not constitute legal advice and should not be interpreted as such. If you have questions about your rights, your obligations, or how this Policy applies to your specific circumstances, we encourage you to contact us directly or seek independent legal guidance where appropriate.

Data Controller

Aeritzon Ltd is the Data Controller responsible for determining the purposes and means of processing personal data collected through the Sara mobile application (“Sara”) and the Aeritzon website. We process personal data in accordance with applicable data protection laws, including the Nigeria Data Protection Act (NDPA) and, where applicable, the General Data Protection Regulation (GDPR). Aeritzon Ltd is a duly registered company (8990250) with its registered address at Lane 1, Alapo Quarters, Ido Ekiti, Ekiti State, Nigeria. For any inquiries relating to this Privacy Policy or the processing of personal data, you may contact us by email at support@aeritzon.com or by telephone at +234 703 492 2535 or +1 (226) 507-9301.Aeritzon Ltd remains responsible for ensuring that personal data is processed lawfully, securely, and transparently, including where trusted third-party service providers are used. Users may also have the right to lodge complaints with a relevant data protection authority in their jurisdiction.

This Privacy Policy applies to all interactions with the Sara platform and related services. It governs the collection and processing of personal data during account registration and the configuration of in-app settings within the Sara mobile application. It also applies to information processed during emergency events, including the handling of real-time location data when an alert is activated. In addition, this Policy covers personal data collected through visits to our website and any inquiries or communications submitted through it.

We collect only the minimum amount of personal data necessary to operate Sara safely, reliably, and effectively.

A. Information you provide

When you create an account, we may collect information that you provide directly to us, including your full name and email address. We may also request your phone number, which is optional but recommended to support emergency contact and coordination features. Providing accurate and complete information helps ensure that Sara functions as intended. If certain required information is not provided, some core features of the application may be limited or unavailable.

B. Location data

Sara processes real-time location data only when you activate an emergency request and you have granted location permission on your device. Location data is used to identify your location during emergencies and support coordination of assistance.

We do not continuously track you in the background outside emergency activation.

Location permissions can be disabled at any time through your device settings. Disabling location access may limit emergency functionality.

C. Automatically collected technical data

When you use the Sara mobile application or visit our website, certain technical information may be collected automatically through the infrastructure services that support our platform, including services provided by Firebase and Google. This information is collected as part of standard system operations and is necessary to ensure that the application functions securely and reliably across different devices and environments. The technical data collected may include information such as your device model, operating system version, network-related information (including IP address), app usage events for non-advertising analytics purposes, unique app instance identifiers, as well as crash reports and performance diagnostics. This data helps us understand how the application performs under real-world conditions, identify technical issues, improve stability, and enhance overall service quality. We use this information solely for operational, security, and performance-related purposes. It is not used for advertising, behavioral profiling, cross-app tracking, or personalized marketing. Any analytics collected are intended to support system integrity, reliability, and user experience—not to build advertising profiles or track users for commercial targeting.

D. Information we do not collect

Sara is designed with strict data-minimization principles and does not request, collect, process, store, transmit, or retain sensitive personal information such as medical history, clinical records, blood type details, allergy information, financial or payment information (including credit or debit card numbers and banking details), or biometric identifiers (including fingerprints, facial recognition templates, iris scans, or voiceprints). The functionality of the application does not depend on, require, or rely upon the collection or processing of these categories of data.

Sara collects only limited categories of information necessary to operate its core functionality. This includes information that users voluntarily provide during account creation or when configuring in-app settings (“direct user input”). In situations where a user activates an emergency feature, Sara may process real-time location data and contextual event details strictly for the purpose of facilitating the emergency response workflow. In addition, Sara utilizes essential infrastructure services to maintain system reliability, security, and performance. These services may generate technical diagnostics and operational analytics, such as crash reports, error logs, and performance metrics, which are used solely for troubleshooting, stability monitoring, and service improvement. Sara does not incorporate advertising trackers, behavioral advertising technologies, or third-party marketing analytics frameworks designed to profile users for advertising purposes.

We processes personal data solely for legitimate, clearly defined, and operationally necessary purposes. Specifically, personal data is processed to deliver emergency assistance and coordination features; to enable account creation, authentication, and basic user support functions; to maintain platform integrity, security, and misuse prevention mechanisms; to monitor system reliability, troubleshoot technical issues, and improve overall performance; and to comply with applicable legal, regulatory, and lawful enforcement obligations where required. Personal data is not sold, rented, licensed, or otherwise monetized. Sara does not share personal information for third-party marketing purposes, does not engage in targeted advertising practices, and does not use personal data for behavioral advertising, commercial profiling, or cross-context tracking.

Where applicable under the Nigeria Data Protection Act (NDPA) and the General Data Protection Regulation (GDPR), Sara processes personal data on clearly defined lawful bases. These include the data subject’s consent, such as when a user completes registration, grants device permissions, or activates emergency features within the application. In emergency contexts, processing may also be based on the protection of vital interests, particularly where it is necessary to safeguard the life, health, or physical safety of the user or another individual. Sara may further rely on legitimate interests where processing is necessary to ensure system security, maintain platform integrity, prevent misuse, and support operational reliability, provided that such interests are not overridden by the fundamental rights and freedoms of the data subject. In addition, personal data may be processed where required to comply with applicable legal or regulatory obligations imposed by competent authorities.

During an emergency activation, we may share relevant information with emergency responders, law enforcement, or medical services only when needed to protect life, respond to the event, or prevent serious harm.

We rely on established and reputable infrastructure providers to support the operation of the Sara application and its associated website. These service providers supply essential technical services, including mapping and geolocation functionality through Google Maps Platform; user authentication and account management through Firebase Authentication; secure hosting and backend infrastructure through Firebase Cloud Services; usage analytics, crash diagnostics, and performance monitoring through Firebase Analytics; and secure application build and deployment processes through Expo Application Services (EAS). Firebase Analytics collects event-based technical data such as application launches, feature interactions, device type information, performance metrics, and crash reports. This information is processed strictly for operational purposes, including maintaining system reliability, enhancing security, diagnosing technical issues, and improving overall user experience. The data collected through these services is not used for advertising, behavioral profiling, cross-application tracking, or personalized marketing activities. We have carefully selected these providers based on their strong security practices, compliance with relevant data protection regulations, and their commitment to safeguarding user privacy. We maintain data processing agreements with all third-party service providers to ensure that they adhere to strict confidentiality and security standards when handling any personal data that may be processed as part of their services.

Because we use global cloud providers, personal data may be processed on servers outside Nigeria. Where required, we take steps to ensure transfers are protected using appropriate safeguards (including provider security terms and relevant legal mechanisms).

We retain personal data only for as long as it is necessary to fulfill the specific purposes outlined in this Policy, including ensuring legal compliance, maintaining system integrity, supporting safety-related functions, and preserving operational reliability. Retention periods are determined based on the nature of the data, the purpose for which it was collected, and applicable legal or regulatory requirements. Account-related information is retained for the duration that a user’s account remains active and operational. Emergency event data is retained only for the period reasonably necessary to support safety coordination, provide user support, enable auditability where required, and address any related legal or compliance obligations. Technical diagnostics data, including crash reports and performance metrics, is retained for troubleshooting, security monitoring, and system reliability analysis. Upon account deletion, personal data associated with the account is removed from active production systems. Limited residual copies may remain in secure, encrypted backup systems for a defined retention cycle, after which such data is permanently deleted or irreversibly anonymized in accordance with standard data lifecycle management practices.

We implement appropriate technical and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission using HTTPS and TLS protocols, role-based access controls, secure cloud infrastructure configuration, and established internal security practices aligned with industry standards. While no system or method of transmission over the internet can guarantee absolute security, Sara applies commercially reasonable and industry-recognized security measures to mitigate risk and protect user information. Access to personal data within Aeritzon is strictly limited to authorized personnel who require such access for legitimate operational purposes. Access is granted based on defined roles and responsibilities and is subject to internal controls designed to prevent misuse, unauthorized disclosure, or improper handling of personal information.

Depending on your jurisdiction and the data protection laws applicable to you, you may be entitled to certain rights in relation to your personal data. These rights may include the right to request access to the personal data we hold about you; to request correction of inaccurate, incomplete, or outdated information; to request deletion of your account and associated personal data, subject to applicable legal or operational retention requirements; and to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out prior to withdrawal. You may also have the right to request restriction of processing in specific circumstances, to object to certain types of processing where permitted by law, and to lodge a complaint with a competent data protection authority if you believe your rights have been infringed. Requests to exercise any applicable data protection rights may be submitted by contacting us at the designated privacy contact email address support@aeritzon.com. We may take reasonable steps to verify your identity before responding to such requests, in order to protect your personal data and ensure compliance with applicable legal requirements. We will respond to valid requests in accordance with applicable data protection laws and within a reasonable timeframe.

Sara is not intended for use by children under the age of 13, or the minimum legal age required to consent to data processing in the user’s jurisdiction (where that age is higher than 13). We do not knowingly solicit, collect, or process personal data from children below the applicable minimum age. Because Sara is designed for emergency coordination and real-time safety assistance, it may involve the processing of location data and contact information during emergency activation. For this reason, we require users to meet the applicable minimum age requirement before creating an account or using the service independently. If we become aware that personal data has been collected from a child under the applicable minimum age without verified parental or legal guardian consent, we will take immediate steps to: Suspend or restrict the associated account; Delete the personal data from active systems; Remove the information from backup storage within a reasonable period, subject to technical limitations; and Prevent further collection of data from the affected account. Parents or legal guardians who believe that a child has provided personal data to Sara without authorization may contact us at support@aeritzon.com . Upon verification of the request, we will investigate promptly and take appropriate corrective action. In jurisdictions where parental consent is required for minors above 13 but below the legal digital consent age (for example, under certain GDPR or NDPA provisions), we may implement additional safeguards, including parental authorization mechanisms, age confirmation steps, or account limitations. We do not use Sara to knowingly target, profile, advertise to, or track children. Sara does not contain behavioral advertising, third-party ad networks, or commercial profiling tools that would intentionally process children’s data. If future versions of Sara introduce features specifically designed for minors (for example, supervised safety tools), we will implement additional age-appropriate privacy safeguards consistent with applicable child protection and data protection laws.

Our website may use essential cookies required for basic functionality and security.

The Sara mobile application uses Firebase Analytics to collect anonymized and aggregated performance metrics, crash reports, and feature usage statistics.

We do not use advertising cookies, mobile advertising identifiers for marketing purposes, cross-app tracking technologies, or third-party ad networks.

We may update this Privacy Policy to reflect new features, legal requirements, or security improvements. Material changes will be communicated via in-app notice and/or website updates. The latest version will always be available in the app and on aeritzon.com.

If you have questions about this Privacy Policy, contact us:

Email: support@aeritzon.com
Phone: +234 703 492 2535 | +1 (226) 507-9301