Privacy policy
App 72h – Prepared Family (Czech: 72h – Rodinná připravenost). This website uses no cookies and no analytics. This is a translation – in case of doubt the Czech version prevails.
Controller: Jan Ježek, company ID (IČO) 86695207, registered office Za Střelnicí 950, 533 04 Sezemice, Czech Republic
Contact: [email protected]
Effective from: 1 November 2026
1. In short
- The app works without an account. Supplies, meeting points, contacts, the checklist, downloaded maps and your location for the arrow to the meeting point stay on your phone only.
- Family sharing is optional. When you turn it on, family data is encrypted before it is sent, with a key only your family has. We cannot read it – we only see that a record exists, how large it is and when it changed.
- We do not sell data, do not use it for advertising or profiling, and the app contains no analytics or advertising tools.
2. What stays on your phone only
| Data | Purpose |
|---|---|
| Supplies, storage locations, emergency bags, checklist | overview and how many days you are covered |
| Meeting points, family contacts, message for children | navigation and the kids screen |
| GPS location and compass | blue dot on the map and arrow to the meeting point; never sent anywhere |
| Downloaded maps | map without internet |
| Anonymous device identifier | a random number created by the app (not a manufacturer identifier), see below |
You delete this data by uninstalling the app.
3. What we process on the server
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Anonymous device identifier and fingerprint of the downloaded map area – stored only as one-way fingerprints with a random key valid for one month | monthly map download limit without an account | legitimate interest (protecting the server from abuse) | until the end of the calendar month, then the key is deleted too, so the records cannot be linked to anything |
| Bounds of the map rectangle you download | cutting the map of your area | performance of a contract | the extract stays on the server at most 1 hour; only a one-way fingerprint is stored with your device (see above) |
| sign-in with a code or via Apple / Google; members of your family see it too | performance of a contract | until the account is deleted | |
| Sign-in code | verifying the e-mail | performance of a contract | only as a fingerprint (hash), at most 1 day |
| Your Apple or Google account identifier (only if you sign in with them) | linking Apple / Google sign-in to your account | performance of a contract | until the account is deleted |
| Signed-in devices (system type, created and last used) | keeping you signed in | performance of a contract | until sign-out, 365 days of inactivity or account deletion |
| Family membership (role, pending / active) | running the family group | performance of a contract | until you leave the family or delete the account |
| Encrypted family data (contacts, supplies, storage locations, meeting points) | sync between the family's phones | performance of a contract | until the record is deleted; all of it when the family ends |
| Server error logs (time and type of error – no IP addresses, no content, no location; requests are not logged) | operation and security | legitimate interest | continuously overwritten (at most tens of MB) |
Backups: we back up the database every night (14 days) and the whole server daily (7 days). Deleted data may therefore stay in backups for at most 14 days, then it disappears.
4. Who else processes data
| Recipient | What and why | Where |
|---|---|---|
| Hetzner Online GmbH | running our server | data centre in Nuremberg (Germany, EU) |
| Cloudflare, Inc. | secure connection to the server, DNS, forwarding e-mails to info@, hosting this website | USA – transfer under the EU-US Data Privacy Framework and standard contractual clauses |
| Brevo (Sendinblue SAS) | sending the e-mail with the sign-in code | France, EU |
| Apple / Google | sign-in (optional): if you choose to sign in with Apple or Google, they verify you and give us your e-mail and account identifier. With Apple you can hide your e-mail – we then get a relay address that forwards e-mails. | under Apple's and Google's terms |
| Apple / Google | address search: when you type an address (meeting point, contact, map area), the phone's system turns it into a location using Apple (iOS) or Google (Android) | under Apple's and Google's terms |
| RevenueCat, Inc. | every time the app starts: checking whether you have Plus, and verifying a purchase or restore. It receives a random identifier (the anonymous device ID, or your account ID if signed in), device details needed for the check (e.g. system and app version) and your Plus purchase history from the App Store / Google Play (product, purchase and expiry dates). It never receives your supplies, places or location. It does not see payment details – those stay with Apple / Google. | USA – transfer under the EU-US Data Privacy Framework and standard contractual clauses |
| Apple App Store / Google Play | downloading the app and paying for Plus | under the stores' terms |
Map data: © OpenStreetMap contributors (ODbL), processed by Protomaps. No data about you is sent to them when you download a map – our server prepares the extract.
5. Children and family
- An adult creates the account and the family group; for children under 15 the parent decides.
- A new family member must be approved by the family admin. A removed member immediately loses access to the family data on the server.
- The app must not be used for covert tracking.
- You can also enter data about other people (e.g. a grandparent's contact or your children's names). It stays on your phone; when you share with your family it is sent only encrypted and we cannot read it. Enter only what the person would agree to.
- Because we cannot see the content of family data, we cannot search it or hand it over; requests about it are handled directly in the app (edit, delete, leave the family).
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and to object. You can lodge a complaint with the Czech data protection authority (Úřad pro ochranu osobních údajů, www.uoou.cz) or with the authority in your country.
- View / download your data on the server: Family → Share with family → My data on the server.
- Delete the account: Family → Share with family → Delete account. Deletes the account, signed-in devices and membership; if you are the last family member, all family data is deleted too.
- Delete the account without the app: write from your account's e-mail to [email protected] with the subject "Delete account". We delete it within 30 days, to the same extent as in the app.
- Other requests: [email protected].
7. Notice
72h is an independent preparedness aid, not an official warning system, and does not represent any government body. In an emergency call 112. Please report security problems or vulnerabilities to [email protected].