Privacy policy

Operator and scope

Trackit LLC develops and operates Tsunami Escape. This policy describes the application features and these support pages. For privacy questions or requests concerning your data, contact trackit@trackitpr.com.

Evacuation-sector browsing is public: it does not require signing in or verifying a phone number with an OTP. The information sent depends on the features you use and the permissions you grant.

Location, searches and maps

With your permission, the app uses precise device location to locate you on the map, check zones and guide navigation. You may deny or revoke location permission in system settings; features requiring GPS will be limited.

Address searches and coordinates used for reverse searches or zone checks may be sent to our API. When calculating a route, origin and destination coordinates and travel mode are sent to Mapbox. Mapping services receive map requests, network information and technical data needed to operate.

The Mapbox SDK includes usage and location telemetry under its own practices. The information button at the top right of the maps provides Mapbox credits and telemetry choices. Disabling telemetry does not remove requests needed to load maps or calculate routes. This is separate from Trackit notification registration. See the Mapbox privacy information linked below.

Phone verification in earlier versions

If you used SMS verification in an earlier version, the server may retain your phone number, access identity, verification records and sessions. Twilio processes delivery of SMS codes. The current public sector list no longer requires this verification; this does not automatically remove earlier records. You can ask about these records or request their deletion through our privacy contact email.

Optional notifications

If you enable alerts, we register an installation identifier, Expo push token, platform, language and app version. The server retains a hash of the installation secret to protect this registration and technical delivery-attempt records. This registration does not include your GPS location or contact list.

Expo and Apple or Google notification services process delivery. You can turn alerts off in Settings or revoke system permission. Turning them off in the app requests disabling the server registration when connected; it does not delete its history.

Saved places, contacts and SOS

Saved places, preferences, selected emergency contacts and downloaded offline data are stored on the device. The app does not upload your contact list to our API. Contacts permission is used to select contacts when you request that feature.

Using a saved place to search, check a zone or calculate a route may send its address or coordinates to the services described above. Using SOS or sharing prepares a location message for the messaging or sharing app you choose. You decide whether to send it; the recipient and that service receive what you share.

Operations, diagnostics and providers

The API hosted on Vercel and Expo update and notification services may process IP addresses, timestamps, requests and technical metadata. When Sentry diagnostics are enabled, error and performance reports may include technical device information, app version and failure context.

These providers process information to deliver their services and under their own terms. If you email support, we receive your email address and the content you choose to send. Do not send passwords, OTP codes, private keys or unnecessary sensitive information.

Retention and deletion

You can delete saved places, selected contacts and the downloaded map using app controls, and manage permissions in system settings. Server records are separate from local data.

There is currently no scheduled automatic deletion period for server notification-registration and delivery records. Disabling alerts or uninstalling the app does not guarantee their deletion. To request information, correction or deletion of data associated with your use, contact trackit@trackitpr.com. Identification of the record and any retention needed for security or applicable obligations will be assessed when handling the request.

Providers may retain operational records under their own policies. This page does not promise a deletion deadline those services do not guarantee.

Security and changes

Communication with configured services uses HTTPS. No system can guarantee absolute security or availability. Changes to this policy will be published here so you can consult the current version.

Text last reviewed: October 16, 2026.

Provider information