Consumer Health Data Privacy Policy

What Consumer Health Data We May Collect

• That a person in your family lives with dementia. In the StepSafe app you choose who will wear each StepSafe: a child, an adult living with dementia, or someone else. “Adult living with dementia” is health information. It changes the app's wording and suggested alerts. (A real photo and your “What to tell 911” notes, which may mention medications, stay on your phone and never reach us.)
• What you type on the “If someone finds them” card. Every field is optional. It can include how the person communicates, what calms or upsets them, medical notes and allergies, and a diagnosis if you choose to add one. It is stored on StepSafe's servers in Canada. The people on your account can read it. Anyone you send a live location link to sees it only while lost mode is on, and only if you switched on “Show on live links during a search”. To delete it, clear every field and save, or delete your account.
• Precise location of the person who wears a StepSafe. Location is the service itself. A location history could show a visit to a doctor or clinic. We do not use location to work out anything about anyone's health.
• Elopement risk quiz answers on /assessment, which include whether a child has a diagnosis such as autism, ADHD or Down syndrome and whether they have wandered. We store the answers without your name, email or IP address, so they are not linked to you. If you ask for the toolkit by email, we send it but do not attach your email to your answers.
• What you choose to tell us, for example in a support email, the device request form on our help page, or a comment on our blog, such as that your child is autistic.
• A guess about which topic brought you here. If you arrive from a page or campaign about autism or dementia, a cookie on your browser (ss_aud) notes that for 30 days so our pages show a fitting headline, and it is recorded with shop events and orders. It says which page you came from, not anything about your health.

Where It Comes From

• From you: what you enter in the app, our forms, our quiz and your emails.
• From the StepSafe device you activate: its locations and battery level.
• From your browser: the ss_aud cookie described above.

Why We Use It

• To provide the StepSafe service you asked for: locations, alerts, and wording and suggested alerts that fit the person (for example night watch for an adult living with dementia).
• To show your card to the people helping in a search, as you chose.
• To show you your quiz result, and to count anonymous results so we can improve our safety resources.
• To answer you and to help a family who asked us for help.
• To choose which headline our pages show.

We collect consumer health data only when it is needed to provide something you asked for, or with your consent. We do not use it for advertising, and we never set up a geofence around a health care provider to track or advertise to anyone.

Who We Share It With

Only companies that help run our service, and only to run it:

• our database and website hosting providers (Supabase, Vercel);
• the push notification services that deliver the app's alerts to your phone (Expo, Apple, Google); an alert names the person and what happened;
• our email providers (Zoho Mail, Resend), to send you emails you asked for;
• the services that turn Wi-Fi and cell signals into a position, provide the device's mobile network, show maps and weather, and suggest water and roads near your zones (Google, 1NCE, your phone's map service, Open-Meteo, OpenStreetMap map services and Mapbox); they receive positions or areas, never the person type or the card;
• our payment processor, for orders (Stripe; it receives order details, not health information).

The person you send a live location link to is not a company, but they see the card during a search if you switched that on.

The list of companies is in our Privacy Policy. We would ask for your separate consent before sharing consumer health data with anyone else, unless the law requires us to (for example a valid court order).

The Meta Pixel runs only on our shop, cart and product pages, never on the home page, our articles, the quiz, our videos or any page about a condition, wandering or dementia. If the ss_aud cookie says you came from a page about autism or dementia, the Meta Pixel does not run at all. We never send Google or Meta quiz answers, the ss_aud guess, the person type, the card or anything else about the person who wears a StepSafe. If you accept cookies, Google Analytics counts visits to all our pages, including the address of an article you read. We do not treat reading an article as health data, but if you would rather Google did not see it, decline cookies or use “Your privacy choices” in the footer.

We Do Not Sell It

We do not sell consumer health data, and we never will without your separate, signed authorization, as the law requires. We have no plans to ask.

Your Rights

• Access: to know whether we collect, share or sell your consumer health data, to see it, and to get a list of every third party and affiliate we shared it with (and how to contact them).
• Deletion: to have it deleted, from our systems and from our processors' systems, including archives and backups as they cycle out.
• Withdraw consent: to withdraw any consent you gave us to collect or share it.

How to use them:

• In the StepSafe app: change who a person is, clear the card, download your data (Settings, Account details, Download my data), delete location history, or delete your account, which deletes everything about your family. See how to delete your account.
• By email: write to support@stepsafetech.com with “Health data request” in the subject, from the email address you use with us. We may ask you to confirm it is you, and you can use an authorized agent.

We answer within 45 days. If we need longer, we will tell you within those 45 days, and we never take more than 45 more. We will not charge you or treat you differently for using these rights.

Appeals

If we turn down your request, you can appeal by replying with “Appeal” in the subject line. Someone who did not make the first decision will review it and answer in writing within 45 days, explaining what we did and why. If you are not satisfied, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint (opens in a new tab), or the Attorney General of the state where you live.

Changes and Contact

If we change this policy, the date at the top changes. If a change would let us use or share consumer health data in a new way, we will ask for your consent first. Questions: support@stepsafetech.com, or write to StepSafe Technologies Inc., Mississauga, Ontario, Canada.