Last updated: 26 October 2026
Veilleo is a personal safety app: it lets you warn your people when something goes wrong, share your location with their consent, and be warned about danger zones. It therefore processes location data, which we protect with particular care. This policy explains what data we process, why, for how long, and what your rights are.
1. Who is responsible for your data?
SantéConsult, SAS with a share capital of €100, RCS Gap 931 635 502, 996 Route de Gap – Lieudit Berne, 05000 La Freissinouse (France). Contact about your data: [email protected].
When a company or organisation provides Veilleo to its employees or members (Business plan), it is responsible for the processing it decides (for example following its team), and SantéConsult acts on its behalf as a processor, under a contract that complies with Article 28 of the GDPR.
2. Our principles
- No hidden tracking. Your location is only sent to your people during an alert, a danger zone, a location request you accept, or if you chose automatic answers yourself.
- Only your last known location. We keep no history of your movements, except during an alert (the alert's trail, so that you can be helped).
- Your consent first. Joining someone's circle or a group, sharing your location, using background location or the microphone: all of this requires your explicit consent, which you can withdraw at any time.
- No selling, no advertising. Your data is never sold, rented or used for advertising.
3. The data we process
| Data | Why | Legal basis |
|---|---|---|
| Email address | Create and secure your account (sign-in by link or code) | Performance of the contract |
| First and last name, mobile number | Identify you in alerts; let your people invite you by your number | Performance of the contract |
| Last known location (latitude, longitude, accuracy, time) | Send your location with an alert, answer a location request, warn you of a nearby danger zone | Your consent (location) and performance of the contract |
| Locations during an alert | Let your people find you while the alert is in progress | Your consent; your vital interests |
| Alerts (SOS, Warn, timer, lost contact) and their resolution | Warn your people and follow the alert | Performance of the contract; your vital interests |
| Voice recordings (from the app or by pressing the connected button twice), with the server's time, the location and a digital fingerprint (SHA-256) of the file | Send a message or the situation to your people, at your request; keep evidence that the message was not altered | Your consent (microphone); legitimate interest in preserving evidence (establishment, exercise or defence of legal claims) |
| Location requests and answers | Let you ask someone's location and answer such requests | Performance of the contract; consent of the person located |
| Emergency text without internet (option, Android): numbers of your emergency contacts and people kept on the phone, text sent from your number with your location | Warn your people in a dead zone, even with the phone locked | Your consent (turned on in Settings and Android permission); your vital interests |
| Danger zones you report and your answers ("safe", "need help") | Warn people nearby and organise mutual help | Legitimate interest (safety of people) |
| Invitations (last 9 digits of the invited number) | Link an invited person to your circle when they sign up | Performance of the contract |
| Emergency contacts (name, phone) you enter | Send them your alerts (SMS without network, notifications if they have the app) | Performance of the contract |
| Notification token, language, app version | Send you notifications in your language; technical support | Performance of the contract; legitimate interest |
Your address book is never sent to our servers: it is read on your phone, only when you open it to choose whom to invite. Only the numbers you choose to invite are sent.
People you add (emergency contacts, invitations): you agree to inform them and to add only people who accept it.
Veilleo does not ask for any health data. Avoid sharing health information in voice messages unless it helps your safety.
4. Background location
If you turn protection on or choose sharing "at any time", Veilleo uses your location even when the app is closed or the phone is locked, to:
- send your location at once if you raise an alert (including with a connected button);
- warn you if you enter a danger zone;
- alert your people if your phone stops checking in ("lost contact" option).
A permanent notification shows that protection is on. You can turn it off at any time in the app or in the phone settings.
5. Who receives your data?
- Your people and the members of your groups, only in the cases described above (alerts, shared locations, recordings).
- Anyone using Veilleo near a danger zone you report: they see the zone (title, instructions, perimeter), never your identity or your location.
- Our technical providers, acting on our instructions:
| Provider | Role | Data location |
|---|---|---|
| Supabase | Hosting of the database, accounts, files and server functions | European Union (Ireland) |
| Expo (650 Industries) | Routing of notifications | United States |
| Google (Firebase Cloud Messaging) / Apple (APNs) | Delivery of notifications on Android / iPhone | United States |
| Brevo | Sending sign-in emails | European Union (France) |
| OpenFreeMap | Base maps (receives the IP address and the area shown, not your identity) | European Union |
| FOSSGIS (OpenStreetMap router) | Computing the fastest way out of a danger zone (receives coordinates, without identity) | Germany |
| The phone's geocoding service (Google or Apple) | Showing the address of a location | Depending on the manufacturer |
Transfers outside the European Union are covered by the European Commission's standard contractual clauses or by the EU–US Data Privacy Framework.
We may disclose data to authorities when the law requires it.
6. How long do we keep your data?
| Data | Duration |
|---|---|
| Account and profile | As long as the account exists; deleted within 30 days after the account is deleted |
| Last known location | Replaced at each update; deleted with the account |
| Alerts and alert locations | 12 months after the end of the alert |
| Voice recordings | 90 days, then deleted automatically. "Remove from this phone" does not delete them from the server, nor does deleting the account: they are kept until the end of the 90 days, no longer linked to the account (see § 8) |
| Location requests | 30 days |
| Danger zones and answers | 30 days after the zone ends |
| Invitations | 6 months if not accepted |
| Technical backups | Erased by rotation within 30 days at most |
7. Security
All exchanges are encrypted (HTTPS/TLS). Access to data is partitioned by security rules at database level: each person only sees what the person concerned agreed to share. Voice recordings are stored in a private space, reachable only through temporary links.
8. Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection, the right to withdraw your consent at any time, and the right to give instructions about your data after your death.
- Delete your account: directly in the app (Settings → Delete my account). All your data is erased, except voice recordings, which are kept until the end of their 90 days (see below).
- Voice recordings: they may serve as evidence, especially in cases of violence. So that someone else who took your phone cannot destroy them, they cannot be deleted from the app; those made with the connected button do not show in it, for discretion. You can ask for them to be erased before 90 days by writing to [email protected]: we check your identity before acting on it (GDPR art. 17(3)(e)).
- Withdraw a consent: leave a group or circle, change the location sharing mode, turn protection off, or remove location or microphone access in the phone settings.
- Any other request: [email protected]. We answer within one month.
You may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of your country of residence.
9. Minors
Veilleo is intended for people aged 15 and over. A minor under 15 may only use it with the consent of the holder of parental authority.
10. Changes
We may update this policy. In case of a significant change, we will tell you in the app before it takes effect.