Privacy Policy

RezenOne Safety Technologies LLC ("RezenOne", "we", "us", or "our") operates the RezenOne Safety Platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information and your child's information when you use our Service. We take the privacy and security of children's data extremely seriously. This policy is written in compliance with the Children's Online Privacy Protection Act (COPPA), the California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy laws.

We collect the following categories of information: **Parent/Guardian Account Information:** • Full name • Email address • Alert email address (for GPS notifications) • Password (stored encrypted, never in plain text) • Account creation date and login activity **Child Profile Information (provided by parent/guardian only):** • Child's first name • Age/date of birth • Photograph • Medical conditions and diagnoses • Medications and allergies • Blood type • Approach instructions (do's and don'ts) • 30-second guidance video for first responders • Emergency contact information **Technical Information (collected automatically):** • IP address (for security and GPS alert features) • Browser type and device information • NFC tag scan events (timestamp, approximate location if shared) • Usage data (pages visited, features used) **We do NOT collect:** • Information directly from children • Social Security numbers • Financial information from minors • Precise geolocation data without explicit consent

RezenOne is fully committed to protecting children's privacy under COPPA: **Parental Consent:** We collect children's information ONLY through authenticated parent/guardian accounts. By creating a child profile, the parent provides verifiable parental consent. **What Is Publicly Accessible:** When an NFC tag is scanned, the following may be visible to the scanner (controlled by Privacy Mode settings): • Child's first name • Photo • Age • Medical conditions • Approach instructions • Emergency contact phone number • Guidance video **Parental Rights Under COPPA:** • **Review:** Parents can view all information stored about their child at any time via the dashboard • **Edit:** Parents can update any information at any time • **Delete:** Parents can delete their child's profile entirely, which removes all associated data • **Revoke Consent:** Parents may contact us to revoke consent; we will delete the child's information within 30 days • **Refuse Further Collection:** Parents may request that no additional information be collected **No Third-Party Sharing:** We NEVER sell, rent, or share children's personal information with third parties for marketing or commercial purposes. **Data Minimization:** We only collect information that is reasonably necessary to provide the emergency profile service.

If you are a California resident, you have additional rights under the CCPA/CPRA: • **Right to Know:** You can request what personal information we have collected about you and your child • **Right to Delete:** You can request deletion of your personal information • **Right to Opt-Out of Sale:** We do NOT sell personal information. Period. • **Right to Non-Discrimination:** We will not discriminate against you for exercising your privacy rights • **Right to Correct:** You can request correction of inaccurate personal information • **Right to Limit Use of Sensitive Information:** You can limit how we use sensitive personal information To exercise these rights, contact us at [email protected] or use the controls in your dashboard.

We use collected information for the following purposes ONLY: • **Providing the Service:** Creating and displaying emergency profiles, processing NFC tag scans, sending GPS location alerts • **Account Management:** Authentication, password recovery, account settings • **Communication:** Sending important service updates, security alerts, and support responses • **Safety Features:** Processing GPS location shares when someone finds your child • **Service Improvement:** Analyzing usage patterns (in aggregate, anonymized form) to improve the platform • **Legal Compliance:** Responding to legal requests and preventing fraud We do NOT use your information for: • Targeted advertising • Marketing to children • Selling to data brokers • Behavioral profiling of children

We share information ONLY in these limited circumstances: • **Emergency Profile Display:** Information you choose to make visible on the public emergency card is accessible to anyone who scans the NFC tag. You control what is visible via Privacy Mode. • **GPS Location Alerts:** When a finder shares their location, it is sent only to the parent's alert email address. • **Service Providers:** We use trusted service providers (cloud hosting, email delivery) who process data on our behalf under strict contractual obligations. • **Legal Requirements:** We may disclose information if required by law, court order, or to protect the safety of a child. We NEVER sell personal information to third parties.

We implement industry-standard security measures to protect your data: • Passwords are hashed using bcrypt (never stored in plain text) • All data is transmitted over HTTPS/TLS encryption • Database access is restricted and monitored • Regular security assessments • Access controls and authentication for all admin functions While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify you promptly of any data breach.

We retain your information as follows: • **Active Accounts:** Data is retained as long as your account is active • **Deleted Profiles:** Child profile data is permanently deleted within 30 days of deletion request • **Deleted Accounts:** All associated data is permanently deleted within 30 days • **Activity Logs:** System logs are retained for up to 12 months for security purposes • **NFC Tag Data:** Tag associations are removed immediately when a profile is deleted

We use minimal cookies necessary for the Service to function: • **Session Cookies:** Required for authentication (keeping you logged in) • **Preference Cookies:** Store your language preference We do NOT use: • Third-party advertising cookies • Cross-site tracking pixels • Analytics cookies that track individual children

RezenOne is operated from the United States. If you access the Service from outside the US, your information may be transferred to and processed in the United States. By using the Service, you consent to this transfer. We comply with applicable data protection laws regardless of where users are located.

We may update this Privacy Policy from time to time. We will notify you of material changes by: • Sending an email to your registered email address • Displaying a prominent notice within the Service • Updating the "Last updated" date at the top of this policy We encourage you to review this policy periodically.

For questions, concerns, or requests regarding this Privacy Policy or your data: **Email:** [email protected] **Support:** Use the Support section in your dashboard For COPPA-related requests (reviewing, deleting, or revoking consent for your child's data), please email us at [email protected] with the subject line "COPPA Request". We will respond to all privacy-related requests within 30 days.