Privacy Policy

Information we collect

Account information

We process information such as your name, email address, organisation, membership role, subscription status and authorised countries so that we can create and manage your D-Risk account.

Authentication information

We process protected authentication and session information needed to sign you in, keep your account secure, change or reset your password and end sessions. D-Risk support cannot view your password and will never ask you to send it by email.

Device and notification information

If you enable mobile notifications, we process a device notification token, device platform and registration status. Firebase Cloud Messaging may also process notification tokens, app-installation or device identifiers, device and app metadata, and limited delivery or diagnostic information needed to deliver and maintain mobile alerts. We maintain notification inbox, delivery and read-status information so alerts can be delivered and shown consistently on your registered devices.

Google Maps information

D-Risk uses Google Maps Platform to display interactive maps. Depending on the device, app configuration and how the map is used, the Google Maps SDK may process device or app identifiers, device and app metadata, product interactions such as panning or zooming, crash information, performance information and diagnostic data. This processing supports map functionality, analytics and service reliability.

Incident-access information

Your organisation, subscription and authorised countries determine which incidents you can access. We use this access information when displaying incidents and deciding whether an alert is available to you.

Location information

The D-Risk mobile app does not request, collect or store your precise physical location. Incident coordinates displayed on the map describe the locations of security incidents; they do not describe or track your location.

Support communications

When you contact D-Risk, we process the name, email address, organisation, support topic, optional package interest and message you provide so that we can respond to support or purchase enquiries.

How we use information

• Provide, secure and maintain your account.
• Apply your organisation's subscription and country access.
• Display authorised incident information.
• Send requested incident alerts and maintain your notification inbox.
• Respond to account, login, password-reset and application support requests.
• Prevent misuse, diagnose failures and protect the reliability of D-Risk.

D-Risk links your account information, authenticated device registrations and notification read status to your account only as needed to provide app functionality, maintain account security and keep alerts consistent across your registered devices.

D-Risk does not use this information for advertising, share it with data brokers or use it for cross-app tracking.

Notification delivery

D-Risk uses Firebase Cloud Messaging to route mobile notifications to registered Android and Apple devices. The device notification token and limited delivery information are shared with the notification provider only as needed to deliver and manage alerts. Notification text is designed to avoid placing detailed incident narratives on a device lock screen.

Google and Firebase services

Google and Firebase process relevant SDK information under their own privacy terms. You can learn more in the Google Privacy Policy and Firebase privacy and security information. Their handling of information is governed by their applicable terms and policies.

Retention and protection

We retain information for as long as it is needed to provide D-Risk, maintain account and delivery records, meet legitimate operational or legal needs and protect the service. Notification inbox items are normally available for 30 days. We use administrative and technical safeguards appropriate to the information being handled.

Your choices

You can control notification permission in your device settings. Signing out removes that mobile session's active device registration, and changing your password ends registered mobile notification access until you sign in again. You may contact D-Risk to request access to, correction of or deletion of your account information, subject to information we must retain for legitimate operational or legal purposes.

Contact us

For privacy questions or requests, email support@d-riskalert.com or use the D-Risk contact form. Never include your password, password-reset link, authentication token or device notification token in a support message.