Tremo SOS

Privacy policy

Tremo collects the minimum it needs to work. Almost everything you configure stays on your device.

Controller

Tremo is an independent project by qhero.net (a personal project, not an incorporated company), made in Colombia. Contact for any data matter: our contact form. We process data under Colombia's Law 1581 of 2012 and, where applicable, the EU General Data Protection Regulation.

What we process and why

  • Preferences and progress (language, theme, alerts, places, lessons, kit, family): stored in your browser. If you create an account, your course progress and points are also saved to it so you don't lose them when you switch devices.
  • Location: computed on your device. To show nearby quakes we send a rounded area (cells of about 50 km); your exact location never leaves your phone.
  • Alerts with the app closed: if you enable them, we store the push subscription address your browser generates, your language, alert preferences and watched places rounded to about 1 km. They're only used to decide whether to alert you, and are deleted when you turn alerts off or the browser invalidates the subscription.
  • "Did you feel it?" reports: the intensity level you choose, coordinates rounded to about 1 km, the country detected by the network and a random device identifier (to avoid duplicates). Used in aggregate on the intensity map.
  • Community (with an account): nickname, country, avatar, messages, friendships, blocks and reports. Your access code is stored only as a hash. You can delete your account and everything you wrote from My Tremo.
  • Account (free, optional, 18+): you need it for the community, asking Tremo and taking the course; alerts, the map and emergency tools work without it. We store your email (and whether you confirmed it with the link we sent), password stored only as a hash, bio, points and their history, course progress, who you follow and who follows you, and your diploma if you earn it. If you sign in with Google or Facebook we receive only that account's identifier and the email it shares; never your password or contacts. Your profile (tremo.net/me/your-nick) is visible to others unless you make it private, and anyone can verify your diploma with its code. We only email you to reset your password when you ask.
  • Statistics: page viewed, language, approximate country (via Cloudflare), referring site and device type. We don't store your IP or use tracking cookies. Only if you accept do we add an irreversible daily fingerprint to count unique visitors.
  • Advertising: when enabled, a Google AdSense ad appears at the end of some reading pages (never in SOS or during an alert). Google and its partners may use cookies and identifiers to serve and measure it; it's only personalized if you accept (you can change this in My Tremo → Account). In the European Economic Area and the UK, Google asks for your consent with its own message. More: how Google uses data and your ad settings.
  • Contact form: name and email (optional), topic and message, so we can reply. We don't store your IP, only an irreversible fingerprint to stop spam.
  • "Ask Tremo": your question text is sent to an AI provider to generate the answer, without identifying data. Don't type personal data in your questions.

Legal basis

We process data to provide the service you request (alerts, community, reports), for our legitimate interest in keeping the service safe (preventing abuse and spam) and, for unique-visitor statistics and personalized ads, with your consent, which you can withdraw anytime in My Tremo.

Retention

  • Account, points, followers, diploma and community messages: until you delete the account from My Tremo, which removes everything (moderators may remove rule-breaking content earlier). Password reset links: 1 hour.
  • Push subscriptions: until you turn them off or they fail repeatedly.
  • "Did you feel it?" reports: kept as non-identifiable scientific data.
  • Visit statistics: up to 400 days. Anti-abuse logs: 2 days.

Providers involved

  • BanaHosting (server and database) and Cloudflare (delivery network and security; its Turnstile check confirms you're a person when you sign in, sign up or write to us, without tracking cookies).
  • Browser push services (Google, Apple, Mozilla, Microsoft) deliver notifications.
  • Google and Facebook (Meta), only if you choose to sign in with them; Google AdSense, when ads are shown.
  • AI providers (Google Gemini, Groq, Cloudflare Workers AI or OpenRouter) only receive the text of questions to the mascot, the lab's numbers and article topics. Some providers' free models may keep that text or use it to improve their models: don't write personal data in your questions.
  • Your browser downloads maps directly from OpenFreeMap, Esri and Amazon Web Services (terrain), and searches places on Nominatim (OpenStreetMap): those services see your IP address like any website.

Some providers may be outside your country; we only use providers offering reasonable security guarantees.

Your rights

You can access, update, correct and delete your data, and withdraw consent, by writing to our contact form. We reply within 15 business days. You may also contact your data-protection authority.

Minors

Earthquake information and lessons are suitable for all ages. Accounts and the community (rooms, profiles and private messages) are for people 18 and older only.

Changes

If we change this policy, we'll say so here with the update date.