Privacy policy

IMPACT Responder · Updated October 30, 2026

IMPACT Public Safety uses IMPACT Responder to manage volunteer personnel and event operations. This policy covers the Responder website, its public application forms, fitness and support forms, training-letter verification pages, and its iPhone and iPad app. The separate public impactuiuc.com website may have different practices.

Information you provide

Depending on the features you use, we store your name, email addresses, telephone number, account identifier, profile photo, membership and rank, professional credential details and proof files, availability, event assignments and attendance. We also store messages, announcements and acknowledgements, documents, equipment checks and related operational records you create.

EMT and EMR volunteer applications include the information and credential evidence provided on the application form. Instructor applications collect contact details, relevant experience, availability and motivation, without credential uploads. Fitness submissions include the name, email, activity description, two-hour confirmation and evidence files provided on that form. The public support form stores your contact details, message and the record of its handling. Applications, fitness submissions and public support do not require a Responder account. Signed-in message reports store the selected reported message, your explanation and the review record. Signed-in deletion requests store your account identifier and processing status.

Credential and other uploads may contain additional personal information visible in the file. Provide only the evidence requested. Do not submit patient information, treatment records or unrelated sensitive documents. Responder is an administrative tool and does not provide patient care, diagnosis or an electronic patient care record.

How information is used and shared

Information is used to operate the features you request, manage access and volunteer readiness, communicate about operations, answer support requests, investigate abuse and maintain security and audit history. We do not sell personal information or use it for advertising or cross-app tracking.

Signed-in members can see information allowed by their current permissions. Personnel contact information may be available to authorized colleagues. Credential evidence, applications, fitness submissions and administrative records have separate access restrictions. Documents and announcements are shown to their permitted audiences.

Instructor applications are available to authorized education reviewers and chiefs. The education team receives a submission notification by email with a sign-in link to review the application; application answers are not included in that notification.

IMPACT training letters have individual registry numbers and QR verification links. Anyone with a letter’s link can view its recipient’s full name, training type and date, issue date, registry number, and current issued or revoked status. There is no public search by name or list of recipients. The searchable issuance registry and internal revocation reasons are restricted to authorized issuers. Revoking a letter updates its verification status; it does not remove the recipient’s name from that page. Use the support form for a correction or privacy request concerning a training letter.

Direct-message history is available to its participants. When a participant reports a message, the selected message and their explanation become available to authorized moderators. This does not grant moderators access to the rest of the conversation. Trusted service operators can access stored information when necessary to maintain the service or process a valid request.

Service providers process information to run the platform. The current service uses Supabase for authentication, database and file storage; Cloudflare and the Sites hosting service for hosting; Resend for transactional email; and Apple Push Notification service for optional iOS alerts. Information you choose to email or export also leaves the app for the destination you select. Providers may retain security and service logs under their own terms.

Device permissions and notifications

The app lets you choose individual photos or files through system pickers. It does not need access to your entire photo library, contacts, location, microphone or HealthKit records. There is no advertising identifier or tracking permission request.

If you enable phone alerts, the service stores an installation identifier, Apple push token, delivery environment and your notification preferences, including the device’s reported Critical Alerts permission state, linked to your account. Alerts use generic text rather than message bodies or credential details. Critical Alerts require separate Apple permission and are reserved for immediate safety threats or urgent assistance. If you allow them, they can sound through silent mode and Focus, including Do Not Disturb.

You can change notification permissions, including Time Sensitive and Critical Alerts, in Apple Settings, and choose message and announcement delivery in the app. Notifications are optional. Delivery is not guaranteed and remains subject to connectivity and Apple’s controls.

Security and local storage

Network requests use HTTPS. Account access and file permissions are checked by the server. The iOS app stores sign-in session tokens in the system Keychain and uses temporary protected caches for private previews. If you choose to save your sign-in, its email and password stay in this device’s protected Keychain. Face ID or Touch ID unlocks them for a normal sign-in with the server. You can remove that saved sign-in in Account security or on the sign-in screen. IMPACT does not receive your biometric data. The website uses authentication cookies; app preferences such as appearance may be stored on your device. Security and operational logs support investigation and troubleshooting.

Privacy covers and screenshot-hiding behavior are additional safeguards, not a guarantee against copying. Operating-system behavior, system-owned presentations, exports and external cameras can expose information. Share information only with authorized recipients.

Retention and deletion

Records are not automatically erased on a fixed schedule. Deactivating an account prevents access but does not delete its information. You can initiate deletion in the app under Profile → Account security → Delete account, or through the account-security page on the website. If you cannot sign in, use the support form below.

Noor and the chiefs process account-deletion requests within 30 days of the request and send a completion confirmation to your sign-in email. No separate call or email is needed after submitting the request. Processing removes your login, contact details, profile photo, private credential copies and personal message content. Shared organizational records may retain neutral former-member attribution so other members’ work and equipment history remain usable. Independently submitted fitness, application and support records are included after confirming they belong to you. Request review alone is not completed deletion.

Files you previously exported and emails already delivered cannot be recalled. Copies held by recipients or service-provider backups may follow separate retention and deletion processes.

Your choices and contact

You can update supported profile details, manage notification preferences and request correction or deletion. Use the support form to contact the people responsible for Responder without an account. It also accepts privacy and content-safety concerns. Do not include passwords, recovery codes or patient information.

We may update this policy when the service changes. The date above identifies this version.