Privacy Policy

Last updated: October 8, 2026

Salus is a personal-safety app for iPhone operated by FINDSALUSLLC ("Salus," "we," "us"). During a Guardian session, Salus listens on the user's device for a secret spoken phrase and, when it hears it, sends a text message alert to people the user has chosen. This policy explains what we collect and how we handle it, with particular attention to mobile phone numbers and text messages. It covers two groups of people: users of the Salus app, and emergency contacts — people a user has asked to receive their alerts.

Information we collect

From users:

Account. A Sign in with Apple account identifier, and the email address Apple shares with us (which may be an Apple private relay address).
Safety setup. Your phrases, cancel PIN, and your contacts' names and mobile numbers. These are stored encrypted in the iOS Keychain on your device.
Audio. Speech recognition runs entirely on your device. Audio is processed in memory and discarded. We never record, store, or receive your audio.
Location and battery level. Captured only when an alert is sent, and included in that alert. For each alert we keep a record of the alert type, delivery status, time, and coordinates for 30 days, then delete it automatically.
Waitlist. If you join the beta waitlist on this website, your email address, used only to tell you when the beta opens.

About emergency contacts: the contact's name and mobile phone number, entered by the user who chose them. We also record whether the contact has accepted their invite on the opt-in page or opted out (replied STOP). We store the inviting user's display name on our servers and show it on the opt-in page, so the contact knows who invited them.

How we use mobile phone numbers

An emergency contact's mobile number is used only to:

show a masked version of it on the opt-in page the contact opens from the user's invite link,
send a confirmation text after the contact taps Yes on that page, and
send safety alerts from the user who chose them: an emergency alert, a discreet request to call the user, or a low-battery check-in. Alerts include the user's location when available.

These are transactional safety messages. We do not send marketing or promotional texts.

When a user invites a contact, we store the contact's number encrypted, temporarily. Our message relay decrypts it only to show the masked number on the opt-in page and to send the confirmation text. The encrypted copy is deleted when the contact accepts, or when the invite expires after 30 days. We also keep a one-way cryptographic hash of the number so we can match STOP replies and track opt-out status.

We do not sell or share your mobile information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent will not be shared with any third parties. Mobile numbers are shared only with our messaging provider (Twilio), solely to deliver the messages described above.

How consent is obtained

A user adds a contact in the Salus app and taps Invite, then shares a personal link from their own phone. Salus does not text the contact at that point. The contact opens the link and sees a page naming the user who invited them, with the full disclosure directly under a Yes, text me <Name>'s alerts button, noting that message and data rates may apply. Tapping that button on the opt-in page is the opt-in. Salus sends alerts only to contacts who have accepted their invite. A contact who does not accept, or who replies STOP, receives no alerts. Consent is not a condition of any purchase. See our SMS program page for the exact messages.

Opt-out

A contact may reply STOP to any message to stop receiving texts, or HELP for help. Message frequency varies. Message and data rates may apply.

Service providers

We use Twilio to send and receive text messages, Cloudflare to run our message relay, Supabase to host our database and accounts, Apple for sign-in, and Loops for the beta waitlist. Each processes data only to provide its service to us.

Data retention & deletion

Alert records are deleted after 30 days. Users can export their data or permanently delete their account from the app's Settings. Deleting an account removes its server-side records, including contact confirmation records, and revokes the Sign in with Apple authorization. We protect data with encryption and reasonable administrative and technical safeguards.

Age

Salus is intended for users 18 and older.

Changes

We will update this page if our practices change, and revise the date above.

Contact

Questions about this policy: [email protected], or FINDSALUSLLC, 363 Hyde Hollow Road, Eureka Springs, AR 72632, USA.