PRIVACY POLICY

This privacy notice for Aidhub Ltd (doing business as First Aid Academy) ("Company," "we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

- Visit our website at https://aidhub.com, or any website of ours that links to this privacy notice

- Use our emergency guidance mobile application

- Create an account and access our emergency response services

- Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you:

- Register for an account

- Use our emergency guidance application

- Make payments for premium features

- Contact us for support

- Participate in surveys or feedback collection

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

Contact and Account Information:

- Name

- Email address

- Phone number

- Account credentials and preferences

Emergency Usage Data:

- Voice recordings and commands during emergency guidance sessions (processed and temporarily stored by ElevenLabs)

- Emergency protocol interactions and completion data

- User flow analytics and app usage patterns

- Inferred information about emergency situations (such as child age ranges and potential medical conditions based on protocol usage)

Device and Technical Information:

- Device type, operating system, app version

- IP address and general location data

- Browser type and settings

- Usage analytics and performance metrics

Payment Information:

- Payment method details (processed by third-party payment processors)

- Transaction history for premium feature purchases

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services through our analytics providers (PostHog and Google Analytics). This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our emergency guidance Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

To provide emergency guidance services: Process voice commands through ElevenLabs and provide real-time first aid instructions based on your emergency situation

To improve our Services: Analyze usage patterns, emergency protocol effectiveness, and user flows to enhance our life-saving guidance and develop better emergency response features

To facilitate account creation and authentication: Manage your user account and enable access to our emergency guidance features

To send administrative information: Communicate important updates about our Services, changes to our terms and policies, and critical safety information

To fulfill and manage purchases: Process payments for premium features and maintain transaction records

To analyze emergency trends: Study anonymized emergency protocol usage to improve medical guidance and identify common emergency scenarios for better preparedness

To ensure safety and medical accuracy: Maintain the highest standards of medical protocol accuracy and regulatory compliance for life-saving guidance

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

Service Providers: We may share your information with third-party vendors who perform services for us or on our behalf, including:

- ElevenLabs: Processes voice data for speech recognition and voice synthesis during emergency guidance sessions. Voice data is temporarily stored on ElevenLabs servers during processing.

- PostHog: Analytics platform that processes usage data to help us understand app usage patterns and improve emergency guidance features

- Google Analytics: Web analytics service that tracks website and app usage patterns to optimize our emergency response services

- Payment Processors: Handle payment transactions for premium features (we do not store payment card details)

- Cloud Hosting Providers: Store and process your account and usage data securely

Medical Research and Safety Improvement: We may share anonymized and aggregated data with medical professionals and emergency response researchers to improve first aid protocols and emergency preparedness, but this data will not identify individual users

Legal Requirements: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process

Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

5. DO WE TRANSFER YOUR INFORMATION INTERNATIONALLY?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in Bulgaria and the European Union. However, some of our service providers (ElevenLabs, PostHog, Google Analytics) may transfer, store, and process your information in countries other than your own, including the United States.

If you are a resident in the European Economic Area (EEA) or United Kingdom (UK), then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this privacy notice and applicable law, including:

- Implementing appropriate safeguards such as standard contractual clauses approved by the European Commission

- Ensuring our service providers have adequate data protection measures in place

- Only transferring data to countries with adequacy decisions from the European Commission where applicable

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law.

Default Retention: We retain most personal information indefinitely unless you specifically request deletion, due to the critical nature of emergency services and the need for continuous improvement of life-saving protocols.

Specific Retention Periods:

- Voice Data: Temporarily stored by ElevenLabs during processing sessions, then deleted according to their retention policies

- Analytics Data: Retained indefinitely for service improvement and emergency protocol enhancement

- Account Information: Retained until account deletion is requested

- Emergency Session Data: Retained indefinitely for medical protocol improvement and safety analysis

Your Right to Request Deletion: You may request deletion of your personal information at any time, though we may retain certain information where required by law or for legitimate safety improvement purposes.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

Special Security Measures for Emergency Data:

- Voice data is encrypted during transmission to ElevenLabs

- Emergency session data is encrypted at rest and in transit

- Access to emergency protocol data is strictly limited to authorized personnel and medical advisors

- Regular security audits and updates to maintain the highest protection standards

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from children under 18 years of age, but our service is designed to help parents provide emergency care to children.

We do not knowingly solicit data from or market to children under 18 years of age. Our service is designed for adult users (parents and caregivers) to provide emergency guidance for children.

Child-Related Data Processing:

- We may infer child age ranges and potential medical conditions based on the emergency protocols you access

- This inferred information is used solely to provide appropriate age-specific emergency guidance

- We do not create profiles of individual children or store personal information about specific children

- Parents and caregivers are responsible for any information shared during emergency situations involving children

If you are a parent using our service to help your child, you are responsible for any information shared during emergency situations, and you consent to our processing of inferred child-related information for the purpose of providing appropriate emergency guidance.

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: In some regions, such as the European Economic Area (EEA) and United Kingdom (UK), you have rights that allow you greater access to and control over your personal information.

In some regions (like the EEA and UK), you have certain rights under applicable data protection laws. These may include the right:

- To request access and obtain a copy of your personal information

- To request rectification or erasure of your personal information

- To restrict the processing of your personal information

- To data portability - receive a copy of your personal information in a structured, commonly used format

- To object to the processing of your personal information

- To withdraw consent where we rely on your consent to process your personal information

Emergency Service Considerations: Please note that certain data processing is necessary for the provision of emergency services and may not be subject to deletion or restriction requests if it could compromise the safety features of our application or the improvement of life-saving protocols.

Exercising Your Rights: To request to review, update, or delete your personal information, please contact us using the information provided below. We will consider and act upon any request in accordance with applicable data protection laws.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

11. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year.

12. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at contact@aidhub.com or by post to:

Aidhub Ltd

UIC: 208197548

Address: гр. Русе, ОБОРИЩЕ, 18

Bulgaria

Data Protection Officer: For data protection inquiries, please contact us at contact@aidhub.com

14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances. To request to review, update, or delete your personal information, please contact us at contact@aidhub.com.

Emergency Data Considerations: Please note that deletion of certain emergency-related data may impact the functionality of our life-saving services and our ability to improve emergency protocols for all users. We will work with you to balance your privacy rights with the critical safety features of our application and our mission to save lives through improved emergency guidance.

Free vs. Premium Services: Your privacy rights apply regardless of whether you use our free emergency guidance features or purchase premium functionality.