Privacy policy for ''Ole valmis!'' application

1. Introduction

The „Ole valmis!“ ("Be Prepared!") mobile application is a free mobile application created by the Estonian Women's Voluntary Defence Organisation (Naiskodukaitse) that allows users to:

• receive national safety alerts;
• familiarise themselves with official guidelines for various situations - both for prevention and resolution;
• quickly find a needed number from a list of useful numbers and call it directly;
• test the level of their home crisis supplies;
• complete a cyberhygiene e-learning course;
• report an air threat.

The application is available in the Google Play and Apple App Store application stores.

This privacy policy provides an overview of what personal data we collect, how we use, retain and protect it, and what your rights are under the General Data Protection Regulation (GDPR).

The data controller responsible for personal data is Naiskodukaitse (registration code 70002824).
Address: Toompea 8, 10130 Tallinn, Estonia
Data Protection Officer contact:

2. Legal Basis for Processing

We process personal data on the following legal bases:

1. User consent (GDPR Art. 6(1)(a)): The user gives consent for the transmission of photo and location data at the moment of sending a report. Consent is voluntary and may be withdrawn at any time, but this does not affect the lawfulness of processing carried out before the withdrawal.
2. Performance of a task carried out in the public interest (GDPR Art. 6(1)(e)): The transmission of reports and photos to national authorities (e.g. the Air Force, the Rescue Services Agency, the Police and Border Guard Board) is necessary for maintaining public order, preventing threats, and crisis management.

3. Data Processed and Purpose

The application is designed for anonymous use, but for certain functions the following data is processed:

4. Data Retention

We retain data only for as long as necessary to fulfil the purpose:

1. In the application's servers: Photos and metadata are retained only temporarily until their successful transmission to the responsible national authority.
2. In national authorities: After transmission, data is retained in accordance with the retention periods of the receiving authority (e.g. until the end of proceedings or in accordance with the Archives Act). In general, the retention period is linked to the duration of the handling of the specific case (e.g. 1-5 years depending on the type of case).

5. Transfer of Data and Authorised Processors
Photos and their metadata are transmitted to the responsible national authority, which uses them for verifying and processing the event.

Data is transmitted only to:

1. The competent national authority (e.g. the Estonian Air Force), whose task is to verify and process the information received.
2. Technical service providers (authorised processors):
   • Google LLC (Firebase, Google Analytics): Used for application analytics and error detection. Firebase Analytics, Google Play Services
   • Transfer of data outside the EU: As we use Google services, data transfer to the USA may occur. We ensure data protection through Standard Contractual Clauses (SCC) approved by the European Commission and rely on the EU–US Data Privacy Framework.

Data is not shared with other third parties or commercial services.

6. Use of Camera and Alternatives

The use of a camera is necessary for submitting an accurate and correct report. If the user does not grant camera permission, it is possible to compose a report in text form and the application continues to function normally. Adding a photo enables the transmission of more precise and visually clearer information, which helps to process the report more quickly and efficiently.

7. User Rights

You have the following rights arising from the GDPR:

1. Right of access: You may request what data we process about you.
2. Right to erasure ("right to be forgotten"): You may request the deletion of your photo or report.
3. Right to withdraw consent: You may at any time prohibit the application from using the camera or location in the device settings.

Please note! As the application does not collect names, personal identification codes, or phone numbers, we are technically unable to identify which photo belongs to a specific person unless you provide us with additional information (e.g. the exact time and content of the photo sent) that would allow the data to be identified.

8. Automated Decision-Making

The application does not involve automated data processing or profiling that would produce legal effects for the user.

9. Right to Lodge a Complaint

If you find that the processing of your personal data violates the requirements of the GDPR, you have the right to contact the Data Protection Inspectorate:
Website: www.aki.ee
E-mail:
Address: Tatari 39, 10134 Tallinn

10. How We Handle User Consent
By using the application, the user confirms that they have read the privacy policy and understand how data is processed, including the transmission of photos to a national authority.

The "Ole valmis!" ("Be Prepared!") mobile application applies all precautionary measures to protect the personal data of the client. An encrypted data communication channel during data transmission ensures the security of personal data.

We ensure that the transmission of data is informed and voluntary in the following ways:

• In-app notification: Before permitting the use of photo or location data and camera permissions, the user is shown an in-app notification for consenting to the terms of use and privacy policy.
• Documentation of consent: Each submission of a report is accompanied by a technical record of consent having been given, which allows us to demonstrate the lawfulness of data processing.
• Withdrawal of consent: The user has the right to withdraw consent at any time by disabling the application's access to the device's camera or location services in the device's general settings. For data already transmitted, consent may be withdrawn (taking into account the limitations regarding the identification of anonymous data outlined in the preceding sections) by contacting Naiskodukaitse at .

11. Contact Details

If you have questions regarding our privacy policy or the application of privacy terms, please contact: .

12. Changes to the Privacy Policy
The privacy policy may be updated in accordance with changes in legislation or improvements to the application's functionality. The updated version will be published on the same webpage.

Last modified: 18.02.2026.