Privacy Policy for Ambex

1. Information We Collect

• User Account Information: When you register or log in, we collect your Name, Phone Number, Email, Operation Unit, and designated Role.
• Location/GPS Data: The application accesses and records precise GPS coordinates in real-time to identify the incident scene, navigate ambulances, and detect ambulance BLE Beacons.
• Operational & Emergency Medical Records: Information recorded during emergency operations, including patient symptoms, triage classification, and telemetry vital signs (via S-Box telemetry hardware) for life-saving and medical handover.
• Camera/Photos: The application accesses your camera and photo library so operators can capture and attach photos of the incident scene and ambulance readiness inspection checklists.
• Audio & Video Data (Telemedicine): Real-time encrypted audio and video streams via WebRTC for remote medical consultations with ER physicians (audio/video conversations are streamed live and not permanently recorded).

2. How We Use Information

• To verify identity and facilitate secure logins.
• To receive and transmit Dispatch Orders and send Push Notifications (via Firebase Cloud Messaging) to operators.
• To transmit live telemetry vital signs and pre-hospital data directly to receiving emergency departments.
• To verify vehicle and medical equipment readiness checklist.

3. Information Disclosure

• Required to comply with the law or regulations of authorized government agencies.
• Necessary to protect the safety of patients, operators, or public property.

4. Data Management and Security

• On-device Storage: Certain sensitive information, such as authentication tokens and credentials, is securely saved on your device (iOS Keychain / Android Keystore).
• We implement appropriate technical measures (HTTPS / TLS 1.3 / WSS) to prevent unauthorized data access. However, transmitting data over the internet cannot be guaranteed to be 100% secure.

5. User Rights (Under Thailand PDPA)

• Right to Access & Rectification: You can request access to, obtain a copy of, or correct inaccurate personal data.
• Right to Erasure (Right to be Forgotten): You can request the deletion, destruction, or anonymization of your personal account and data. Users can request account deletion by contacting support at support@swittek.com.
• Right to Restrict & Object: You can request the restriction of processing or object to the processing of your personal data entirely.
• Account Management: You can log out at any time to clear session data and saved login information on the device.
• Device Permissions: You can manage Location, Camera, and Bluetooth access permissions through your phone's settings (disabling these permissions may cause some app functions to be unavailable).

6. Policy Changes

7. Contact Us