Online Privacy Policy

KB Tenacious Emergency Support Foundation (KBT-ESF)
kbt-esf.org · KBT-ESF Community Disaster Awareness app (iOS, Android and app.kbt-esf.org)
Version 3.0 · Effective September 8, 2026 · EIN 41-3071623

KB Tenacious Emergency Support Foundation ("KBT-ESF," "we," "our," or "us") is committed to protecting your privacy and being clear about what we collect, why, who can see it, and how long we keep it. This policy covers our website at kbt-esf.org, our Community Disaster Awareness app (available on the Apple App Store, Google Play and at app.kbt-esf.org), and our email, phone and text-message communications.

1. Who We Are

KBT-ESF is a 501(c)(3) nonprofit organization headquartered at 5061 Jackson Highway, Toledo, WA 98591. We provide community emergency support — disaster reconnaissance, community hazard reporting, welfare checks and community resilience programs — in Washington, Oregon and Idaho.

We are not an emergency service. We are not EMS, fire, law enforcement or Search and Rescue. If someone is in immediate danger, call 911.

Questions about this policy: support@kbt-esf.org or (360) 937-4921.

2. Information We Collect

Information you give us on the website

Contact and volunteer forms — name, email address, phone number, message, and (for volunteer applicants) availability, skills and background information you choose to share.
Donations — processed by Donorbox with Stripe as the payment processor. We never see or store your card number. We receive the donor's name, contact details, donation amount and any message.
Newsletter sign-up — name and email address (managed in Mailchimp).
Events and training registrations — name, email, phone and the session you booked (Wix Bookings/Events).
Store purchases — name, shipping and billing address, email, phone and order details. Payment is processed by the payment provider shown at checkout; we do not store card numbers.

Information you give us in the app

Account — your email address if you create a free account. We sign you in with a one-time code; we do not store passwords. You may also use the app as a guest without an account.
Your settings — the counties you follow, language, appearance, display size and notification preferences.
Hazard reports — the hazard type, the location of the report, the time, an optional description and one optional photo. See Section 5: reports are public.
Votes and flags — "still there" / "resolved" votes on reports, and reports you flag as inappropriate. Users you block are stored only on your device.
Requests for help (welfare check, KBT-ESF support, disaster notary assistance) — your name, phone or email, address, a description of the situation and, if you allow it, your device location. A welfare check request may also include the name, address and phone number of the person you are asking us to check on, and information about their condition.
Agency and volunteer accounts — agency name, assigned counties and the actions you take (area closures, verifications, resource pins, request acknowledgements).

Location information

With your permission, the app uses your device's precise location when you submit a hazard report or request for help, or tap "My Location" on the map. The location of a hazard report is saved with the report and shown on the public community map. We do not collect your location in the background, and we do not store it unless you submit something. You can withdraw location permission at any time in your device settings; you can still view the map and alerts without it.

Information collected automatically

Website - browser type, device type, pages visited, referring site, general (city-level) location and IP address, through cookies and our website platform's analytics (see Section 10).
App - device type and operating system version, app version, a push-notification token if you allow notifications, and crash/performance diagnostics needed to keep the app working.
Guest report limit - guests may submit three reports per week. To enforce this we store a random identifier generated on your device and a one-way (salted, hashed) version of your IP address for seven days. Neither can be used to identify you.
Photos - photos you attach may contain embedded metadata (such as the time or camera). Remove it before uploading if you do not want it shared.

3. How We Use Your Information

We use your information only to:

Respond to inquiries, applications and requests for help, and coordinate volunteers and partner agencies to act on them;
Display community hazard reports, resource locations and official alerts on the map, scoped to the counties you follow;
Send the notifications you have asked for, and life-safety bulletins (see Section 9);
Detect duplicate reports, prevent spam and abuse, and enforce our Terms and the guest report limit;
Process and acknowledge donations, registrations and store orders;
Send newsletters and program updates to people who subscribed;
Keep internal records of our programs, and produce anonymous statistics that help us improve;
Comply with legal obligations.

We do not sell, rent, lease or trade personal information. We do not use it for advertising or profiling.

4. Automated Content Screening

Hazard reports submitted through the app are automatically screened by an artificial-intelligence service (Anthropic) for spam, duplicate wording and abusive or dangerous content. The screening result is used only to prioritize review by KBT-ESF staff, who make the final decision about removing content or restricting an account. We do not use automated systems to make any other decisions about you.

5. Information That Is Public

The Community Disaster Awareness app is a public community map. Hazard reports (type, location, time, description and photo), votes, agency area closures and approved resource locations are visible to everyone who uses the app, including guests, and may be viewed by partner agencies. Reports leave the map 72 hours after submission unless renewed or closed earlier. Your name and email are not shown with a report.

Missing Person reports are intended for active disaster situations only. Any contact details you type into the description are published so that community members can respond. Only include information you have the right to share.

6. Who Can See Requests for Help

Welfare check, KBT-ESF support and notary requests are not public. They are visible only to:

KBT-ESF administrators;
KBT-ESF volunteers assigned to the county of the request, while it is open;
Partner agency accounts (law enforcement, fire, emergency management) for that county, while it is open.

Volunteers are vetted community members, not licensed professionals, and agree to keep request information confidential. We may contact the person you asked us to check on using the phone number or address you provided, for that purpose only.

7. Service Providers and Other Sharing

We share personal information only with providers that help us run the website and app, and only for the purposes described here. Each operates under its own privacy policy and is not permitted to use your information for its own purposes.

Supabase — App database, sign-in and photo storage (hosted in the United States, Oregon region). Data it receives: Account, settings, reports, photos, requests for help
OneSignal — Push notifications. Data it receives: Device push token, followed counties and states, account type, notification preferences
Mapbox — Maps in the app. Data it receives: Your IP address and the map areas you view; no account information
Anthropic — Automated content screening (Section 4). Data it receives: Report text and hazard type only
Expo (EAS) — Builds and updates the app. Data it receives: Basic device information
U.S. Census Bureau geocoder — Determines the county of a report. Data it receives: The report's coordinates only
Apple App Store / Google Play — App distribution. Data it receives: Governed by Apple's and Google's own policies
Public data sources — National Weather Service, NASA FIRMS, USGS, EPA AirNow, WSDOT, FEMA, U.S. Drought Monitor, Esri Living Atlas — Official hazard, weather, fire, earthquake, river and air-quality data shown in the app. Data it receives: Your IP address when data is requested; no personal information
Wix — Website hosting, forms, bookings, events, store and website inbox. Data it receives: Form, registration and order information; website analytics
Mailchimp — Email newsletters. Data it receives: Subscriber name and email
Donorbox and Stripe — Donation processing. Data it receives: Donor name, contact details, donation amount; card data handled by Stripe
Netlify — Hosting for app.kbt-esf.org. Data it receives: IP address and browser information
Dialpad — Business phone and text messaging. Data it receives: Phone number and message content for calls and texts with KBT-ESF
Esri ArcGIS — Embedded hazard map on our website. Data it receives: Standard web-request information; no personal information

We also share information when the law requires it, to protect the safety of a person, or with a successor organization if KBT-ESF merges or transfers its programs (you will be notified).

Partner agencies. Verified hazard reports, area closures and requests for help in an agency's county may be shared with that agency to coordinate response. Agencies are bound by their own public-records and privacy obligations.

8. Text Messages (SMS)

KBT-ESF uses text messaging for two purposes:

Conversations about your request or inquiry - replying to a message you sent us, following up on a welfare check or support request you submitted, or contacting a person you asked us to check on.
Volunteer coordination - dispatch, scheduling, training and event messages to KBT-ESF volunteers who have agreed to receive them.

You consent to receive these messages when you check the consent box on our forms, reply to a text from us, or (for volunteers) agree to text communication when you join. Consent is not a condition of receiving any service from KBT-ESF — you can always ask us to use email or phone instead. Message frequency varies with your request. Message and data rates may apply.

Reply STOP to any message to stop receiving texts. Reply HELP for help, or contact support@kbt-esf.org or (360) 937-4921. You can also opt out by any other reasonable means, including telling a volunteer or staff member.

Texts are sent through our business phone service (Dialpad) from KBT-ESF phone numbers published on our website. We keep a record of your consent (date, source and wording) and of messages exchanged, as part of the request record.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. We follow federal (TCPA and CTIA) and Washington, Oregon and Idaho rules for text messaging. We do not send marketing texts.

9. Push Notifications

If you allow notifications, the app sends alerts for the counties you follow according to your preferences (National Weather Service warnings, KBT-ESF bulletins, new nearby hazard reports, disaster data updates), as well as updates about your own reports and requests. Life-safety emergency bulletins from KBT-ESF may be sent regardless of your preferences. You can change preferences in the app or turn notifications off entirely in your device settings.

10. Cookies and Analytics

Our website uses cookies - small text files stored on your device - for essential functions (staying signed in to the store or a booking, security, remembering consent) and for analytics that tell us which pages are used. Analytics data is aggregated and does not identify you. Our website platform (Wix) and Google Analytics provide these analytics; you can decline non-essential cookies in the website's cookie banner, control cookies in your browser, and opt out of Google Analytics at tools.google.com/dlpage/gaoptout. The app does not use advertising cookies or trackers.

11. Your Choices and Rights

Everyone can: use the app as a guest; decline location and notification permissions; unsubscribe from emails using the link in any email; stop texts by replying STOP; hide reports and block users within the app; and delete their account and personal data from within the app (More → Settings → Delete My Account) or by contacting us.

Residents of Washington, Oregon and Idaho may also ask us to: confirm whether we hold personal information about you; provide a copy; correct inaccurate information; delete your information (subject to legal retention requirements); and opt out of any sale of your information (we do not sell it). Oregon residents may also request the list of specific third parties that received their personal information.

To exercise these rights, contact support@kbt-esf.org or (360) 937-4921. We will verify your identity and respond within 45 days. We will not treat you differently for exercising your rights. If you believe we have not resolved your concern, you may contact the Attorney General of your state.

12. Consumer Health Data

Some information you share with us may be health-related - for example, a medical condition, disability, medication or mental-health situation described in a welfare check or support request, or a request for a medical-aid resource. This section explains how we handle that information ("consumer health data"), consistent with Washington's My Health My Data Act and similar laws.

What we collect: only the health-related information you (or the person requesting help for you) choose to type into a request, or that a volunteer records in order to respond.
Why: solely to coordinate the help you asked for and to keep a record of the request.
Source: you, or the person who submitted the request on your behalf.
Who can see it: the people listed in Section 6, and Supabase as our data host.
We do not sell consumer health data and we do not use geofencing around health facilities.
Your rights: you may access, correct or delete this information, and withdraw consent, by contacting support@kbt-esf.org or (360) 937-4921. Deletion requests are honored within 45 days, including at our service providers.

13. Data Security

We use access controls that limit who can see what (including database rules that enforce the county and role limits in Section 6), passwordless one-time-code sign-in, encrypted connections, and reputable providers with independent security certifications. Staff and volunteer access is limited to what their role requires. No online system is completely secure; if you believe your information has been compromised, contact us immediately at support@kbt-esf.org.

14. How Long We Keep Information

Hazard reports — Leave the public map after 72 hours. After one year we remove the submitter link, photo and description; the hazard type, location and time are kept indefinitely as anonymous hazard history.
Requests for help (welfare, support, notary) and related messages — 3 years after the request is closed
App account (email, settings, followed counties) — Until you delete your account or ask us to; deleted within 30 days
Guest report-limit identifiers — 7 days
Push-notification tokens — Until you turn off notifications or remove the app
Bulletin send logs (sender, time, recipient count, text) — 3 years
Donor records — 7 years (IRS requirements)
Volunteer records — 3 years after separation
Newsletter subscribers — Until you unsubscribe, then deleted within 90 days
Text-message consent records — 4 years after your last message
Website analytics — Up to 26 months

15. Children

Our website and app are not directed to children under 18. You must be 18 or older to create an account or submit a request for help. We do not knowingly collect personal information from anyone under 18; if you believe a child has provided information to us, contact support@kbt-esf.org and we will delete it.

16. Data Breach Notification

If a security breach affects your personal information, we will notify you and the appropriate authorities as required by the laws of Washington (RCW 19.255), Oregon (ORS 646A.600–646A.628), Idaho (Idaho Code § 28-51-104 et seq.) and any other applicable law, as quickly as possible and without unreasonable delay.

17. External Links

Our website and app link to external sites and services (for example county emergency management pages, Donorbox). This policy does not cover those sites; review their privacy policies before providing information.

18. Changes to This Policy

We may update this policy as our programs, technology or the law change. The current version is always posted at kbt-esf.org/privacy-policy with its effective date, and the app links to it. For material changes we will post a notice on our website or in the app. Continued use after an update means you accept the revised policy.

19. Contact Us

Email: support@kbt-esf.org
Phone: (360) 937-4921
Mail: KB Tenacious Emergency Support Foundation, 5061 Jackson Highway, Toledo, WA 98591
Website: kbt-esf.org

KB Tenacious Emergency Support Foundation · EIN 41-3071623 · 501(c)(3) nonprofit