LuaSOS Privacy Policy
Last updated: April 20, 2026
When a family trusts LuaSOS to protect a loved one, they also trust us with deeply personal information: a name, a diagnosis, a phone number. That trust is a responsibility we take seriously — not just another data point.
This Privacy Policy explains how we collect, use, store, share, and protect the personal data of those who visit our website, purchase a LuaSOS product, activate a device, create an account, manage a profile, or use any of our associated digital services.
By accessing our website or using LuaSOS services, you accept the practices described in this Privacy Policy.
1. Data Controller
The entity responsible for the processing of personal data is:
- LuaSOS
- Address: Lima - Peru
- Privacy contact: contacto@luasos.com
- Website: https://luasos.com
Throughout this policy, references to "LuaSOS", "we", "us", or "the Company" refer to the entity identified above.
2. Scope of this Policy
This Privacy Policy applies to:
- visitors to the LuaSOS website;
- customers who purchase LuaSOS products;
- users who create an account or activate a device;
- individuals whose profiles are linked to a device;
- parents, guardians, caregivers, or legal representatives;
- emergency contacts registered on a profile;
- institutional or corporate clients;
- anyone who contacts LuaSOS for support, inquiries, complaints, or through any other channel.
3. Personal Data We May Collect
Depending on how you interact with LuaSOS, we may collect the following categories of personal data:
3.1. Identification and contact data
We may collect data such as:
- full name;
- display name or profile reference name;
- email address;
- phone number;
- country, city, or address;
- identity document, where necessary for verification, billing, support, or legal compliance.
3.2. Purchase, activation, and account data
We may collect information related to:
- orders and purchases;
- payment status;
- device serial number;
- activation code;
- identifier, token, or URL associated with the product;
- account credentials;
- history of device activation, suspension, transfer, or reassignment.
3.3. Profile data linked to the device
Depending on what the user, holder, or guardian chooses to fill in, the profile may include:
- name;
- photo;
- emergency contacts;
- relationship to the profile holder;
- language;
- support notes or helpful instructions;
- any other information the user chooses to add within the options enabled by the platform.
3.4. Sensitive data
If the user chooses to include it and the feature is enabled, the profile may contain sensitive data, such as:
- allergies;
- medications;
- medical conditions;
- disability-related information;
- support or care needs;
- other health or personal care information.
LuaSOS recommends sharing only the information strictly necessary for the purpose of identification, assistance, or contact.
3.5. Data derived from device scans or reads
When a person scans a QR code or uses the NFC feature of the device, we may record information such as:
- date and time of the event;
- access method, such as QR or NFC;
- IP address;
- browser or device used;
- approximate location or coordinates, where technology and permissions allow;
- actions taken within the profile;
- technical logs required for security, traceability, and service operation.
3.6. Support and communications data
If you contact LuaSOS, we may collect:
- message content;
- emails;
- support history;
- any additional information you choose to share during an inquiry, incident, or complaint.
3.7. Website usage and navigation data
When you visit our website, we may collect:
- IP address;
- browser type;
- operating system;
- pages visited;
- time spent on the site;
- traffic source;
- technical identifiers;
- cookies and similar technologies, where applicable.
4. How We Collect Your Data
We may obtain your personal data through the following means:
- when you purchase a LuaSOS product;
- when you create an account;
- when you activate a device;
- when you complete or edit a profile;
- when you register emergency contacts;
- when a device is scanned or read;
- when you browse our website;
- when you contact us;
- when a company, institution, family member, or representative registers a profile on your behalf with sufficient authorization.
5. Purposes of Data Processing
LuaSOS processes your personal data for specific, legitimate purposes tied to the operation of our products and services. These may include:
5.1. Service delivery
We use your data to:
- sell and deliver products;
- activate devices;
- create and manage accounts;
- link a product to a profile;
- display the information configured in the profile;
- enable contact with family members, guardians, caregivers, or designated persons;
- manage renewals, suspensions, transfers, or device replacements.
5.2. Scan events and alerts
We use your data to:
- log scan or read events;
- send alerts or notifications to designated contacts;
- display useful assistance information;
- maintain service traceability.
5.3. Security and misuse prevention
We use your data to:
- detect unauthorized access;
- prevent fraud, impersonation, or abuse;
- protect the platform and its technological infrastructure;
- maintain security and audit logs.
5.4. Customer support and compliance
We use your data to:
- respond to inquiries and requests;
- handle complaints or incidents;
- address privacy-related requests;
- fulfill legal, regulatory, contractual, and administrative obligations.
5.5. Service improvement
We may use certain data to:
- improve the user experience;
- identify bugs or technical failures;
- optimize features;
- develop new improvements;
- measure service performance.
5.6. Communications
We may send you communications related to:
- account activation;
- security;
- support;
- order status;
- service changes;
- expirations, renewals, or incidents.
Where required by applicable law, we will request your consent before sending commercial or promotional communications.
6. Legal Basis for Processing
LuaSOS processes personal data in accordance with applicable law and, depending on the context, on the basis of:
- your consent;
- the performance of a contractual relationship;
- compliance with legal obligations;
- responding to user requests;
- the necessary operation of the service requested or contracted;
- other bases permitted by applicable regulations.
For sensitive data, profiles of minors, or particularly sensitive features, LuaSOS may request additional authorizations or validations.
7. Information Visible Through the Public Profile
LuaSOS allows the user, holder, or guardian to configure which information they want displayed on the profile linked to the device.
Information marked as visible may be accessed by anyone who legitimately accesses the QR link or uses the NFC feature of the device.
Therefore, the user, holder, or guardian acknowledges that it is their responsibility to define the profile's visibility level and to share only the information they consider appropriate, necessary, and proportionate for the purpose of identification or assistance.
8. Data of Minors and Persons in Vulnerable Situations
LuaSOS may be used to protect or assist minors, elderly individuals, or persons in vulnerable situations.
In these cases, the profile must be registered, activated, and managed by the parent, guardian, caregiver, legal representative, or duly authorized person, who declares they have sufficient authority to do so and assumes responsibility for the information entered.
9. Third-Party Data Added by the User
If the user adds personal data belonging to third parties — such as emergency contacts, family members, caregivers, or representatives — they declare that they have the necessary authorization or a sufficient legitimate basis to provide such data to LuaSOS for the relevant purposes.
10. Who We Share Your Data With
LuaSOS does not sell personal data.
10.1. With people who access the profile through the device
If a third party scans the QR code or uses NFC, they will be able to view the profile information that has been configured as visible.
10.2. With service providers who help us operate LuaSOS
We may share data with providers who deliver services necessary to operate LuaSOS, such as:
- cloud infrastructure and hosting;
- email delivery;
- messaging and notifications;
- payment gateways;
- analytics;
- authentication and security;
- technical support;
- logistics and shipping.
These providers will process data only to the extent necessary to deliver the service contracted by LuaSOS and under obligations of confidentiality and security.
10.3. With institutional or corporate clients
If LuaSOS is contracted by a company, institution, organization, educational center, care home, clinic, or other entity to manage devices or third-party profiles, certain data may be handled within that institutional framework, as disclosed to the user.
10.4. For legal compliance
We may share personal data when necessary to comply with a legal obligation, a valid order from a competent authority, or to protect the rights, safety, or integrity of individuals.
11. International Transfers of Personal Data
LuaSOS may use providers, infrastructure, or technology services located outside the user's country or outside Peru.
In such cases, personal data may be stored, hosted, or processed abroad, always under reasonable security, confidentiality, and data protection measures, as well as under appropriate contractual or organizational mechanisms where required by law.
12. Personal Data Registries
Personal data processed by LuaSOS may be stored in one or more personal data registries owned by [COMPANY NAME], such as:
- [REGISTRY NAME 1] – Registration code: [CODE]
- [REGISTRY NAME 2] – Registration code: [CODE]
- [REGISTRY NAME 3] – Registration code: [CODE]
Where applicable, these registries will be managed in accordance with applicable law.
13. Data Retention
We will retain personal data only for as long as necessary to fulfill the purposes for which it was collected, and to meet legal, regulatory, contractual, security, support, and traceability obligations.
In general, we may retain data:
- while the account or profile remains active;
- while the device is linked to a user;
- for as long as needed to handle requests, complaints, or incidents;
- for the periods required by applicable law;
- for the time reasonably needed to protect the security, integrity, and legal rights of LuaSOS.
Once the applicable retention period has ended, data may be deleted, anonymized, or blocked, as appropriate.
14. Information Security
LuaSOS adopts reasonable technical, organizational, and administrative measures to protect personal data against unauthorized access, loss, destruction, alteration, improper disclosure, or misuse.
These measures may include, as appropriate:
- access controls;
- authentication;
- information segmentation;
- monitoring and traceability;
- privilege reviews;
- confidentiality obligations;
- vendor assessments;
- incident response protocols.
15. Security Incidents
If LuaSOS detects a security incident that compromises personal data and could affect the rights of data subjects, it will take the reasonable and legally required measures for its containment, assessment, management, and — where appropriate — notification to those affected and to the competent authority.
16. Rights of the Data Subject
You have the right to exercise the rights recognized by applicable law regarding your personal data. These include:
- Access: know what data we hold about you and how we use it;
- Rectification: correct inaccurate or incomplete data;
- Cancellation: request deletion of your data when it is no longer necessary;
- Objection: object to the processing of your data in certain circumstances;
- withdrawal of consent, where applicable;
- other rights recognized by applicable regulations.
To exercise these rights, you may contact LuaSOS through the email address indicated in this policy.
17. How to Exercise Your Rights
Requests related to personal data may be sent to:
- Privacy email: contacto@luasos.com
Your request should include enough information to reasonably identify you and specify the right you wish to exercise. LuaSOS will respond within the timeframes and conditions established by applicable law.
18. Cookies and Similar Technologies
LuaSOS may use cookies and similar technologies to:
- remember your preferences;
- keep sessions active;
- improve navigation;
- measure website usage;
- strengthen security;
- optimize platform performance.
Cookie usage may also be governed by a specific policy or notice published on the website.
19. Changes to this Privacy Policy
LuaSOS may update this Privacy Policy when necessary to reflect legal, regulatory, operational, commercial, or technological changes.
The current version will be published on our website with its corresponding update date. When a change is significant, LuaSOS may additionally communicate it by email, within the platform, or through other reasonable means.
20. Contact
If you have questions about this Privacy Policy or about how your personal data is handled, you can reach us at:
- LuaSOS
- Privacy email: contacto@luasos.com
- Support email: soporte@luasos.com
- Website: https://luasos.com
- Address: Lima - Peru