Privacy notice & service terms

Sonop is a best-effort reminder and notification aid. It is not an emergency service, a medical device, or a monitoring service, and it does not guarantee a response or contact emergency services. The monitor and other contacts chosen by the family are the responders.

Who is responsible for your information

Sonop is operated by Sonop, who decides how and why your personal information is used (the “responsible party” under POPIA, the “controller” under the GDPR and UK GDPR).

What we store

Only what's needed to run the service: names, phone numbers (and optional emails), each person's role, check-in times and timezone, whether a check-in was sent, confirmed or missed, and whether our messages were delivered. We never store why someone uses Sonop, any health information, or the content of the messages in our logs.

Where your number came from, if you did not give it to us yourself

Someone setting up a circle — usually a family member — gives us the name and phone number of each person in it, and Sonop records who added you. Before we send you anything else, we send you one message telling you who did that, what would happen next, and asking you to answer. Nobody is sent check-ins, reminders or alerts until they have answered yes themselves.

If you were named as a buddy

A buddy is someone living close to the person. Sonop never sends a buddy check-ins, reminders or alerts, and never asks a buddy to go and look in on anyone — that arrangement is between the family and the buddy, outside Sonop. We ask a buddy one question only: whether we may keep their name and number and give them to that person's monitor and other contacts if a check-in is ever missed. Those people might not be family or known to the buddy. If a buddy does not answer yes, we do not give their details to anyone.

Your rights, and how to have your details deleted

You may ask for access to, correction of, or erasure of your information at any time.

• • Reply STOP to any Sonop message. We stop messaging you immediately, and stop giving your details to anyone. You get one confirmation and nothing after it.
• • To have the record itself deleted, ask the person who added you — they can remove you from their circle, which deletes your name and number — or write to us using the contact details in the message we sent you.

We keep a record that a person accepted or refused, and when — that record is the evidence of their decision, so it is kept even after they are removed. It holds the answer, the date and the number it came from, nothing more.

If you are the alone person, you can also pause or leave at any time by replying PAUSE or LEAVE.

Sub-processors

• • WhatsApp messaging — Meta / 360dialog (EU-hosted)
• • SMS & voice — Twilio (EU region), Clickatell (South Africa)
• • Email — Postmark
• • Sign-in — none: account-holder log-in happens inside Sonop (passkey or one-time email link)
• • Billing — Paddle (Merchant of Record)
• • Error tracking — Sentry; uptime — healthchecks.io; backups — Backblaze B2

This is a pilot service. Final terms, disclaimers and a data-processing agreement are prepared with legal advice before launch.