Ask us
the hard ones.

Schools, hospitals and venues pay for the proof they already owe — signed reports, drills that run themselves, reunification. That pays for everyone else. The paperwork is the product. You aren't.

One building is free forever — unlimited people, unlimited drills. The meter is a workforce seat, one per employee, and never the people you serve: students, patients, residents, visitors and followers are never billed, at any number. Adding somebody always works — the seat count is reconciled at renewal, never a gate — because the last thing a safety tool should do is give anyone a reason to leave a person off the list. A failed card degrades administration; it never disables alerting. Paid plans add more sites, the signed archive and SMS. Government buys on a purchase order, not a card.

If you register without an account: how to reach you, and the places you chose to follow. That's it. We do not store your location. Following a place tells us what you care about, never where you're standing.

No — there is no location trail in this product, by design. Following a place tells us what you care about, never where you are. When you ask people nearby for help, your own phone works out who is close; the distance is computed on the device and the answer is sent to no one. If a building ever needs a live position during an incident, it is off by default, asked for, shown while it's on, scoped to that one visit, and erased when the visit ends. It's the deliberate line between us and a family-location app.

The people running the place you're at — the wardens and admins accounting for everyone during that event, and no one else. Followers of a place are counted beside the number, never inside it, so a family member watching from home can never see who else answered. Answers from off site are counted apart, so nobody searches a building for someone who was never in it. If your record is ever redacted, it reads "Redacted", never your details.

Stopping is one tap and needs no login — every alert carries the link, and you can pause a place for a while instead of leaving it for good. Delete your account and your devices, sign-in tokens and contact details go with it. The one thing we keep is your name inside a signed drill or incident report, because that is a legal record of who was accounted for — there it is tombstoned rather than erased, so the record still adds up but nothing points back to a live inbox. If you ever opted out of a text, that opt-out is kept, so a later re-import can't quietly undo it.

Less than one a week, or we've failed. You get emergencies at the places you follow, the drills you opted into, and the all-clear. Nothing else is sent down an emergency channel.

No. Text and email work with no app and no account — that's the whole point of the register form above. The app adds live maps, reunification routing and family status, but it is never required to be alerted.

Safe mode hides EVAC behind a neutral icon, opened with a safe word. Silent alerts, nothing to find. It comes from the same place Duress itself did: protecting people whose danger is close to home.

No. Live activations require two verified admins to confirm, enforced on the server rather than in the app. Hawaii's false missile alert is the case study every mass-alerting system is now designed against. Drills are single-admin, because a drill is not an emergency.

No. An organisation that hasn't been verified can alert only the people who accepted its invitation — they chose to join it, so that needs no trust from anyone else. Reaching people signed in as present, or followers of the place, requires verification: we check the building is really theirs first. It's the line between a safety tool and a megaphone.

No. There is no list and no map of who carries what — that would be a register of other people's diagnoses, and we refused to build it. An ask arrives like a notification; your phone checks the distance itself and tells nobody the answer. You appear to exactly one person, only if you choose to go, and only until it's over. And nothing about this is ever a reason to carry less of your own medication.

Only if the school links you — there is deliberately no self-service way to follow a person. A custodial and a non-custodial parent look identical to any signup form, and it's the school that holds the enrolment record and any court orders. So the school authorises, revocation is immediate and silent, and there is no ambient status on a child, ever: you see how they are only while something is actually happening.

A blast is one-way and unaccountable — nobody knows who read it or who is still inside. EVAC counts people, routes them, tells you the moment everyone is safe, and produces a signed record that the drill happened. It's the difference between sending a message and running an evacuation.