The Alara App application, hereinafter, “Alara”, “Alara App” or “the application” interchangeably, informs the people who use it, hereinafter “users”, of this Privacy Policy Agreement (referred to interchangeably as “Agreement”).
Reading it will allow users to know how Alara collects, processes and protects their personal data in relation to the use of its application, devices, products and services ("Services"). When users (or someone on their behalf) access Alara services and voluntarily register by creating an account, they must accept this Agreement or they will not be able to access or use such services.
The Agreement is based on compliance with Law No. 19,628 on Personal Data Protection and Law No. 19,496 on Consumer Rights.

1. PRINCIPLES APPLICABLE TO THE PROCESSING OF PERSONAL DATA

The processing of users' personal data will be subject to the following principles:
Principle of legality, loyalty and transparency:
The user's consent will be required at all times following completely transparent information about the purposes for which personal data is collected. This will be achieved by presenting a box that users must check before voluntarily creating an account in the application. Attached in the same place will be this Agreement so that users can read it before consenting to the collection and processing of their data.
Purpose limitation principle:
Personal data will be collected for specific, explicit and legitimate purposes, these being presented in the same Agreement.
Data minimization principle:
The personal data collected will only be strictly necessary in relation to the purposes for which they are processed.
Accuracy principle:
Personal data must be accurate and will always be updated. The user is responsible for maintaining their data in these conditions, as mentioned in our Terms and Conditions.
Principle of limitation of the conservation period:
Personal data will only be maintained in a way that allows the identification of the user for the time necessary for the purposes of its processing.
Principle of integrity and confidentiality:
Personal data will be treated in a way that guarantees its security and confidentiality.
Principle of proactive responsibility:
The person responsible for the treatment will be responsible for ensuring that the above principles are met.

RIGHTS OF THE ACCOUNT HOLDER REGARDING THEIR PERSONAL DATA

In preparation for the entry into force of Law No. 21,719 on the Protection of Personal Data (effective as of December 1, 2026), ALARA now recognizes the rights granted by said regulations, including:

- Right of access: You can request information about your personal data that we have collected.

- Right to rectification: You can request the correction of your personal data if it is inaccurate or outdated.

- Rights of deletion, opposition and blocking: You can request that we cease the processing of your personal data. In these cases, ALARA will proceed to eliminate them or anonymize the information so that it cannot be used to identify you.

To exercise these rights, you can contact us at supportdatospersonales@alara.cl. In accordance with the provisions of the future regulations:

- Blocking requests, as a temporary measure while other requests are processed, will be responded to within 2 business days.

- Requests for rectification, deletion or opposition will be responded to within a period of 30 calendar days, extendable once for another 30 days, if justified.

If you consider that your request has not been adequately resolved or the deadlines have not been met, you can file a claim with the Personal Data Protection Agency, once it becomes operational in accordance with the law.

CONSERVATION OF YOUR PERSONAL DATA

ALARA will retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected. However, some data may be kept for a longer period if required by specific legal or regulatory provisions, in which case they will be kept for the period established by said regulations, after which they will be anonymized.

2. IDENTIFICATION OF THE RESPONSIBLE FOR THE TREATMENT

The person responsible for the processing of personal data collected through the application is ALARA SpA, Rol Único Tributario No. 77.720.938-8, represented by Mr. Cristóbal Lavados Munita, national identity card No. 19686948-4, hereinafter, the person responsible for the processing.

The information to contact the responsible person is:
Email: supportdatospersonales@alara.cl

3. LEGITIMATION

The processing of user data is carried out with the following legal bases that legitimize it:

The request for information and/or the contracting of the Services, whose terms and conditions will be made available to the user in any case, in advance, for express acceptance.
The free, specific, informed and unequivocal consent of the user, making this Privacy Policy available to them,

which must be accepted through a statement or a clear affirmative action, such as marking a box provided for this purpose.
Alara's legitimate interest in providing the Services to the user as described in the Terms and Conditions, for which it is necessary to make use of the emergency contact data as described in this agreement.

If the user does not provide Alara with their data, or does so incorrectly or incompletely, it will not be possible to proceed with the use of the application.

4. DATA COLLECTION

The Services collect various types of information from and about its users ("Personal Information"), such as:

Information voluntarily provided when registering in the application, which may include, among others, the name, RUT (Single Tax Identification Number), home address, email address, the user's date of birth, which can be used for the requested services.
Real-time location data, such as GPS location information.
Stored information and files, when provided voluntarily, including personal contacts (name and personal phone number) and address book information.
Device information, which may include information about the user's mobile device and Internet connection, such as the device's unique identifier, IP address, operating system, browser type, mobile network information, and the device's phone number.

5. USE OF DATA

Alara uses Personal Information to identify and locate the user in the event that they experience an emergency and use the Services. In particular:

To authorize user access to the Services and guarantee the provision of the Services that the user needs and requests.
To provide the Services and assist in the operation of our Services.

To improve the Services and keep the user informed of changes in our application.
To respond to and support the user regarding their use of the Services and carry out our obligations.
Comply with all applicable legal requirements and enforce our rights derived from any contract entered into between the user and Alara.
To investigate possible fraud or other violations of our Terms of Use or this Agreement.

6. DATA DISCLOSURE

Alara does not share, sell, or otherwise disclose the personal data to which it has access for purposes other than those described in this Agreement. However, it may also disclose without restriction aggregate information about users, and information to the extent that it does not identify any individual. Alara may disclose Personal Information to:
Share with Emergency Contacts
Alara shares personal information with the emergency contacts that the user has designated in the application for the purpose for which the user provides it; for example, sending an emergency alert to a family member or friend.
Share with Affiliates and Trusted Third Parties:
Alara shares personal information with affiliates, contractors, service providers and other third parties who support Alara services. These third parties are contractually obligated to keep the information confidential and to use it only for the purposes for which it is disclosed to them. Additionally, Alara may share personal information with third parties to market products or services if the user has consented to these disclosures.
Compliance with Legal Obligations:
Alara may disclose personal information when necessary to comply with law, regulations, legal process, or requests from public or government authorities. The same will occur to enforce the terms of use, investigate possible violations, detect
fraud, address technical issues, or protect against harm to rights, property, or safety.
Commercial Transfers:
In the event of a merger, acquisition, reorganization or sale of assets, Alara may buy, sell or share assets, including users' personal data.
User Consent:
Alara may share personal data with third parties when the user has given their consent to do so. You may also share personal data as required by the purpose for which it was provided, such as sending an emergency alert to a family member or friend.
Disclosure of Aggregated Information:
Alara may share aggregated and anonymized/pseudonymized personal data with advertisers and other third parties to promote or describe the use of our services.

7. DATA PROTECTION

Alara uses technical and organizational aspects to protect users' Personal Information against accidental, illegal or unauthorized destruction, loss, alteration, access, disclosure or use. All Alara collaborating professionals are contractually obliged to protect the privacy of users through confidentiality clauses. Alara encrypts all personal data in the database and uses HTTPS to transmit information.

Based on existing resources, Alara constantly reviews its systems and data to ensure the best possible service to our customers. In the event of an attack on the computer systems, or the data incorporated into them, Alara will act diligently, filing a complaint with the competent authority, collaborating with the investigation, in the terms that correspond to the magnitude of the event and the resources available, to pursue or initiate the corresponding civil and criminal actions, always respecting the confidentiality of the users of the application.

The security of Personal Information also depends on the users. Where you have chosen a password to access certain parts of our Services, you are responsible for maintaining the confidentiality of that password. For this reason, users are obliged not to share their password with third parties. In the same sense, users are obliged to be careful when providing information to their emergency contacts for the emergency notification functions of the Services, since Alara is not responsible for the use that the emergency contact makes of the information that the user shares. For this reason, and before the user adds an emergency contact, they should consider what information they want to share with that person.

8. COLLECTION OF DATA FROM MINORS

With the consent of the parent or legal guardian, Alara may collect and process Personal Information from minors under eighteen (18) years of age. However, if Alara becomes aware that this consent is not such or has been revoked, the information will be immediately deleted from the database. Parents or legal guardians are responsible for reviewing the personal information of their children or wards, and in that capacity, they have the right to delete or revoke the authorizations given in their regard, for which purpose they must notify ALARA of said circumstance in writing. In this sense, parents or guardians declare that they understand that Alara has a legitimate interest in providing their child's Personal Information collected through the Services to third-party providers for the sole purpose of administering or providing the Services. Any person under the age of eighteen (18) must request and obtain parental or guardian permission to use the Alara Services.

9. USER RIGHTS

Access right:
Users may request information about what personal data is being processed, the purpose of such processing and to whom it has been disclosed.
Right to rectification:
Users have the right to correct their personal data if it is inaccurate or incomplete.
Cancellation right:
Users can request the deletion of their personal data when they believe that it is not being used in accordance with the law.
Right to object:
Users may object to the processing of their personal data in certain circumstances.
The right to data portability:
You have the right to receive a "portable" copy of the personal data that you have made available to Alara. Generally, this means your right to request the transfer, copy or transmission of your data stored on Alara servers to the servers of another service provider.

10. DATA RETENTION PERIOD

Alara will store and retain the data for as long as the user is a customer of its Services. However, data is deleted if the user deletes their account from the app, if the account is inactive for 3 years, or in accordance with state and national laws. Archived data will reside in encrypted database backups and will be purged in accordance with Alara's data lifecycle management policy.

11. CHANGES TO THE PRIVACY POLICY AGREEMENT

Alara reserves the right to update and/or change the terms of this Privacy Policy Agreement; These changes will be published on the home page of our website at www.alara.cl and will be deemed approved if the user does not express their opposition within the following 10 days from their publication.

12. CONTACT

If you have any questions or concerns about the Privacy Policy Agreement related to the Alara Services, please do not hesitate to contact contacto@alara.cl