Legal
Privacy Policy
Last updated · 17 July 2026
This policy explains how Arnivar, operated by Blackburn Solutions (Australia), collects, uses and protects personal information across the Arnivar mobile app (emergency response, for wardens and occupants) and the Arnivar admin portal at admin.arnivar.com (compliance and warden management, for safety teams and administrators). We keep it in plain English on purpose.
1. Who we are
Arnivar is an emergency-management and warden-compliance platform operated by Blackburn Solutions in Australia. In most cases, your organisation (your employer, building manager or their appointed safety partner) decides to use Arnivar for its emergency program and adds you as a user. In privacy terms, they control why your information is collected, and we process it to deliver the service.
2. What we collect
- Account information: your name, email address, mobile number, workplace and location within it (site, building, floor), and any warden roles, training or certifications assigned to you by your organisation.
- Operational information: messages sent and received during emergency events and drills, your report-in and availability status, evacuation and safety status (for example "safe" or "needs assistance"), personal emergency evacuation plan (PEEP) details where your organisation records them, and training attendance and compliance records.
- Device information: a push-notification token for your phone, device platform (iOS/Android), and technical logs (such as sign-in times) needed to run and secure the service.
We do not collect background location. The app does not track where you are. Evacuation status is based on what you and your wardens report during an event.
Our public website (arnivar.com) can use Google Analytics to understand how visitors find and use the site, collecting usage information such as the pages you view, the link that referred you and a general location derived from your IP address. This only happens if you accept it. When you first visit we ask, and until you accept, the analytics script is not loaded at all, so nothing is stored on your device and no request reaches Google. Declining is a single click and costs you nothing. You can change your answer whenever you like using the Cookie settings link in the footer of any page. Analytics is separate from the Arnivar app and admin portal and is not used to identify you. Google processes this information as our service provider; see Google's privacy policy for how they handle it. Our cookie policy lists every cookie by name, what it does and how long it lasts.
The enquiry form on arnivar.com sends us the details you type in (your name, email address and anything you choose to tell us about your organisation) so we can respond. They are delivered to us as an email and used only to handle your enquiry; they are not added to any marketing list and are not shared with anyone else.
3. How we use it
- Delivering emergency alerts and messages by push notification, SMS and email.
- Coordinating evacuations: showing safety teams who has reported in, who is safe and who needs help.
- Maintaining warden, training, certification and compliance records for your organisation's emergency program.
- Sending transactional email only: sign-in codes, assignment notifications and password resets, from comms@arnivar.com. We never send marketing.
- Keeping the service secure, reliable and lawful.
4. Who can see your information
- Your organisation's safety team: administrators and wardens for your site can see safety-relevant information about you (for example, your evacuation status during an event, or your training status).
- Service providers: we host on Amazon Web Services in Sydney, Australia; push notifications are delivered via Apple and Google notification services (Firebase); SMS is delivered via telecommunications carriers. These providers process data on our behalf.
- No one else. We do not sell, rent or trade personal information, and we do not share it with advertisers.
We may disclose information if required by law or to protect life or safety in an emergency.
5. Security
Data is encrypted in transit (HTTPS/TLS) and at rest. Access is restricted by role: occupants, wardens and administrators each see only what their role requires. Our infrastructure runs in an isolated production environment in AWS Sydney with access limited to authorised personnel.
6. Retention
We keep personal information while your account is active and your organisation uses Arnivar. Event records (such as evacuation histories, training and compliance records) may be retained by your organisation to meet its workplace-safety record-keeping obligations. We also keep a record of your acceptance of in-app safety and legal notices (which notice and version you accepted, and when), because those records may be needed to show what you were told. When information is no longer needed, it is deleted. See section 8 for how deletion requests are handled.
7. Your rights
You can ask to access or correct your personal information at any time. If your organisation registered you, your administrator can update most details directly; otherwise email us at admin@arnivar.com. We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). If you have a concern we can't resolve, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
8. Deleting your account
How deletion works depends on how your account was created:
- Your organisation registered you. Your warden and safety records are part of your organisation's emergency-management program, so deletion requests for those records go to them: contact your Arnivar administrator, or email us and we'll pass the request on. You can still remove Arnivar's access to your device at any time: use Profile → Delete account in the app. This immediately signs you out everywhere, stops all push notifications, and deactivates your account; we then permanently de-identify your personal details as described below.
- You created an Arnivar Respond Lite account. Use Profile → Delete account in the app, or email help@arnivar.com. Your account is deactivated immediately. If you are the account owner, deleting your account closes your organisation's Arnivar site, so the app will ask you to remove your site's users first (or contact us to transfer ownership).
What happens next. Deactivation is immediate: you're signed out on every device, notifications stop, and your account can no longer be used. We hold the request for a 7-day grace period in case you change your mind: email help@arnivar.com within that window to restore your account. After the grace period we permanently de-identify your information: your name, email address and mobile number are erased, your device and sign-in credentials are deleted, and any personal emergency evacuation plan (PEEP) details are removed. Deletion is completed within 30 days of your request and we'll confirm by email.
What we keep. Emergency-event, evacuation, training and compliance records are retained in de-identified form (no longer linked to you) so organisations can meet their workplace-safety record-keeping obligations. Historical messages may retain the display name shown when they were sent. We also keep a minimal log of the deletion request itself (that it was made, and when it was completed) as evidence of compliance, and the record of your acceptance of in-app safety and legal notices, which we may need to show what you were told while you used the service.
Full details: arnivar.com/account-deletion.html.
9. Children
Arnivar is a workplace and building-safety tool intended for adults. We do not knowingly collect information from children.
10. Changes to this policy
If we make material changes we will update this page and the "last updated" date above. Significant changes will be communicated to your organisation's administrators.
11. Contact
Privacy questions: admin@arnivar.com · Support: help@arnivar.com · General: info@arnivar.com