AT&T Enhanced PTT/ FirstNet Rapid Response Disclosure
Mobile Privacy Statement
The AT&T Enhanced Push-To-Talk (EPTT) and FirstNet Rapid Response (FNRR) mobile applications operate with their respective server-based products. Personal information is processed through the mobile applications in accordance with the AT&T Privacy Policy and, for FirstNet, the Privacy Policy Practices For All FirstNet Users.
AT&T's Role as Service Provider
AT&T Mobility provides mobile broadband data, telecommunications, texting, and other information services and equipment to postpaid and prepaid consumers and businesses throughout the United States. To serve its eligible customers, the EPTT and FNRR applications use location data, basic usage and personal information including phone numbers, and may include discreet listening as described below.
Permissions
When the EPTT or FNRR application is downloaded from Google Play, the End User cannot make use of the application unless an Administrator for the End User’s Agency or Business has provided initial access credentials to that End User. When the End User enters the credentials, they are presented with the End User License Agreement (EULA). The Agency or Business Customer that has contracted for the service must accept the terms of the EULA on behalf of its End Users and obtain any consent from those End Users as required by law. Additionally, each End User must also accept the EULA to begin using the application. The EULA presented is shown at the following URL: https://www.business.att.com/legal/eptt-eula.html.
Location Data
- The EPTT and FNRR mobile applications collect location data to track and share personally identifiable device location with:
- the End User’s Agency or Business dispatchers;
- other authorized End Users sharing Talk Groups when location sharing is enabled; and
- the EPTT and FNRR products and EPTT/FNRR mobile applications for such purposes, even when the app is closed or not in use.
Basic Usage and Personal Information
The EPTT and FNRR services collect basic usage and personally identifiable End User information and may allow End User’s Agency or Business to access certain usage and personally identifiable End User information (e.g., device status, device type, End User name, wireless telephone number, personal wireless account status, applicable wireless network provider/carrier, device make and manufacturer and other operational device information such as battery level and signal strength, device OS and the browser utilized to download the application) to support and improve the EPTT and FNRR service.
Phone Numbers
The EPTT and FNRR mobile applications collect End User phone numbers and use them to provide Push-To-Talk services. End User phone numbers may be visible to other users of the EPTT and FNRR services within the End User’s Agency or Business, Talk Groups and other users of the EPTT or FNRR Service as configured by the End User’s Agency or Business.
Discreet Listening
The End User’s Agency or Business may use discreet listening through the EPTT and FNRR application. This feature is in the control of and enabled/disabled by the End User’s Agency or Business that has purchased this feature. Any questions about this feature should be directed to the End User’s Agency or Business.
Additional Information
- Application Developer: AT&T Services, Inc. and its applicable subcontractors are the developers of the EPTT and FNRR applications.
- Point of Contact: To submit inquiries regarding EPTT and FNRR application privacy policies, refer to the AT&T Privacy Policy (URL link provided in the first paragraph of this statement), which provides the contact information for the AT&T Chief Privacy Office.
- Personal and Sensitive User Data Handling: Refer to the AT&T Privacy Policy (URL links provided in the first paragraph of this statement) which governs the handling of personal and sensitive user data for all AT&T applications and services.
- Retention and Deletion Policy: End User Personal and Sensitive Data used in the EPTT and FNRR services are retained for a period of 30 days, with the exception of administrative disaster recovery backups of server databases which are retained for 15 days.