Effective Date: April 2, 2026
We collect the following information when you use Geolocate Me: • Device credentials (device ID, authentication tokens) generated at registration • Location data (latitude, longitude, accuracy) sent periodically from your device • Timestamps associated with each location ping We do not collect your name, email address, or any other personally identifiable information. Device registration requires only a shared password, not a personal account.
Location data is used solely to provide the Geolocate Me service: • Storing your location pings so they can be queried via the API • Providing location history with time-based filtering • Returning your most recent location to authorized API consumers We do not use your location data for advertising, analytics, profiling, or any purpose other than the core tracking service.
Your location data is stored in Amazon DynamoDB with encryption at rest. All API traffic is encrypted in transit via HTTPS (TLS 1.2+). Location pings are automatically deleted after 30 days via a time-to-live (TTL) mechanism. You cannot extend this retention period. Device credentials are stored as SHA-256 hashes — we never store your tokens in plaintext.
We do not sell, share, or transfer your location data to any third party. Your location data is accessible only to holders of your device’s bot token, which is generated at registration and shared at your discretion. You control who can access your location by controlling who has your bot token.
Geolocate Me uses the following third-party infrastructure services: • Amazon Web Services (AWS): Cloud hosting, database storage, API gateway • Apple App Store: App distribution and subscription billing These services have their own privacy policies. We do not share your location data with these services beyond what is necessary for infrastructure operation.
You can stop sharing your location at any time by disabling tracking in the app. Your existing location data will automatically expire after 30 days. To immediately delete all your data, you can request deletion of your device record from our database by contacting us. Once your device record is deleted, all associated location data becomes inaccessible.
Geolocate Me is not intended for children under the age of 13. We do not knowingly collect data from children. If we learn that we have collected data from a child under 13, we will delete that data promptly.
We may update this Privacy Policy from time to time. Material changes will be reflected on this page with an updated effective date. Your continued use of Geolocate Me after changes are posted constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or your data, please contact us at privacy@guleki.com.