LocStat Privacy Policy

1. Who uses LocStat

A Guardian sets up the family and adds an Angel's phone with a one-time pairing code. Before the code is made, the Guardian must confirm that they are the person's parent or legal guardian, or have the person's permission, and agree to the phone sharing its location with the family. We record who confirmed this and when.

2. What we collect

2.1 Guardians (your account)

When you tap "On my way", your phone's current location is sent to our server once, only to work out the drive time with traffic, and then discarded. If you choose "type the minutes" instead, your location is not used at all.

While your "On my way" is running, your app may also share your live position so the people you're coming to can watch you approach. We keep only your latest position (no trail), show it only to the Angels you sent that "On my way" to, and delete it the moment you arrive, cancel or send a new one, and at the latest 10 minutes after your arrival time. It is never added to location history or written to any log, and our staff cannot see it.

2.2 Angels (the person being looked after)

The Angel app does not receive anyone else's location, with one exception: while a Guardian's "On my way" to that Angel is running, it sees that Guardian's current position (section 2.1), and only until it ends. It has no chat or feed. It receives only short messages from its family: a request to check in, a note (a short line of text, which may not contain a location), "On my way" (who is coming and when, and at most a place name like "School", never an address), child lock settings, how often to report, and the Guardians' names and help phone numbers.

2.3 The family

2.4 What we do not collect

• Your contacts, photos, messages, calls, browsing, or other apps.
• Card or bank details (Stripe, Apple or Google handles payment).
• Advertising IDs. We use no analytics, advertising or tracking tools.
• Street addresses. We never look up an address from a location.

3. How we use it

We use personal information only to:

• Show the family where its people are, and tell them when someone arrives at or leaves a place.
• Handle help requests: alert Guardians by push, text and email, and give the Angel phone the numbers to call.
• Work out "On my way" arrival times (section 2.1).
• Sign people in and keep accounts secure.
• Bill for the family plan and send receipts and payment reminders.
• Send a weekly summary email to owners and admins: counts only ("Maya: 120 updates, arrived at a place 3 times"), never places or locations, and only if there was activity that week.
• Keep the service working and safe (fixing problems, preventing abuse).

We do not use your information for advertising, profiling, selling, or training AI models, and we do not send marketing emails.

4. Who can see it

In your family:

• Owners and admins see everyone in the family: their latest location, their history for the family's history period, alerts and places.
• Members see the same, unless the family turns on team scoping, in which case members see only the people in their teams.
• Only owners and admins (and team leads, for their team) can change a phone's settings, such as the child lock or how often it reports.
• For organisations with sub-groups, owners and admins of a parent organisation can see its sub-groups.

At LocStat: a small number of authorised staff can see a list of families (their names, number of members and billing status) to provide support. Staff do not browse families' locations. If we ever need to look at a family's data to fix a problem, we will ask the family first, unless the law requires otherwise.

No one else, except the service providers in section 5, and as required by law (section 5.3).

5. Who we share it with

5.1 Service providers

We use these companies to run LocStat. Each gets only what it needs, and may use it only to provide its service to us.

Some of these providers (Google, Apple, Twilio, Stripe, Mapbox, Cloudflare, and our email provider) may process information outside Canada, including in the United States, where it may be accessible to authorities under local law.

5.2 Services a family or organisation turns on

These are off unless an owner or admin turns them on for their family or organisation. When on, they send that family's data to a system the family chose, and the family is responsible for it:

• Webhooks: for help requests, sends the alert, the person's name, and their location (and the place's name, if any), to a web address the owner or admin enters. Each message is signed so the receiver can check it came from us.
• Organisation sign-in (single sign-on with the organisation's own directory): sign-ins are checked with that organisation's system.
• TAK bridge (defence and emergency services only, enabled by LocStat on request): sends members' locations to the organisation's own TAK server.
• Satellite position relay (satellite trackers only): passes one tracker's position messages to the family's other trackers.

5.3 Legal reasons

We may disclose information if the law requires it (for example a valid court order), or to protect someone's life or safety in an emergency. Where we can, we will tell the family first.

If LocStat is sold or merged, personal information may move to the new owner, who must keep to this policy or tell you before changing it.

We never sell personal information.

6. How long we keep it

7. Deleting your information

• A person (Angel): owners and admins can remove someone. Their location history, alerts, messages and arrivals are deleted at once.
• Stop sharing: the person can stop sharing in the Angel app, sign the phone out, or uninstall the app at any time. Nothing blocks this.
• The whole family: an owner can delete the family by typing its name and a current authenticator code. Everything in it is deleted.
• Your account: from your account settings, with a current authenticator code. Your account, sign-in methods, sessions, phone numbers and memberships are deleted. If you are the only owner of a family, first make someone else an owner, or delete the family.

After deletion, these remain for a limited time:

• security records (section 6);
• billing records the law requires us to keep (section 6), and what Stripe, Apple or Google hold;
• encrypted backups, until they expire.

8. Children

LocStat is designed for families to look after children, including children under 13. A child does not create an account and is never asked for information:

• A parent or legal guardian sets up the Angel app on the child's phone with a pairing code.
• Before the code is made, the parent or guardian confirms that they are the child's parent or legal guardian and agrees to the phone sharing its location with the family. This is their consent on the child's behalf, and we record who gave it and when.
• We collect only what is needed to show the family where the child is and to help in an emergency (section 2.2). We never ask a child for more information than that.

For children's privacy, LocStat follows these rules:

• The app is always visible and always shows that it is sharing. It has no hidden icon and does not block being uninstalled.
• No chat, no social features, no feed, no ads, and no sharing outside the family.
• The child's phone never receives anyone else's location, except the live position of a Guardian on their way to them (section 2.1).
• History fades after 7 days by default and is never kept longer than 30.
• Notes sent to the child may not contain a location.
• We never use a child's information for advertising, and never sell it.

A parent or legal guardian can, at any time:

• see the child's information in the Guardian app;
• download the family's data (section 11);
• delete the child's information, by removing them from the family (section 7);
• stop further collection, by removing the child, or by stopping sharing or uninstalling the Angel app.

They can also write to us at privacy@locstatsw.com.

We encourage parents to talk with their child about LocStat, and to reconsider location sharing as the child grows up.

In the United States, this is how we meet the Children's Online Privacy Protection Act (COPPA): verifiable parental consent before any information is collected from a child's phone, collection limited to what the service needs, and the parental rights above.

9. Security

• All connections to LocStat are encrypted (HTTPS/TLS).
• Two-step sign-in is required for every Guardian account.
• Passwords are not used for sign-in. Codes, keys and tokens are stored only as one-way hashes or encrypted.
• Sensitive secrets (authenticator secrets, sign-in tokens, organisation keys) are encrypted in the database, and backups are encrypted.
• Each family's data is kept separate in the database, so one family can never see another's.
• Angel phones connect with their own device key; organisations can require a key held in the phone's secure hardware.
• Our server logs do not record locations, names, tokens or message contents, and are kept only briefly.
• Pushes, texts and emails never carry a location.

No system is perfectly secure. If a breach puts your information at real risk, we will tell you and the Privacy Commissioner of Canada as the law requires.

10. Cookies and storage

• The web app uses one cookie, __Secure-locstat_rt, to keep you signed in (secure, not readable by scripts, only sent to our sign-in service, expires after 30 days). It is required, so there is no setting to turn it off.
• It remembers your map type (roads or satellite) in your browser. Nothing about anyone's location is stored in your browser.
• No advertising or analytics cookies. [The web app loads fonts from Google Fonts, which shows Google your IP address — see the note at the end.]

11. Your rights

Under Canadian privacy law (PIPEDA), and similar laws where you live, you can:

• see the personal information we hold about you;
• get a copy: a family's owner can download the family's data (family, Guardians, Angels, places, the location history still kept, alerts, messages and billing) as a file from Settings, after entering a current authenticator code. Anyone else can ask us for a copy;
• correct it (most of it is on your Account and Family screens);
• delete it (section 7);
• withdraw consent, for example by removing a person or leaving a family. Without location sharing the service cannot work for that person.
• complain to us at privacy@locstatsw.com. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

We will reply within 30 days. To protect your account, we may ask you to confirm who you are.

United States residents. Depending on your state (for example California, under the CCPA as amended by the CPRA), you have the right to know what personal information we collect, use and disclose; to get a copy; to correct it; and to delete it. You can use these rights as described above, or have an authorised agent make a request for you. We will not treat you differently for using them.

• We do not sell or "share" personal information (for cross-context advertising), and we have not done so in the past 12 months.
• Sensitive information: precise location is sensitive personal information. We use it only to provide the service you asked for, which is the use the law allows.
• What we collect, and who receives it: the categories are identifiers (name, email, device IDs), commercial information (your subscription), precise location, and internet activity (sign-in records). Sections 2 and 5 list each item and each provider.

12. Changes to this policy

If we change this policy, we will update the date at the top. For important changes, we will tell owners and admins by email or in the app before the change applies.

13. Contact

Locstat Software Inc., Privacy Officer
Springwater, Ontario, Canada
Privacy: privacy@locstatsw.com · Support: support@locstatsw.com