# MyLoco

> MyLoco lets you share your live location with a single link that deletes itself. Tap "Share my location," pick a duration, and send the link into any chat. Whoever opens it sees your live position on a map in their browser — no account, no app to install, no history. Shares expire on a timer and the location data is deleted. Temporary by design.

MyLoco is a location-sharing app (iOS + Android) with a companion web receiver at https://myloco.app. The mobile app is the sharer; recipients only ever open a link in a browser. Businesses can also create shares programmatically through the MyLoco Business API ("where's my driver?" delivery tracking with the business's own branding).

## How it works

- The sharer opens the app, taps "Share my location," and chooses how long to share (e.g. 15 minutes).
- The app creates a short link like `https://myloco.app/s/<token>` and the sharer sends it via SMS, group chat, or anywhere.
- The recipient opens the link in any mobile or desktop browser and sees a live map pin that updates as the sharer moves. Granting their own location adds a route and ETA.
- When the timer ends — or the sharer taps Stop — the share ends within seconds and the location data is deleted server-side.

## Privacy model

- No account and no sign-up for either side; recipients never install anything.
- Share links are unguessable, single-purpose, and self-deleting; share pages are never indexed by search engines.
- Consumer location data exists only while a share is active and is nulled/deleted when it ends. There is no consumer location history.
- Business accounts may opt into position history (Growth plan, max 90 days) for proof-of-delivery; it is off by default and the tracking page belongs to a clearly named business.
- Realtime position updates travel over a private channel that only the server can broadcast on, so link-holders cannot spoof a location.

## Pages

- [Home](https://myloco.app/): what MyLoco is, how it works, and links to the app.
- [For business](https://myloco.app/business): the business product, planned pricing, and the early-access signup form.
- [API documentation](https://myloco.app/developers): endpoints, auth model, and examples for the Business API.
- [Blog](https://myloco.app/blog): practical writing on live ETAs and the "last 200 meters" of service calls. Per-trade posts: [plumbing](https://myloco.app/blog/wheres-my-plumber), [HVAC](https://myloco.app/blog/hvac-technician-eta), [delivery](https://myloco.app/blog/wheres-my-delivery-driver), and the [general version](https://myloco.app/blog/last-200-meters).
- [Privacy policy](https://myloco.app/privacy): exactly what data is handled and for how long.
- [Terms of service](https://myloco.app/terms): terms for using MyLoco.

## Business API summary

Base URL: `https://myloco.app/api` (early access — keys are issued manually via the form at https://myloco.app/business or hello@myloco.app).

- Auth: `Authorization: Bearer ml_live_...` (account API key). Each share also returns a single-purpose `ml_pub_...` publisher token that can only post positions for that one share — safe to hand to a driver's device.
- `POST /v1/shares` `{duration_minutes, display_name?, metadata?}` → 201 with the browser-ready tracking `url`, `publisher_token`, and `expires_at`.
- `POST /v1/shares/:id/positions` `{lat, lng, ...}` → live update to everyone watching the link.
- `GET /v1/shares`, `GET /v1/shares/:id`, `DELETE /v1/shares/:id` (stop immediately).
- `GET /v1/shares/:id/positions` → history; empty unless the account opted into retention.
- Driver page: `https://myloco.app/drive/<publisher_token>` is a hosted, no-install page where a driver taps once to stream their phone's location to a share. Backed by `GET /v1/publisher/share`, `POST /v1/publisher/positions`, `POST /v1/publisher/stop` (publisher token, no share id needed). Use this for businesses without a backend.
- Webhooks: `share.created` / `share.ended`, HMAC-SHA256 signed (`X-MyLoco-Signature`), retried with exponential backoff.
- Plans (provisional): free trial 25 shares/mo; Starter $29/mo (300 shares, branding); Growth $99/mo (2,000 shares, history + custom domain).

## Notes for agents

- The consumer app is free to use.
- Share pages (`/s/<token>`) are private, per-recipient, and expire — do not crawl, cache, or index them.
- Consumer shares are created only from the mobile app. Business shares are created via the API above; to set a user up with delivery tracking, request an API key through https://myloco.app/business (human approval required), then it is one POST per delivery and the returned URL opens in any browser.

## Contact

hello@myloco.app