Privacy policy

Last updated October 17, 2026

The short version: we hold your location only while a share is running, and we delete it when the share ends. Everything below is detail.

What we collect

While a share is active: your coordinates, the display name you typed, and the share’s expiry time. To tell your shares apart from everyone else’s, the app also gets a random ID the first time it opens. It isn’t your name, email or phone number, and it’s never used for advertising. We don’t collect contacts or advertising IDs, and we never tie website analytics to a share or a person.

How long we keep it

For personal shares, your coordinates are erased the moment you tap Stop, or within a minute of the timer running out. The rest of the share record (the link, your display name and the random ID) is deleted 24 hours later, and a group’s meeting point goes with the group. There are no backups of expired shares and no location history.

Group shares

In a group share, your live position and the display name you typed are visible to the other members of that group and to anyone holding the group’s watch link. That’s the point of joining, and the app says so before you join. Joining is always your explicit choice, on your own timer; leave anytime with Stop. The invite link only shows who’s in the group by name, never anyone’s position, and stops working 24 hours after the group is created. Your location is erased exactly like in a solo share, and when the last member ends, the group closes and is deleted within 24 hours.

Purchases

If you buy MyLoco Plus, Apple or Google takes the payment; we never see your card. RevenueCat, the service we use to check subscriptions, receives the app’s random ID and the store receipt, and we keep a record of which ID has Plus and until when. That record lasts as long as the subscription needs it; write to privacy@myloco.app to have it deleted sooner.

Reports

If you report a group member, we store the report: your random ID and theirs, their display name and the reason you gave. A notification carrying only the report’s number reaches us so we can act within 24 hours. A report is kept until we’ve handled it and deleted 90 days after that.

Shares from businesses

Some share links are created by businesses through MyLoco for Business, such as a courier sharing a driver’s ETA with you. The tracking page always names the business. These shares expire and stop updating exactly like personal ones; the difference is that the business may choose to keep its own drivers’ route history for up to 90 days (for proof of delivery), in which case that history belongs to and is controlled by that business. Watching a share sends your location nowhere, unless you choose to see the route (see “Receivers” below).

The business interest form

If you leave your email on the business page, we store what you typed (email, company, and message) and use it only to contact you about MyLoco for Business. Write to privacy@myloco.app and we’ll delete it. Business customers sign in to the dashboard with their email, and their billing goes through Stripe.

Receivers

If a receiver allows their location to see the route, their browser sends their position and the sharer’s to our server, which asks our map provider, Mapbox, for the route and passes it back. We don’t store that position, and the sharer never sees it. Without that permission, the receiver’s location never leaves their device.

Maps and routes

Maps in the app and on share pages come from Mapbox, so Mapbox sees which area of the map is being loaded. When someone watching asks for the route, or a group has a meeting point, the positions involved go through our server to Mapbox to work out the route or arrival time. We don’t store them; Mapbox handles them under its own privacy policy. Mapbox’s telemetry is switched off in the app and its performance metrics are off on share pages; Mapbox still counts map loads for billing, using a random identifier of its own that isn’t linked to you. When you search for a meeting point, what you type and the area the map shows go through our server to Amazon Location Service to find matching places; we don’t store your searches.

Cookies and website analytics

Our marketing and documentation pages can use Google Analytics to count visits, which sets cookies. It only loads if you accept the banner. Decline and nothing is ever requested from Google. Change your mind anytime with “Cookies” at the bottom of the page. Share pages load no analytics either way: a share link is the key to someone’s location, so those URLs are never sent to analytics or advertisers. The demo videos on the home page use YouTube’s privacy-enhanced mode and load only when you tap one. From then on, Google’s privacy policy covers that video.

Who handles data for us

Supabase runs our database, Vercel hosts the website, and Mapbox draws maps and routes. Amazon Web Services finds places when you search for a meeting point. RevenueCat checks subscriptions, Apple and Google take payments, Stripe bills business customers, ntfy.sh delivers report alerts (the report number only), and Google Analytics counts website visits if you accept. Our hosting providers keep standard request logs, including IP addresses, under their own policies. YouTube plays the demo videos if you tap one.

Your rights

“Delete my data” in the app wipes your name and settings from your phone, and your location is already gone when each share ends. To delete the random ID, a purchase record or anything else we hold about you, write to privacy@myloco.app and we’ll delete it.