WayliLoc ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use the WayliLoc mobile application and related services (the "Service").
1. Information We Collect
Account Information: When you create an account, we collect your name, email address, and profile photo (if provided). You may also sign in using third-party services like Google, Apple, or Facebook, in which case we receive basic profile information from those services.
Location Data: Our core functionality requires access to your device's location. We collect GPS coordinates to provide location sharing, location history, and SOS emergency features with real-time tracking. Location data is collected when the app is in use and, with your permission, in the background.
Places and routes: if you use these features, we also store the places you save, the zones you draw (their name and outline), a log of when you enter and leave those zones, and the destination and address of routes you build.
Audio (microphone): If you start an SOS alert and enable audio, the app records sound from your microphone and streams it live to the people connected to you, so they can hear what is happening around you. Recording runs only while your own SOS is active and stops as soon as you end it. No one can turn on your microphone remotely. The audio is transmitted only to your connected users and is not stored on our servers.
Device Information: We collect device type, operating system version, unique device identifiers, and your device's time zone and language to ensure the app works correctly and to send notifications at a sensible time. We also record your battery level with each location point, so the people connected to you can see if your phone is about to run out of power.
Usage Data: We collect basic usage signals such as app opens, session length, app version, device model and country. We use them only to find crashes and slow screens and to make the app work better. We do not track individual taps, and we never use this data for advertising.
2. How We Use Your Information
We use the information we collect to:
- Provide location sharing between connected family members
- Display location history and movement routes
- Send SOS emergency alerts with location data to family members
- Send push notifications (location alerts, SOS alerts, app updates)
- Maintain and improve the Service
- Respond to your support requests
- Ensure the security and integrity of the Service
3. Location Data
Location data is the core of our Service. Here's how we handle it:
- Sharing: Your location is only shared with family members you have explicitly approved. No one else can see your location.
- Storage: Location history is stored securely on our servers. You can view your location history in the app. It is deleted automatically on the schedule in Section 6, and deleting your account erases all of it.
- Background location: The app may collect location data in the background to provide continuous tracking. You can disable background location access in your device settings at any time.
- Accuracy: We use GPS, Wi-Fi, and cellular network data to provide the most accurate location possible.
4. Data Sharing
We do not sell your personal data or location data to third parties. We may share information in the following limited circumstances:
- With your family members: Location data is shared with family members you have connected with in the app.
- Service providers: We use trusted third-party services (cloud hosting, analytics, push notifications) that process data on our behalf under strict confidentiality agreements.
- Legal requirements: We may disclose information if required by law, court order, or to protect the safety of our users.
5. Data Storage and Security
Your data is stored on secure servers provided by our cloud infrastructure partners. We use industry-standard encryption (TLS/SSL) for data in transit and at rest. Access to personal data is restricted to authorized personnel only.
6. Data Retention
We retain personal data for as long as needed to provide the Service and comply with our legal obligations. Specific retention rules:
- Location history — auto-deleted by a daily background job according to the plan in your circle: 3 days if neither you nor anyone connected to you has a subscription, and 30 days if you or someone who follows you does.
- Notifications and alerts — same retention as location history: Free 3 days, paid plans 30 days.
- Account profile (email, display name, avatar) — retained as long as you have an account. Inactive Free accounts (no app open for 3 months) have their personal activity data (location history, alerts, geofences, push tokens) automatically wiped, but the account itself is preserved so that you can return and so we can contact you for re-engagement (only if you opted in to marketing).
- Subscription event log — retained indefinitely as required by App Store / Google Play receipt validation and tax-audit obligations.
- Account deletion — when you request deletion via the in-app Delete Account flow or at wayliloc.com/delete-account, your account and all associated personal data are deleted immediately — the deletion runs while you wait, and nothing is kept afterwards.
7. Marketing & Promotional Emails
We send marketing emails (product news, special offers, tips) only if you have explicitly opted in. We never enable marketing communications by default.
- You will be asked once, on a dedicated screen after your first successful sign-in, whether you want to receive promotional emails.
- Every marketing email contains a one-click unsubscribe link in the footer. Clicking it immediately disables marketing emails for your account.
- To opt out later, use the unsubscribe link in any email we sent you, or email us at support@wayliloc.com.
- Unsubscribing from marketing does not stop transactional emails (password resets, security alerts, billing notices from the app stores) — these we are legally required to keep sending.
- We do not share your email address with third-party advertisers.
8. Your Rights
You have the right to:
- Access your personal data stored by us
- Correct inaccurate personal information
- Delete your account and all associated data
- Disable location sharing at any time through the app or device settings
- Export your data — write to us and we will send it within 30 days
- Opt in / out of marketing and analytics — see Marketing section above
To exercise any of these rights, contact us at support@wayliloc.com.
9. Children's Privacy
WayliLoc offers an optional, parent-managed Child Mode so a parent can see where their child is and help keep them safe. Used in any other way, the Service is intended for people aged 13 and older.
- A parent sets it up: a child can be connected only through a code issued specifically for that purpose. On their own device the adult opens "Add child", is shown exactly what will be collected from the child's phone, and confirms that they are the child's parent or legal guardian — or that they act with the guardian's permission — and that they consent to that collection. A regular circle code cannot be used to connect a child, and we record each confirmation.
- We collect the minimum: a child's profile is anonymous — no email, no password, no social login. We collect only a first name and an optional photo, the device's location, an SOS alert if the parent's plan enables it, and the technical data needed to deliver these. Nothing more.
- Why we collect it: solely to show the child's location to the connected parent(s) and to send an SOS alert — never for advertising, profiling, or sale, and never shared with anyone other than the connected parents.
- The parent stays in control: only the parent can buy a subscription, sign the child out, or delete the account. A parent can disconnect at any time, and disconnecting the last parent permanently deletes the child's account and entire location history. Multiple parents can be linked to one child, and parents cannot see one another.
- The child stays informed: the child always sees who is connected to them and can disconnect any of them directly, as long as at least one parent or guardian remains connected; everyone already connected is notified whenever someone new joins; and the device shows that sharing is on — an ongoing notification on Android, and the system location indicator on iOS during an SOS.
- Retention & deletion: a child's location history follows the same limited retention as other accounts and is auto-deleted on a schedule. A child account that is never linked to a parent, or that no longer has any parent, is permanently deleted with all of its data — immediately when the last parent removes it from the app, and otherwise automatically within a few hours.
We do not knowingly collect personal data from a child under 13 except through this parent-managed Child Mode, and we handle that data in line with COPPA, GDPR-K, and similar children's-privacy laws. If you believe a child's data reached us any other way, contact support@wayliloc.com and we will delete it promptly. Account holders remain responsible for obtaining any consent required before sharing another person's location through the Service.
10. Third-Party Services
To run the Service, we rely on a small number of trusted third-party providers that process data on our behalf, each under appropriate data-protection terms. We use them only for the following purposes:
- Maps, routing & address lookup — to display the map, build routes, and turn coordinates into readable addresses.
- Cloud hosting & authentication — to securely store your account and app data and to sign you in.
- Push notifications & analytics — to deliver alerts and understand how the app is used so we can improve it.
- Subscription management — to process and validate in-app purchases.
- Payment processing — handled entirely by the Apple App Store and Google Play. We never see or store your payment card information.
- Error monitoring & email delivery — to keep the app stable and to send account and (with your consent) marketing emails.
The providers that can receive location data are Supabase, Mapbox and Google Firebase. Subscription management, error monitoring and email delivery are handled by other providers under the same data-protection terms; we will name them on request.
Where location leaves our servers: to show a readable address we send the coordinates being displayed — which may be another person's, including a child's — to our maps provider. Push notifications are delivered through Google's infrastructure and may contain coordinates or a place name. Both providers process this data on our behalf and are not allowed to use it for their own purposes.
These providers may process data outside your country, always under contractual data-protection safeguards. If you choose to sign in with Google, Apple, or Facebook, that provider's own privacy policy also applies to the sign-in.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or sending an email. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us:
- Email: support@wayliloc.com
- Website: wayliloc.com