WayliLoc ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use the WayliLoc mobile application and related services (the "Service").
1. Information We Collect
Account Information: When you create an account, we collect your name, email address, and profile photo (if provided). You may also sign in using third-party services like Google, Apple, or Facebook, in which case we receive basic profile information from those services.
Location Data: Our core functionality requires access to your device's location. We collect GPS coordinates to provide location sharing, location history, and SOS emergency features with real-time tracking. Location data is collected when the app is in use and, with your permission, in the background.
Places and routes: if you use these features, we also store the places you save, the zones you draw (their name and outline), the destination and address of routes you build — including which person in your circle you were heading to, if you routed to someone, and whether the route was a response to their SOS — and the alerts about arriving at or leaving your zones — those alerts are kept for the same period as your location history.
Audio (microphone): If you start an SOS alert and enable audio, the app records sound from your microphone and streams it live to the people connected to you, so they can hear what is happening around you. Recording runs only while your own SOS is active and stops as soon as you end it. No one can turn on your microphone remotely. The audio is transmitted only to your connected users and is not stored on our servers.
Device Information: We collect device type, operating system version, unique device identifiers, and your device's time zone and language to ensure the app works correctly and to send notifications at a sensible time. We also record your battery level with each location point, so the people connected to you can see if your phone is about to run out of power.
Usage Data: We use Firebase Analytics (Google) to find crashes and slow screens and to make the app work better. We send no events of our own, so what reaches us is the standard set the SDK collects by itself: app opens and session length, app version, updates and installs, device model, operating system and language, country, opened notifications and in-app purchases. We do not track individual taps, and we never use this data for advertising. Advertising identifiers (IDFA / AD_ID) are disabled in the app. Collection is on by default and you can turn it off at any time in Settings; on child accounts it is switched off as soon as the account is set up.
2. How We Use Your Information
We use the information we collect to:
- Provide location sharing between connected family members
- Display location history and movement routes
- Send SOS emergency alerts with location data to family members
- Send push notifications (location alerts, geofence alerts, SOS alerts)
- Maintain and improve the Service
- Respond to your support requests
- Ensure the security and integrity of the Service
Legal bases (GDPR Art. 6): we process your data to perform our contract with you (Art. 6(1)(b)) — providing the Service, location sharing and SOS; on your consent (Art. 6(1)(a)) — marketing emails, analytics, access to location and the microphone, and Child Mode; on our legitimate interests (Art. 6(1)(f)) — keeping the Service secure and preventing abuse; and to comply with legal obligations (Art. 6(1)(c)) — tax and accounting records. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
3. Location Data
Location data is the core of our Service. Here's how we handle it:
- Sharing: Your location is only shared with family members you have explicitly approved. No one else can see your location.
- Storage: Location history is stored securely on our servers. You can view your location history in the app. It is deleted automatically on the schedule in Section 6, and deleting your account erases all of it.
- Background location: the "Always" permission powers four features that must keep working while the app is closed or the screen is off: recording your position at the interval from your settings (from 10 minutes to 1 hour depending on your plan; on iPhone from 15 minutes) so the people connected to you see an up-to-date pin; SOS alerts, during which your position refreshes roughly every 20 seconds; geofence alerts when you arrive at or leave a marked place; and keeping the home-screen widget current. On iOS the location stream stays active even when the phone is not moving — otherwise the system suspends the app and recording stops; this applies on every plan, including without a subscription, where your position is recorded once an hour. Android shows a persistent notification the whole time background tracking runs, and iOS keeps the system location indicator on. You can revoke background access in your device settings or switch tracking off in the app at any time — these features will then stop working.
- Accuracy: We use GPS, Wi-Fi, and cellular network data to provide the most accurate location possible.
4. Data Sharing
We do not sell your personal data or location data to third parties. We may share information in the following limited circumstances:
- With your family members: Location data is shared with family members you have connected with in the app.
- Service providers: We use trusted third-party services (cloud hosting, analytics, push notifications) that process data on our behalf under strict confidentiality agreements.
- Legal requirements: We may disclose information if required by law, court order, or to protect the safety of our users.
5. Data Storage and Security
Your data is stored on secure servers provided by our cloud infrastructure partners. We use industry-standard encryption (TLS/SSL) for data in transit and at rest. Access to personal data is restricted to authorized personnel only.
6. Data Retention
We retain personal data for as long as needed to provide the Service and comply with our legal obligations. Specific retention rules:
- Location history — auto-deleted by a daily background job according to the plan in your circle: 3 days if neither you nor anyone connected to you has a subscription, and 30 days if you or someone who follows you does.
- Notifications and alerts — same retention as location history: without a subscription 3 days, with a subscription 30 days.
- Account profile (email, display name, avatar) — retained as long as you have an account. Inactive accounts without a subscription (no app open for 3 months) have their personal activity data (location history, alerts, geofences, push tokens) automatically wiped, but the account itself is preserved so that you can return and so we can contact you for re-engagement (only if you opted in to marketing).
- Subscription event log — kept for 12 months and then deleted automatically. The full payment history is held by the App Store / Google Play and our subscription-management provider; our copy is a technical mirror used for support. It is deleted together with your account.
- Saved places and trips — kept until you delete them or delete your account; they are not on a timer, but of your trips we keep only the 50 most recent ones and drop older ones automatically. They are Premium features: when you leave Premium access stops at once, and if you do not come back within the grace period they are deleted.
- Account deletion — when you request deletion via the in-app Delete Account flow or at wayliloc.com/delete-account, your account and all associated personal data are deleted immediately — the deletion runs while you wait. Copies stay in our backups a short while longer and are then erased automatically: up to 14 days for the backups that include location history, up to 90 days for the rest.
7. Marketing & Promotional Emails
We send marketing emails (product news, special offers, tips) only if you have explicitly opted in. We never enable marketing communications by default.
- You will be asked once, on a dedicated screen after your first successful sign-in, whether you want to receive promotional emails.
- Every marketing email contains a one-click unsubscribe link in the footer. Clicking it immediately disables marketing emails for your account.
- To opt out later, use the unsubscribe link in any email we sent you, or email us at support@wayliloc.com.
- Unsubscribing from marketing does not stop transactional emails (password resets, security alerts, billing notices from the app stores) — these we are legally required to keep sending.
- We do not share your email address with third-party advertisers.
8. Your Rights
You have the right to:
- Access your personal data stored by us
- Correct inaccurate personal information
- Delete your account and all associated data
- Disable location sharing at any time through the app or device settings
- Export your data — write to us and we will send a copy in a machine-readable format within one month; in complex cases we may extend this by two further months and will tell you why
- Opt in / out of marketing emails (see the Marketing section above) and of analytics (the "Analytics" switch in the app's Settings — it takes effect immediately and does not affect how the Service works)
- Portability — receive your data in a machine-readable format and have it transferred to another provider
- Object or restrict — ask us to stop or limit processing that relies on our legitimate interests
- Complain — lodge a complaint with the data-protection authority in your country; in Spain this is the AEPD (aepd.es)
To exercise any of these rights, contact us at support@wayliloc.com.
California residents (CCPA/CPRA): we do not sell your personal information and we do not share it for cross-context behavioural advertising. You may request the categories of personal information we collect, their deletion or correction by writing to support@wayliloc.com. We will never deny you the Service or offer you a different level of service for exercising these rights.
9. Children's Privacy
WayliLoc offers an optional, parent-managed Child Mode so a parent can see where their child is and help keep them safe. Used in any other way, the Service is intended for people aged 13 and older. On first launch we ask how you intend to use the app and let you choose between your own account and joining with a parent's code. We do not verify age and do not ask for documents — we rely on your answer and on the parent's confirmation described below.
- A parent sets it up: a child can be connected only through a code issued specifically for that purpose. On their own device the adult opens "Add child", is shown exactly what will be collected from the child's phone, and confirms that they are the child's parent or legal guardian — or that they act with the guardian's permission — and that they consent to that collection. A regular circle code cannot be used to connect a child, and we record each confirmation.
- We collect the minimum: a child's profile is anonymous — no email, no password, no social login. We collect only a first name and an optional photo, the device's location, an SOS alert if the parent's plan enables it, and the technical data needed to deliver these — nothing beyond the list in this section.
- Sound during the child's SOS: if the child starts an SOS alert from their own device, the app turns on the microphone and streams the sound around the child live to the connected parents only, so they can understand what is happening. It runs solely while the child's own SOS is active and stops the moment it is cancelled. The audio is never stored — not in our database, not in file storage — so it cannot be replayed later. A parent cannot switch on the child's microphone remotely: this is blocked on our servers. The same list is shown to the adult before they confirm consent.
- Why we collect it: solely to show the child's location to the connected parent(s) and to send an SOS alert — never for advertising, profiling, or sale, and never shared with anyone other than the connected parents.
- The parent stays in control: only the parent can buy a subscription, sign the child out, or delete the account. A parent can disconnect at any time, and disconnecting the last parent permanently deletes the child's account and entire location history. Multiple parents can be linked to one child, and parents cannot see one another.
- The child stays informed: the child always sees who is connected to them and can disconnect any of them directly, as long as at least one parent or guardian remains connected; everyone already connected is notified whenever someone new joins; and the device shows that sharing is on — an ongoing notification on Android, and the system location indicator on iOS during an SOS.
- Retention & deletion: a child's location history follows the same limited retention as other accounts and is auto-deleted on a schedule. A child account that is never linked to a parent, or that no longer has any parent, is permanently deleted with all of its data — immediately when the last parent removes it from the app, and otherwise automatically within a few hours. A child account that has not been opened for six months is also deleted with all of its data.
We do not knowingly collect personal data from a child under 13 except through this parent-managed Child Mode, and we handle that data in line with COPPA, GDPR-K, and similar children's-privacy laws. If you believe a child's data reached us any other way, contact support@wayliloc.com and we will delete it promptly. Account holders remain responsible for obtaining any consent required before sharing another person's location through the Service.
10. Third-Party Services
To run the Service, we rely on a small number of trusted third-party providers that process data on our behalf, each under appropriate data-protection terms. We use them only for the following purposes:
- Maps, routing & address lookup — to display the map, build routes, and turn coordinates into readable addresses.
- Cloud hosting & authentication — to securely store your account and app data and to sign you in.
- Push notifications & analytics — to deliver alerts and understand how the app is used so we can improve it.
- Subscription management — to process and validate in-app purchases.
- Payment processing — handled entirely by the Apple App Store and Google Play. We never see or store your payment card information.
- Error monitoring & email delivery — to keep the app stable and to send account and (with your consent) marketing emails.
The providers that can receive location data are Supabase, Mapbox and Google Firebase. Subscription management, error monitoring and email delivery are handled by other providers under the same data-protection terms; we will name them on request.
Where location leaves our servers: to show a readable address we send the coordinates being displayed — which may be another person's, including a child's — to our maps provider. Push notifications are delivered through Google's infrastructure and may contain coordinates or a place name. Both providers process this data on our behalf and are not allowed to use it for their own purposes.
Our website: wayliloc.com uses Google Analytics to count visits and see which pages and buttons are actually used. It is loaded only after you agree in the cookie banner: until then no Google script runs and no cookie is set. Agreeing stores Google's _ga cookies in your browser and sends Google your page path, language, approximate region and device type; we never send your name, email or coordinates. You can withdraw consent at any time through “Cookie settings” in the footer, and clearing the site data removes everything. If a page fails, your browser also sends us a short error report — browser type and language, screen size, the page path and the site build — so that we can fix it; it carries no account data and no coordinates. The web map keeps your sign-in session, language, theme and display preferences in your browser's local storage so that you stay signed in.
These providers may process data outside your country, always under contractual data-protection safeguards. If you choose to sign in with Google, Apple, or Facebook, that provider's own privacy policy also applies to the sign-in.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or sending an email. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us:
- Data controller: Yurii Tsaiher, Spain. Data-protection contact: support@wayliloc.com
- Email: support@wayliloc.com
- Website: wayliloc.com