LockSafe Privacy Policy
The short version: your location is collected only while you have an active emergency, shared only with contacts you invited who accepted, and deleted the moment the emergency ends. No ads, no analytics companies, no data sales.
What we collect and when
Always (account data): your name, email, optional phone number, and your trusted contacts' names with their phone/email — all provided by you. Plus device push tokens and a security log of events (never locations).
Only during an active emergency: your device sends its location (with accuracy and battery level) roughly every 10 seconds. This starts only when you press the emergency button and stops when the emergency ends — enforced by the app, the server, and the database itself.
Never: location outside emergencies, browsing habits, advertising identifiers, or background tracking of any kind.
About the "Always" location permission. LockSafe asks for it, and you can say no. We ask because in an emergency your phone usually ends up in a pocket or locked — and without it, sharing stops the moment your screen locks, exactly when your contacts need to see you. Granting it does not mean you are tracked: collection happens only while an emergency you started is running, enforced in three independent places — the app stops collecting, the server refuses location outside an active session, and the database deletes every point the instant the emergency ends. Decline and LockSafe still works, but sharing pauses whenever your screen is locked, and the app says so plainly.
What your contacts see
During an emergency, each verified contact gets a private link showing your live location, when it last updated, your battery level, and (if you added it) your phone number. When the emergency ends, the link stops working permanently.
Retention and deletion
- Emergency location data is deleted the moment the emergency ends; a never-ended emergency auto-ends after 24 hours.
- If an invited contact declines, we delete their phone/email and keep only an irreversible hash so they cannot be re-invited.
- Account deletion (in Settings) is immediate and removes your profile, contacts, devices, and any location data.
Who processes data for us
Infrastructure providers only: Supabase (database, EU region), Vercel (hosting), Twilio (SMS), Resend (email), Cloudflare (network security), Sentry (error reports, scrubbed of locations and links), Expo (app builds). We do not sell or share data with anyone else.
Contact
Contact details will be published here at launch.