Privacy Policy for Phone Tracker - Family Locator

1. Acceptance of Privacy Policy

1.1. This Privacy Policy explains and lists the transparency information regarding what personal data is collected (Section 2) when you use our Service “Phone Tracker - Family Locator” and the services provided through it (together “Service”), how such personal data will be processed (Section 3) and which rights do you have with respect to your personal data (Section 6).

1.2. WEBPEAK OÜ (with its legal address at Eesti, Harju maakond, Tallinn, Lasnamäe linnaosa, Valukoja tn 8/2, 11415) is the data controller of your personal data ("we", "us", or "our").

1.3. By using the Service, you promise us that (i) you have read, understand, and agree to this Privacy Policy and the data processing described, and (ii) you are over 18 years of age. If you do not agree or are unable to make this promise, you shall not use the Service. In this case, you shall:

  1. delete your account and contact us and request deletion of your data;
  2. cancel any active subscriptions; and
  3. delete the Service from your devices.

1.4. We do not knowingly process personal data from persons under 16 years of age. If you learn that anyone younger than 16 has provided us with personal data, please contact us at finance@webpeakou.net. If any questions remain unanswered or you would like to exercise your privacy rights, please also contact us at finance@webpeakou.net.

1.5. We reserve the right to and may change this Privacy Policy occasionally. If we make any material changes, we will notify you through our Service, email, or by presenting you with a new version of this privacy notice for you to accept if we, for example, add new processing activities or collect additional personal data from you. Your continued use of the Service after the effective date of an updated version of the Privacy Policy will indicate your acceptance of the Privacy Policy as modified.

2. Data categories & sources

2.1. When you use the Service, we process data:

  1. you directly provide for us (for example, name, email address, phone number);
  2. automatically during your interaction with the Service (for example, IP address or online activity data);
  3. we receive about you from third parties (for example, subscription data).

2.2. Data directly provided by you.

  1. Identifiers: This may include your name, phone number, email address. You provide us with this information when you register for the Service, subscribe to our newsletters, or contact us by any other means.
  2. Registration and service data: You provide us with this category of information when you register for the Service and/or go through the registration process and/or use the Service.
  3. Communication with support team: When you contact our support team, you may also provide us with some personal information.

2.3. Data we collect automatically

  1. Device and geolocation data: We collect language settings, Internet Protocol address, time zone, type and model of a device, device settings, OS version, Internet service provider, mobile carrier, hardware ID, and unique device identifiers (including IDFA or GAID).
  2. Log and usage data: We collect information on how you interact with our Service. This may include information about what pages you have viewed, the features and content you interact with, how often you use the Service, how long you are on the Service.
  3. Performance and Diagnostics Data: We collect information related to Services’ performance and diagnostics of Service as result of your use of the Service. This may include crashlytics and diagnostics through logs monitoring.
  4. User acquisition data: We also collect information about how you have found our Service that may include your referring app, URL or advertisement.
  5. Cookies and similar technologies: Our products employ technologies (cookies, SDKs, etc.) to process your data to enhance your user experience, optimize ads, and analyze traffic. These technologies are activated when you interact with our services, visit our website, use our apps, or enable certain features like chats. Disabling these technologies may affect the functionality of certain features, although our products will remain usable.
  6. Meta Pixel: We use Meta Pixel to collect data about your actions on our Service. This data may include which pages you visit, the time you spend on each page, and the actions you take. The data collected is used to measure the effectiveness of our advertising campaigns and to personalize the content and ads presented to you. The information collected through Meta Pixel is transmitted to Facebook. Your browser establishes a direct connection with the Facebook server as soon as you have agreed to the use of tracking technologies requiring your consent. The processing of this data by Facebook takes place within the framework of Facebook’s data policy. To opt-out from Facebook’s interest-based ads follow these instructions from Facebook.

2.4. Data provided by third parties

  1. Subscription data: You need to provide financial account data in order to purchase our Service. We do not collect or store, or have access to full credit card number data, though we may receive some limited information, including subscription terms, subscription ID, data about products or services purchased, date, time and amount of the purchase, the type of payment method used, limited digits of your card number.
  2. Consumption information: When you use our Service and make the purchases at the App Store, we receive the following from Apple, such as Account Tenure, App Account Token (UUID), Consumption Status, Customer Consented, Delivery Status, lifetime Dollars Purchased, lifetime Dollars Refunded, Platform, play Time, Refund Preference, Sample Content Provided, and User Status.
  3. Apple ID account: When you log in with Apple to register an account in the Service, we get personal data from your Apple ID account. This data may include, in particular, your name and verified email address. You may choose to share your real email address or an anonymous one that uses the private email relay service.
  4. Google Account: When you log in with Google to register an account in the Service, we get personal data from your Google Account, such as your name, email address, language preference, and profile picture associated with your Google Account.

2.5. Please note that we do not collect personal data about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, and genetic and biometric data. We also do not collect any information about criminal convictions and offenses.

2.6. FOR CALIFORNIA RESIDENTS ONLY: Certain data we collect may qualify as Sensitive Personal Information ("SPI") under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, Cal. Civ. Code § 1798.140(ae) ("CCPA/CPRA"). The following categories of SPI may be collected:

  1. Precise geolocation data — GPS coordinates accurate to 1,850 feet (approximately 564 meters) or less, collected through the Phone Tracker/Location sharing feature;

We use SPI only for the purposes described in Section 3 and, where applicable, limited to the purposes permitted under CCPA/CPRA regulations § 7027 (including providing the requested service, fraud prevention, and technical support).

2.7. We also undertake to collect only such amounts and types of personal data strictly required for the purposes mentioned in Section 3 (Purposes & lawful bases for data processing). To the extent necessary for those purposes, we take all reasonable steps to ensure that personal data is reliable, accurate, complete, and current for its intended use.

3. Purposes & lawful bases

3.1. We collect and utilize your data primarily to provide the Service and continuously improve it with the help of analytics. Furthermore, we aim to attract new customers to our products. Below, you may find a more comprehensive breakdown of how we use your information.

Reasons for Processing

Types of data

 Lawful bases

To use all Service functions.

It is necessary to set up a profile and identify the user. The email address is additionally used to contact the user.

Identifiers. Name, phone number, email address

Performance of the contract.

Your consent.

To use all Service functions. To share real-time location with circle members, provide location history, and enable geofencing alerts.

Geolocation data. GPS coordinates

Performance of the contract. Your consent.

To use all Service functions. To allow the user to invite contacts to location-sharing groups (Circles)

Contacts data. Contact names and phone numbers from your device address book, accessed only when you choose to invite someone.

Performance of the contract. Your consent.

To use Service functions. To allow the user to set a profile photo.

Device functions. Camera access.

Performance of the contract. Your consent.

To use Service functions. To allow the user to upload a profile photo from their device.

Files and folders. Access to gallery and photos.

Performance of the contract. Your consent.

For analytical and marketing purposes. To provide, improve, and develop the Service.

Device and Geolocation Data. Includes language settings, Internet Protocol address, time zone, type and model of a device, device settings, OS version, Internet service provider, mobile carrier, hardware ID, and unique device identifiers (including IDFA or GAID).

Performance of a contract with you.

Necessary for our legitimate interests

For analytical and marketing purposes. To provide, improve, and develop the Service.

Log and Usage Data. Information about how you use our Service and user activity within the Service.

Performance of a contract with you.

Necessary for our legitimate interests

For app functionality and analytical purposes. To fix crashes & bugs as well as improve and develop the Service.

Performance and Diagnostics Data. Crashlytics, diagnostics through logs monitoring.

Performance of a contract with you.

Necessary for our legitimate interests.

It is required to identify the subscription the user selects, its duration, and its expiration.

Subscription data. The transaction data, ID subscriptions, and subscription terms. This is the information we get from the payment system when you buy our subscription.

Performance of the contract.

Your consent.

To participate in reviewing user refund requests to the Apple App Store or our suppliers to prevent fraudulent and deceptive actions by users.

Consumption Information. Account Tenure, App Account Token (UUID), Consumption Status, Customer Consented, Delivery Status, lifetime Dollars Purchased, lifetime Dollars Refunded, Platform, play Time, Refund Preference, Sample Content Provided, and User Status.

Your consent

Necessary for our legitimate interests

For analytical and marketing purposes. To provide, improve, and develop the Service.

User acquisition data. Information about your referring app, URL or advertisement

Your consent.

Necessary for our legitimate interests.

2.2. We rely on the following legitimate interests:

  1. communication regarding your use of the Service: promotion of our Service in a measured and appropriate way;
  2. analysis of your use of the Service: understanding users’ preferences to provide with better user experience;
  3. personalization of our ads: promotion of our Service in targeted way;
  4. defence of our legal rights and interests: our need to protect ourselves from legal claims or other actions that impairs our operations or reputation;
  5. enforcement of Terms of Use: enforcement of legal rights, preventing and addressing non-compliance with Terms of Use.

4. Third-party data disclosures

4.1. Apart from our employees, contractors, and affiliated companies (if any), we share information with the range of third parties that helps operate, provide, improve, integrate, customize, support, and market our Service (for California residents - please check section 4.5). We require all third parties to respect the security of your personal data and treat it under the law. The types of third parties we share information with include, in particular:

4.2. Service providers: We may engage the partners mentioned below to carry out specific services or business functions on our behalf using their technologies and resources, based on our instructions. We do not allow our third-party service providers to use your personal data for their purposes and only permit them to process your personal data for specified reasons defined in this Privacy Policy.

Its Service

Purpose of usage

Link to privacy materials of the Third Party

Apple App Store

App publishing

https://www.apple.com/legal/privacy/en-ww/

Amplitude

Product analytics and event tracking

https://amplitude.com/privacy

Firebase

User authentication and database management

https://policies.google.com/privacy?hl=en-US

Sentry

App development, performance & error monitoring

https://sentry.io/privacy/

Appsflyer

Product analytics and event tracking

https://www.appsflyer.com/legal/processing-customer-data/

Meta Ads

Marketing management

https://www.facebook.com/privacy/policy/

Google Analytics

Product analytics and event tracking

https://policies.google.com/privacy?hl=en-US

TikTok

Marketing management

https://www.tiktok.com/legal/privacy-policy

Snapchat

Marketing management

https://values.snap.com/privacy/privacy-policy

AWS

Cloud storage

https://aws.amazon.com/privacy/

Bing

Marketing management

https://www.microsoft.com/en-us/privacy/privacystatement

Supabase

Cloud storage and user authorization

https://supabase.com/privacy

Upstash

Temporary data storage

https://upstash.com/trust/privacy.pdf

Cloudamqp

Temporary data storage & server functioning

https://www.cloudamqp.com/legal/privacy_policy.html

Elastic

App development, performance & error monitoring

https://www.elastic.co/legal/privacy-statement

Fly.io

App development, performance & error monitoring

https://fly.io/legal/privacy-policy/

IP-API

Product analytics

https://ip-api.com/docs/legal

4.3. Public authorities, including law enforcement agencies: We may use and disclose personal data to enforce our legal rights or Terms of Use, to protect our rights, privacy, safety, or property, and/or that of our affiliates, you or others, and to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, or in other cases provided for by law.

4.4. Third parties as part of a merger and acquisition: As we develop our business, we may buy or sell assets or business offerings. Customers’ information is generally one of the transferred business assets in these types of transactions. We may also share such information with any affiliated company (if any) and may transfer such information in the course of a corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.

4.5. FOR CALIFORNIA RESIDENTS ONLY: Within the meaning of CCPA/CPRA, we do not “sell” personal information, as transfers of personal information to our service providers (listed in Section 4.2) do not constitute a sale or sharing. At the same time, our use of cookies and tracking technologies (as described in Section 2) may constitute "sharing" of personal information for cross-context behavioral advertising purposes under CCPA/CPRA. California residents have the right to opt out of such sharing as described in Section 6.4 below.

5. Cross-border data transfer, data security & retention

5.1. We may transfer personal data to employees, contractors and third parties from countries other than the country in which the data was originally collected in order to provide the Service and for purposes indicated in this Privacy Policy. If these countries do not have the same data protection laws as the country in which you initially provided the information, we deploy special safeguards.

5.2. In particular, if we transfer personal data from the EEA to countries with not adequate level of data protection, we use one of the following legal bases: (i) Standard Contractual Clauses approved by the European Commission (details available here), or (ii) the European Commission adequacy decisions about certain countries (details available here).

5.3. We have implemented appropriate security measures to prevent your data from being accidentally lost, used, accessed unauthorized, altered, or disclosed. In addition, we limit access to your data to employees, agents, contractors, and other third parties who have a business need to know. They will only process your data based on our instructions and are subject to a duty of confidentiality.

5.4. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

5.5. We also use technical data encryption tools like SSL protocols to secure your data.

5.6. We will store your personal data for as long as it is reasonably necessary for achieving the purposes set forth in the Terms of Use and Privacy Policy, which includes the period during which you have an account with the Service. We will also retain and use your personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

5.7. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your data, the purposes for which we process your data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

6. User legal rights

6.1. This Section explains legal rights applicable to users that are residents of certain economic areas, countries, or states as set forth below. Except as otherwise provided herein, you may exercise your legal rights by contacting us at  finance@webpeakou.net. To ensure that we properly handle the requests you make regarding your rights, we are required to verify those requests. Depending on the type of request and the product used by you, this may include your name, age, email, date of subscription purchase, date of last activity, date of account creation, or some other Service use data that will reasonably identify you as an owner of the account, etc. We may also ask you for additional proof of identity, if necessary, but we strive to ask less according to the data minimization principle.

6.2. EEA residents

As a data subject, you have the right to interact with its data directly or through a request to us. This section describes these rights and how you can exercise them:

Right

Description

Right to access

You can request an explanation of the processing of your personal data.

Right to rectification

You can change the data if it is inaccurate or incomplete.

Right to erasure

You can send us a request to delete your personal data from our systems. We will remove them unless otherwise provided by law.

Right to restrict the processing

You may partially or completely prohibit us from processing your personal data.

Right to data portability

You can request all the data you provided to us and request to transfer data to another controller.

Right to object

You may object to the processing of your personal data.

Right to withdraw consent

You can withdraw your consent at any time.

Right to file a complaint

If your request was not satisfied, you could file a complaint to the regulatory body.

To exercise your rights, contact us. If your request is not satisfied, you can submit a complaint to your local Data Protection Authority. You may find it here.

UK residents enjoy the same rights but may lodge a complaint at the other Authority in the UK – Information Commissioner’s Office.

You can contact them at 0303 123 1113 or go online at www.ico.org.uk/concerns.

6.3. US residents

You, as data subjects, have some special privacy rights. To use them, please contact us at finance@webpeakou.net.

Please note! Depending on the state and legislative requirements, we have from 30 to 60 days to exercise your request, with the right to postpone it for 30 days more.

If your complaint is not satisfied, you can file a complaint with the Federal Trade Commission.

Your rights vary depending on the laws that apply to you, but may include:

Right

Description

Area

Right to access

You can request an explanation of how your personal data is processed.

  • California;
  • Colorado;
  • Connecticut;
  • Indiana;
  • Iowa;
  • Montana;
  • Tennessee;
  • Texas;
  • Utah;
  • Virginia.

Right to correct

You can change the data if it needs to be more accurate or complete.

  • California;
  • Colorado;
  • Connecticut;
  • Indiana;
  • Montana;
  • Tennessee;
  • Texas;
  • Virginia.

Right to delete

You can request to delete your personal data from our systems.

  • California;
  • Colorado;
  • Connecticut;
  • Indiana;
  • Iowa;
  • Montana;
  • Tennessee;
  • Texas;
  • Utah;
  • Virginia.

Right to portability

You can request all the data you provided to us and request to transfer data to another controller.

  • California;
  • Colorado;
  • Connecticut;
  • Indiana;
  • Iowa;
  • Montana;
  • Tennessee;
  • Texas;
  • Utah;
  • Virginia.

Right to opt out of sales and sharing

The right to opt out of the sale of personal information to third parties and the right to opt out of sharing personal information for cross-context behavioral advertising purposes.

  • California;
  • Colorado;
  • Connecticut;
  • Indiana;
  • Iowa;
  • Montana;
  • Tennessee;
  • Texas;
  • Utah;
  • Virginia.

Right to opt out of certain purposes

The right to opt-out of processing for profiling/targeted advertising purposes.

  • Colorado;
  • Connecticut;
  • Indiana;
  • Montana;
  • Tennessee;
  • Texas;
  • Utah;
  • Virginia.

Right to opt out of the processing of sensitive data

The right to opt-out of processing of sensitive data.

  • California.

Right to opt in for sensitive data processing

The right to opt in before processing sensitive data.

  • Colorado;
  • Connecticut;
  • Indiana;
  • Montana;
  • Tennessee;
  • Texas;
  • Virginia.

Right against automated decision-making

A prohibition against a business making decisions about a consumer based solely on an automated process without human input

  • California;
  • Colorado;
  • Connecticut;
  • Indiana;
  • Iowa;
  • Montana;
  • Tennessee;
  • Texas;
  • Virginia.

Private right of action

The right to seek civil damages from a controller for statute violations.

  • California.

Please note! Some states do not have privacy laws. The rights of residents of such states are governed by U.S. federal law. If your state is missing from the list, please contact us.

6.4. Do Not Sell or Share My Personal Information (California Residents). 

Pursuant to the CCPA/CPRA, California residents have the right to opt out of the sale of their personal information and the right to opt out of the sharing of their personal information for cross-context behavioral advertising purposes.

Within the meaning of CCPA/CPRA, we do not “sell” personal information, as transfers of personal information to our service providers (listed in Section 6.2) do not constitute a sale or sharing. At the same time, our use of cookies and tracking technologies (as described in Section 3) may constitute "sharing" of personal information for cross-context behavioral advertising purposes under CCPA/CPRA. California residents have the right to opt out of such sharing as described in Section 10.4 below.

How to opt out. You may submit an opt-out request using the method described below:

  1. Email: send a request to finance@webpeakou.net.

6.5 Limit the Use of My Sensitive Personal Information (California Residents). 

Under CCPA/CPRA, California residents have the right to direct us to limit the use and disclosure of their Sensitive Personal Information ("SPI") to the purposes reasonably necessary to provide the services you request, and to certain other permitted purposes.

What SPI we process. Depending on the product you use, we may process the following categories of SPI:

  1. Precise geolocation data (GPS coordinates accurate to approximately 564 meters or less);

How to submit a Limit request. Please use the method described below:

  1. Email: send a request to finance@webpeakou.net.

You may limit each category of SPI separately or all categories at once.

6.6. Access rights under California’s Shine the Light (California Residents)

California also provides its residents with additional access rights. Under the Shine the Light law, the residents may ask companies once a year what personal information they share with third parties for those third parties' direct marketing purposes. Learn more about what is considered to be personal information under the statute.

To obtain this information from us, please send an email message to finance@webpeakou.net, which includes “Request for California Shine the Light Privacy Information” on the subject line and your state of residence and email address in the body of your message. Please be aware that not all information sharing is covered by the “Shine the Light” requirements and only information on covered sharing will be included in our response.

6.7. Do-not-track requests

Some web browsers may transmit “Do Not Track” (DNT) signals. There is currently no industry standard for responding to DNT signals, and we do not respond to such signals.

We do, however, recognize and honor the Global Privacy Control (GPC) signal. The GPC is a browser-based opt-out signal that, when detected, is treated as a valid request to opt out of the sale or sharing of personal information under applicable U.S. state privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). If your browser sends a GPC signal, we will apply it to your device and browser accordingly.

For more information about your privacy rights, please see Section 10.4.

6.8. Canadian residents

As data subjects, you have privacy rights prescribed by Canada’s federal and provincial privacy laws.

If you want additional information, please contact us by filling a request.

If you are not satisfied with the response, you can file a complaint with the Office of the Privacy Commissioner of Canada.

7. Contact us

If you have any questions about this Privacy Policy and/or want to exercise your legal rights, you may contact us at finance@webpeakou.net.

Last updated: 31 May 2026