Privacy Policy
AI Family Locator (“Family Locator: Kids Tracker” on the App Store and “AI Family Locator” on Google Play)
Effective date: 29 September 2026
Last updated: 6 October 2026
Who we are. The AI Family Locator mobile application (“the App”) is developed and operated by YeahApps Limited (“we”, “us”, “our”), which is also the data controller responsible for your personal data. Contact: y@yeahapps.me.
What this policy covers. This policy explains what personal and sensitive data the App collects on both the iOS (App Store) and Android (Google Play) versions, why we collect it, how it is used, who it is shared with, how long we keep it and the choices and rights you have. It applies to the App and to our related websites at this domain.
1. The short version
- We share your location only with the family members you invite to your circle and who accept your invitation on their own device.
- We do not sell your personal data, do not use it for advertising and do not track you across other companies’ apps or websites. We do not use third-party advertising SDKs and we do not request App Tracking Transparency permission because we do not track you.
- Optional Family Wellness reads only step count and sleep data after you grant Apple Health (iOS) or Health Connect (Android) access. Raw health records stay on your device. If you separately enable “Share wellness with family”, only today’s step total, sleep duration and non-medical sleep-quality score are sent to our server and shown to accepted family members.
- We collect the data needed to run the family location service, nothing more.
- You can delete your account and data at any time — in the App (Profile → Delete account) or by writing to y@yeahapps.me from the web, even if you have uninstalled the App.
- Data sent to and from our servers is encrypted in transit (HTTPS/TLS).
2. Data we collect, why, and whether you must provide it
The table below lists every category of data the App may collect, the purpose, and whether it is required. “Required” means the feature cannot work without it; you can refuse or withdraw consent at any time, but the related feature will not function.
| Data | Why we use it (and legal basis under GDPR) | Required? |
|---|---|---|
| Precise and approximate location, including background location if you allow “Always”, and location history | To show you on your family’s private map, build location history, detect arrival/departure at places you set, send SOS alerts with your position and produce driving reports. Legal basis: performance of our contract with you and your consent for precise/background location and for sharing with your circle. | Yes for core location features |
| Driving and movement data derived on your device from location and motion sensors: trips, speed, abrupt braking or acceleration | Driving reports and speed alerts for your family. Legal basis: contract and consent. | No (optional, needs motion permission) |
| Battery level of your device | Shown to your family members and used for low-battery alerts. Legal basis: contract and consent. | Yes for low-battery alert |
| Name, profile photo / avatar | To show who you are on the family map. Avatars you choose are uploaded to our image storage. Legal basis: contract. | Yes (name); avatar optional |
| Phone number and email address | To create and sign in to your account, restore your account and invite family members. If you choose a person from your Contacts, only the phone number you select is used to send the invitation; your address book is never uploaded. Legal basis: contract and consent for contacts access. | Yes for account/invitations |
| Messages you send to the Family AI assistant | To generate answers. Your recent conversation is sent to our server and processed by an AI model provider acting on our behalf as a processor. Chat history is stored on your device. Legal basis: contract and consent. Please do not include sensitive personal data about yourself or others in AI chats. | No (optional) |
| Photo metadata (Journey feature, optional) | The App reads only the capture time and geotag of photos on your device to draw your path. Your photos never leave your device. If you choose to share your Journey with family, only the resulting visits (coordinates, start and end time, number of photos) are uploaded. Legal basis: consent. | No (optional) |
| Identifiers: account ID, device/installation ID, push notification token, and advertising/device identifiers used only by our analytics and crash tools | To operate your account, deliver notifications, prevent abuse and keep the service secure. We do not use these identifiers to track you across other companies’ apps or websites. Legal basis: contract and legitimate interests (security). | Yes for core service |
| Purchase and subscription status | To unlock and restore Premium. Payments are processed by Apple (App Store) or Google (Google Play); we never receive your card or full payment details. Legal basis: contract. | Only if you buy Premium |
| Family Wellness (optional): daily step count, sleep duration and non-medical sleep-quality score | Apple Health / HealthKit on iOS and Health Connect on Android are read only after you grant the relevant system permissions. Raw health records are processed on your device and are never uploaded. If, and only if, you separately enable “Share wellness with family”, the App sends a daily summary containing only step total, sleep duration and our non-medical sleep-quality estimate to our server so accepted family members can see it. Legal basis: explicit consent. | No (optional) |
| Usage and diagnostic data: app interactions/events and crash reports | To understand which features are used and to fix crashes and improve reliability. This data is aggregated or pseudonymised and is not used for advertising. Legal basis: legitimate interests (service improvement). | No (you can limit analytics in device settings) |
| IP address | To determine your approximate country for regional settings (for example the map provider) and for security/abuse prevention. Legal basis: legitimate interests. | Yes |
We do not receive raw Apple Health or Health Connect records on our servers. Family Wellness is processed locally as described below. When you explicitly turn on family wellness sharing, our server receives only the current daily aggregate described in section 2a; it does not receive sleep-stage records, individual step samples or other health categories. We do not collect financial account details, government IDs, biometric data, or your private messages/SMS. We do not access your microphone or camera unless you use a feature that requires it, and we do not collect your photos.
2a. Optional Family Wellness: Apple Health and Health Connect
Family Wellness is optional and read-only. On iOS we request read access only to the Apple Health categories you choose: activity (step count, walking/running distance, flights climbed, active energy, exercise minutes), sleep analysis, heart and breathing (resting heart rate, heart-rate variability, respiratory rate, oxygen saturation) and walking steadiness. Categories other than steps and sleep are shown only to you, on your device, and are never shared or uploaded. On Android we request read access to steps and sleep through Health Connect. You may refuse either permission. Location sharing and all unrelated features continue to work without health access.
The App reads the current day’s step total and the recent overnight sleep interval needed to prepare today’s summary. Sleep stages and recorded awake intervals may be used locally to calculate duration and continuity. We calculate a sleep-quality percentage on the device from sleep duration and recorded interruptions. It is an everyday wellness estimate only, not a medical measurement, diagnosis, treatment recommendation or emergency alert. Missing readings are not fabricated.
Raw records stay on your device. We do not upload individual HealthKit or Health Connect samples, sleep stages, timestamps for individual steps, or any other raw health records. We do not send health records or wellness summaries to analytics, crash-reporting services, advertising services or AI providers, and we never sell or use them for advertising, marketing, profiling, research or model training.
Family sharing requires a second, separate choice. Granting Apple Health or Health Connect permission does not share anything with your family. Only after you turn on “Share wellness with family” does the App send our server one privacy-minimized daily summary: the date, total steps, total sleep minutes and the non-medical sleep-quality score, plus the source platform (iOS or Android). Only authenticated family members you have connected with can request that summary.
Retention and deletion: our server keeps only your latest daily wellness summary; publishing a new day removes the previous stored summary. Turning family wellness sharing off, disconnecting Apple Health in the App or signing out deletes your stored wellness summary from our server (if you are offline, deletion is retried the next time you use the App signed in to that account). Account deletion also deletes it. The original Apple Health or Health Connect records remain controlled by you and the operating-system provider and are never modified by Family Locator.
Your choices: you can leave family sharing off and still view your own available wellness data locally. You can turn family sharing off at any time in the App. You can also revoke Apple Health access in iOS Health settings or revoke Health Connect access in Android settings / Health Connect. Revoking system access stops future reads; it does not delete your original health records.
2b. Home Screen and Lock Screen widget (iOS)
If you add the Family widget, it shows your family members’ names, photos, current place or street, movement status, last update time and battery level on your Home Screen or Lock Screen. This information is stored only on your device, in a container shared between the App and its widget, and is refreshed from our servers using your existing session. The widget never shows or stores health data. Lock Screen widgets can be visible to people who see your locked phone; remove the widget at any time to stop showing it. Signing out clears the widget data.
3. Device permissions we request
- Location (while using and background “Always”) — to share your position with your circle and power alerts. Background location is optional.
- Motion & Fitness — to detect driving and movement for driving reports.
- Contacts — only to let you pick a phone number to invite. Your full address book is not uploaded.
- Photos — only for the optional Journey feature, to read capture time and geotags on your device; photos are not uploaded.
- Notifications — for arrival/departure, SOS, low-battery and account alerts.
- Apple Health / HealthKit (iOS, optional) — read-only access to the categories you choose (activity, sleep, heart and breathing, walking steadiness) for Family Wellness. Raw health records stay on your device. A daily aggregate leaves the device only if you separately enable family wellness sharing, as detailed in section 2a.
- Health Connect (Android, optional) — read-only access to steps and sleep for Family Wellness. Raw Health Connect records stay on your device. A daily aggregate leaves the device only if you separately enable family wellness sharing, as detailed in section 2a.
You can change or withdraw any permission at any time in iOS Settings → AI Family Locator or Android Settings → Apps → AI Family Locator → Permissions. Denying location access prevents us from sharing your position with your family, but the App remains usable to a limited extent.
4. How we use your data
- Provide, operate and maintain the family location sharing service.
- Share your location, history, places, battery level, driving reports and SOS alerts only with family members you invite and who accept.
- If you explicitly enable Family Wellness sharing, show those accepted family members only your latest daily wellness summary (steps, sleep duration and non-medical sleep-quality score).
- Send you service and safety notifications you have enabled.
- Provide the Family AI assistant when you choose to use it.
- Process purchases and restore entitlements.
- Detect, prevent and address fraud, abuse and security incidents.
- Diagnose crashes and improve the App.
- Comply with legal obligations.
We do not use your personal data to serve advertising, and we do not build advertising profiles.
5. Who can see your data / who we share it with
- Your family circle — the people you invite who accept. They can see your location, history, places, battery level, driving reports and SOS alerts. Joining always requires the member to install the App and accept the invitation on their own device. Do not invite anyone you do not trust to see this information.
- Service providers / sub-processors that process data on our behalf under contract and only for the purposes described above:
- Cloud hosting of our backend and databases;
- Google Firebase (push notifications, analytics, crash reporting, remote configuration);
- Cloudinary (profile avatar storage);
- An AI model provider (Family AI assistant);
- IP geolocation and map tile providers (for regional settings and the map).
- Payment providers — Apple and Google process purchases; we receive only a purchase/entitlement status, not your card details.
- Professional advisers, authorities and courts — only where required by law or to establish, exercise or defend legal claims, and only after a lawful request.
- A successor entity — if we are involved in a merger, acquisition or sale of assets, your data may be transferred. We will require the recipient to honour this policy or obtain your consent.
We do not sell or “share” personal data for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA, and we do not share data with data brokers or advertisers.
6. Data retention
We keep personal data only as long as necessary for the purposes described above:
- Location history — kept while your account is active so your family can see it, and you can delete locations individually where the App allows.
- Account data, profile, places and location history — deleted when you delete your account, as described in section 7, and otherwise within 30 days of a deletion request.
- Purchase records — kept as long as required for tax, accounting and legal purposes.
- Crash and analytics data — kept by Firebase according to its retention settings, and generally for no longer than 14 months.
- Security and abuse logs — kept for up to 12 months.
7. Deleting your account and data
You can delete your account and associated data at any time:
- In the App: Profile → Delete account.
- On the web (no App needed): send an email from any address to y@yeahapps.me with the subject “Delete my account” and the phone number or email associated with your account. We will verify the request and complete the deletion.
When you delete your account we delete your profile, places, location history and associated personal data from our servers within 30 days, except where we must retain limited records to comply with law (for example purchase/tax records). Deleting your account does not automatically cancel an App Store or Google Play subscription — you must cancel the subscription separately in the relevant store.
8. Security
Data exchanged with our servers is transmitted over encrypted connections (HTTPS/TLS) and stored with access controls and least-privilege rules. We restrict access to personal data to personnel and providers who need it. No system is completely secure, but we work to protect your data and will notify you and the relevant authorities of a personal data breach where required by law.
9. Your privacy rights
Depending on where you live, you may have some or all of the following rights. To exercise any of them, email y@yeahapps.me. We will respond within the time required by applicable law (generally 30 days, or 45 days under the CCPA) and may need to verify your identity.
- GDPR / UK GDPR (EEA, UK, Switzerland): access, correction, deletion, restriction of processing, portability (data export), objection to processing based on legitimate interests, and withdrawal of consent at any time (without affecting processing already carried out). You may lodge a complaint with your local data protection authority.
- CCPA / CPRA (California): right to know the categories and specific pieces of personal information we collect, the sources, purposes and third parties; right to delete; right to correct; right to opt out of sale or sharing (we do neither); right to limit use of sensitive personal information (we use sensitive location data only to provide the service); and right to non-discrimination for exercising your rights.
- Other regions (for example Brazil LGPD, Canada PIPEDA, Australia Privacy Act and APP) may grant similar rights; we will honour lawful requests.
Authorised agents may submit requests on your behalf with proof of authorisation. We do not sell personal data and therefore do not offer a “Do Not Sell” link, but you can contact us with any privacy request.
10. Children’s privacy
Families use the App to see where their children are, so a child may be a member of a family circle. We take children’s privacy seriously:
- A child joins only through an invitation that a parent or legal guardian creates and that is accepted on the child’s own device. A parent or guardian should set up and supervise the child’s participation and should be the account holder.
- We collect a child’s data only to provide the family location service. We never use children’s data for advertising or behavioural targeting and we do not build profiles of children for marketing.
- For the Google Play version, we comply with the Google Play Families Policy and the Families Self-Certified Ads SDK requirements; our App contains no advertising SDKs. For the App Store version we comply with applicable children’s privacy rules (COPPA and equivalent laws).
- We do not knowingly collect more data from children than is necessary for the service. If you believe a child has used the App without a parent’s or guardian’s consent, contact us at y@yeahapps.me and we will delete the data and account.
11. International data transfers
Our providers may process data outside your country, including in the United States. Where required, we put in place appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses and, where applicable, the UK Addendum, together with additional technical and organisational measures.
12. Third-party services and app-store disclosures
This policy is intended to match the privacy disclosures we make in the App Store privacy labels and the Google Play Data safety section. The App does not use advertising SDKs, does not track you across other apps or websites, and does not request App Tracking Transparency or Android advertising-ID permissions for tracking purposes. Links to third-party services (for example the map provider) are governed by their own privacy policies.
13. Changes to this policy
We may update this policy from time to time. We will update the “Effective date” and “Last updated” dates at the top and, for material changes, notify you in the App or by other appropriate means before the change takes effect. Continued use of the App after an update means you accept the revised policy.
14. Contact us
YeahApps Limited
Email: y@yeahapps.me
For privacy requests, data access, correction, export or deletion, or any question about this policy, contact us at the email above. We aim to reply within 2 business days and to resolve formal requests within the time required by law.