Privacy policy

The short version

We do not sell your data, we do not run ads, and nobody sees your location except the friends you chose and the level you chose for them. You can delete your location history, or your whole account, from inside the app at any time.

The rest of this page is the long version. The plain-English tour of the controls themselves is on the safety page.

1. What we collect

Your account

• Phone number, used to sign you in with a one-time code.
• Name and username, shown to your friends.
• Apple account identifier, if you connect Apple so you can get back in after changing phones.
• Email address, optional, for account recovery and important notices.
• Profile photo, optional, visible to your friends.

Location

• Location in the background. With your permission the app follows your location using GPS, significant location changes, and visit detection. This is what makes nearby friends, paths, and your own history possible.
• Location history. We keep your location over time to build your personal history and to work out where you and a friend have overlapped.
• Visits. Raw points are grouped into places you actually stopped at, with arrival and departure times.
• Motion. The device tells us whether you are walking, driving, or still, so the app can ease off the GPS and save battery. We do not store the raw sensor data.

What you make

• Photos and video you add to a shared album, along with anything you write on them.
• Names and notes you give to your own places and travels.

Your people

• Friends you have accepted, and the sharing level you set for each of them.
• Groups and trips you create or join. A trip shares live location with its members for the dates it runs.
• Contact matching, only if you allow it, to find people you already know who are already here. We do not keep your address book.

Photo metadata

You can let the app read the date and coordinates stored inside your own photos to fill in where you have been. It reads that metadata only. Your pictures are not uploaded by this feature.

Finding someone in person

The Finder uses the camera, Bluetooth, and, on phones that have it, Ultra Wideband, to point you toward a friend who is already sharing with you and already close. That signal work happens on the two phones. We do not store it.

Your device

• Push token, to deliver the notifications you asked for.
• Device model and iOS version, for compatibility and debugging.

Crashes and usage

• Crash and diagnostic reports when something goes wrong, scrubbed of personal detail before they are sent.
• Anonymized usage counts, recording that a feature was opened, under an identifier that cannot be traced back to your account. These never include your location, place names, or anything you wrote.

2. Why we collect it

We do not use any of it for advertising, we do not sell it, and we do not build advertising profiles.

3. Location gets special treatment

• Your location goes to friends you accepted. Never to strangers, never to the public.
• You set the level per friend: Exact, Nearby, or Hidden.
• Invisible takes you off the map for everyone at once, hiding where you are and where you have recently been, without telling anybody.
• Hidden zones are places you never appear inside, no matter who is looking.
• Trips end themselves. Sharing with a trip's members runs for the dates of the trip and then stops.
• Paths needs both people to agree. With someone you have not met here, it works only after you pair in person by scanning a code on each other’s phone. With a friend, one of you asks and the other has to approve before anything runs, either that once or until they change their mind. Nobody can compare paths with you without your say-so.
• You can stop all of it from inside the app, or by taking the permission away in iOS Settings. Features that need location stop working, and nothing else breaks.

4. Who else ever sees it

Your friends, at the level you set for each of them, and the members of a trip while that trip is running.

The companies that run our plumbing. They are bound to use this data only to provide their service to us.

We may also disclose data if the law genuinely requires it, or to protect someone from harm. We do not sell, rent, or trade your personal information to anyone.

5. How long we keep it

• Account data, for as long as your account exists.
• Location history, until you delete it or delete your account.
• Album photos and video, until you remove them, the album is removed, or you delete your account.
• Crash reports, on a rolling window at our provider, then dropped.
• Everything, permanently deleted when you delete your account. Backups age out on their own shortly after.

6. How it is protected

• Everything travels over HTTPS and TLS.
• Signing in uses one-time codes. There is no password of yours for us to lose.
• The database enforces row-level security, so an account can only ever read its own data and what friends have shared with it.
• Stored photos and video are access-controlled to you and the people you shared them with.
• Server-side jobs run with scoped keys that hold the minimum access they need.

No system is perfect. If we ever discover a breach that affects you, we will tell you and the relevant regulator as the law requires.

7. Your rights

Delete your location history

Me › Settings › Delete Location History permanently removes your GPS data, your visits, and your places.

Delete your account

Me › Settings › Delete Account removes your profile and credentials, all location history and visits, everything you added to albums, your friendships, your stored media, and your notification tokens. It cannot be undone.

Control what you share

Go invisible, set a level per friend, draw a hidden zone, or pause location entirely. All of it is under Me › Settings.

Get a copy

Email privacy@proximitii.app and we will send your data in a standard machine-readable format within thirty days.

If you are in the European Economic Area or the UK

• Legal basis. Consent for location and notifications, and our legitimate interest in running the service for your account data and the things you create.
• Access, correction, erasure, restriction, portability, and objection are all available. Use the app where it offers them, or write to us.
• Withdrawing consent is as simple as turning the permission off in iOS Settings.
• You may also complain to your local data protection authority.

If you are in California

• You can know what we collect and why. It is all on this page.
• You can have it deleted, by deleting your account.
• You will never be treated differently for exercising these rights.
• We do not sell or share personal information as the CCPA defines those words.

8. Children

Proximitii is not for children under 13, or under 16 in the European Economic Area. We do not knowingly collect their data, and if we learn that we have, we delete it. If you believe a child has given us information, write to us and we will act on it.

9. Changes to this policy

When we change something that matters, we will say so in the app or by moving the date at the top of this page. Carrying on using Proximitii after that means you accept the new version.

10. Reaching us

Questions about this policy, your data, or any right above: privacy@proximitii.app. Anything else: support@proximitii.app.