FriendTrack Privacy Policy

FriendTrack lets you share your live location with people you choose, for a duration you choose, on maps of the places you visit together. Privacy is the core of the product, so this policy is written to be read: it describes exactly what data FriendTrack handles, why, and what happens to it.

Who is responsible

The data controller is TNS Holding ApS (CVR 26694264), Denmark. For anything in this policy — questions, requests, complaints — contact privacy@friendtrack.net.

What we collect and why

Phone number

You sign in with your phone number: we send you a one-time code by SMS and verify it. Your phone number is used to deliver that code and to derive your account identifier — a keyed cryptographic hash. The identifier cannot be reversed back into your phone number, and your phone number is not stored as part of your profile. Group invitations addressed to your phone number are likewise stored only in hashed form.

Profile

Your name or display name, and an optional avatar image. These are shown to members of your Groups so they can recognise you.

Location

Your GPS position is the heart of the app, and it is handled narrowly:

• You choose who sees it. Your position is shared only with the Groups you actively start sharing to. Nothing is shared by default.
• Your app only sends it while you're sharing. Your app sends your position to FriendTrack only while you have an active sharing session; the moment sharing ends, your app stops sending it. While you are sharing, we hold your live position in memory to relay it to your Group members and to place you on your venue map — we never write it to history (see below).
• You choose for how long. Sharing is time-bound and stops automatically when the duration you picked runs out. You can stop it at any time.
• We keep no history. FriendTrack does not record tracks, routes, or movement history. Your live position is streamed to your Group members and held in memory; only your most recent shared position is retained as part of a Group's stored state, and it is removed when you leave the Group or the Group is deleted.

Device and notifications

A push-notification token identifying your device, so Group members can reach you with notifications (for example a meeting-point announcement). Notifications are routed through Azure Notification Hubs and delivered by your platform's push service — Google Firebase Cloud Messaging on Android, Apple Push Notification service on iOS.

Crash diagnostics

If the app crashes, a crash report (stack trace, device model, OS version, app version) is sent to Sentry, stored in their EU (Frankfurt) region. We have configured Sentry not to collect personal information by default, and crash data is retained for 30 days. Crash reporting cannot identify your location or your Groups.

Maps you upload

If you use the Map Editor, the venue images and map data you upload are stored with your account. Maps belong to you alone — they are not linked to Groups or to other users' data.

What we never collect

• No advertising identifiers, no trackers, no analytics profiles.
• No contacts upload — invitations use codes you share yourself.
• No location history — see above.
• We never sell data, and never share it with anyone beyond the processors listed below.

We never monetise your location

This is a permanent commitment, not a setting you can lose track of. FriendTrack does not sell, license, broker, or otherwise share your location — raw, aggregated, anonymised, or derived — with any third party, for any consideration, ever. That includes footfall or analytics products built on where people are. We do not use your location for advertising, and the app carries no advertising at all.

FriendTrack earns money only when you choose to pay for your own experience, through a FriendTrack subscription. And because your live position is never kept as history (see above), there is simply no location record for us to sell.

Who processes data on our behalf

All service data is stored within the European Union. Where a processor's delivery network operates outside the EU (SMS and push delivery), transfers are covered by the processor's EU standard contractual clauses.

Legal basis (GDPR)

• Performance of contract — account, profile, Groups, and location sharing exist to provide the service you signed up for.
• Consent — location access is granted by you through your device's permission system and can be withdrawn there at any time; sharing to a Group is always your explicit action.
• Legitimate interest — crash diagnostics, to keep the app working.

Retention

Your account data is kept until you delete your account. Sign-in codes expire within minutes. Crash reports are deleted after 30 days. A Group's data (its name, members, and meeting point) is deleted when its last member leaves.

Deleting your account

You can delete your account directly in the app, which removes your profile, group memberships, device tokens, and maps. You can also exercise this or any other right by writing to privacy@friendtrack.net.

Your rights

Under the GDPR you can request access to your data, correction, deletion, restriction of processing, data portability, or object to processing — contact privacy@friendtrack.net. You can also lodge a complaint with the Danish Data Protection Agency (Datatilsynet) or your local supervisory authority.

Children

FriendTrack is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes, the new version is published at this address with an updated date above. Material changes are announced in the app.