FamTrak Privacy Policy
FamTrak is a family location-sharing app for Android. It exists so that members of a family "circle" can see where each other are, get notified about arrivals and departures, and reach each other in an emergency. This policy explains exactly what data FamTrak collects, why, how long it is kept, and the controls you have. FamTrak shows no advertising, sells no data, and shares data only with the people in your circles.
1. Who sees your location
Your location is visible only to members of circles you have joined. Nobody outside your circles — including the operator, except for technical maintenance — views it. Circle admins may set a member's role to supervised (for example, a child's phone); supervised members cannot turn sharing off themselves, and this is shown clearly in the app.
2. Data we collect
| Data | Why | Retention |
|---|---|---|
| Google account identity (Google user id, email, display name, profile photo URL) | Sign-in, showing who is who on the map, matching invites to the right person | Until you delete your account |
| Precise location (coordinates, accuracy, altitude, speed, bearing, detected activity, timestamp) collected in the foreground and in the background, even when the app is closed or not in use | The core feature: live map, place alerts, location history, driving reports, ETA | Per-circle history 30 days by default (admin-configurable, at most 90 days); latest position kept while you are a member |
| Device status (battery level, charging, device model, OS version, app version, whether system location is on) | Battery badges, low-battery and "location turned off" alerts, troubleshooting | Overwritten with each update |
| Places, rules and alerts you or your circle admin create | Arrive/leave/schedule notifications | Alerts 90 days; places and rules until deleted |
| Trips and driving events (route, distance, top speed, hard braking, phone use while driving) | Driving reports within your circle | 90 days |
| SOS and check-in events (location and optional message) | Emergency alerting to your circle | 90 days |
| Push notification token | Delivering notifications via Firebase Cloud Messaging | Until sign-out or account deletion |
| Security and audit logs (IP address, request ids, sign-ins, membership changes; never location or message bodies) | Abuse prevention, rate limiting, incident investigation | 365 days |
3. Privacy controls
- Pause sharing — stops your location from being shown to your circles (shown to them as "Paused").
- Approximate ("bubble") mode and quiet hours — others see only an approximate area (about 1 km) instead of your exact position during the hours you choose. Raw data is still stored for your own history, but is never sent precisely to others while these modes are active.
- SOS always shares your precise location with your circle, by design.
- Leave a circle at any time (unless you are supervised, in which case an admin must remove you).
- Delete your account from the app (Settings → Delete account) or at fam.undervision.com/delete-account. All location history, trips, places, alerts and device records are purged immediately; an anonymised marker is kept only to prevent re-use of old invite links.
4. Location "always on"
FamTrak is designed to keep reporting while sharing is enabled, including after reboot and under Battery Saver. If the phone's system location setting is turned off, FamTrak asks you to turn it back on and notifies your circle admins. On phones where a family admin has enabled Guardian mode (a one-time setup over USB on a phone they own), FamTrak can re-enable location automatically and prevent uninstallation. Guardian mode is never enabled silently.
5. Third parties
- Google Sign-In — to verify your identity. Google's privacy policy applies to Google's processing.
- Google Maps Platform — map tiles on your device and, for ETA features, route computation on our server. Only the coordinates needed for that route are sent.
- Firebase Cloud Messaging — to deliver push notifications. Notification payloads contain alert titles and identifiers, not your coordinates.
No analytics SDKs, advertising networks or data brokers are used.
6. Security
All traffic uses TLS. Sign-in tokens are stored encrypted on your device. Access tokens on the server are stored hashed. The server enforces circle membership on every request, rate-limits abuse, and flags suspicious (mock or physically implausible) locations. Database backups are encrypted and kept on the same server.
7. Children
FamTrak is intended for use by families. A parent or guardian creates the circle and is responsible for the accounts of children under the age of digital consent in their country. Supervised accounts are clearly labelled in the app.
8. Your rights
You may export your data (Settings → Export), correct your display name, or delete your account at any time. For any other request, email admin@undervision.com.
9. Changes
We will update this page and bump the effective date when the policy changes. Material changes are announced in the app.