Latitude Privacy Policy

Effective Date: February 2026

1. Overview

Latitude App LLC, a Delaware limited liability company ("Latitude," "we," "us," or "our") is built on a simple principle: your location data belongs to you. This Privacy Policy explains what data we collect, how we use it, how long we keep it, and — just as importantly — what we will never do with it.

We collect the minimum information necessary to deliver our Services. We do not sell your data. We do not show you ads. We do not build profiles. We never share your location without your knowledge — you receive a notification every single time an approved connection accesses your location.

2. Information We Collect

Account Information

When you create an account, we collect your phone number and optionally your name and email address. We also record your account creation date and subscription status.

Location Data

We collect your device's location (latitude, longitude, accuracy, and timestamp) for the sole purpose of sharing it with your approved connections. We store only your two most recent location updates — one foreground and one background — overwriting each as new data arrives. We do not build or retain a location history.

Only location data less than 24 hours old is ever shared with your connections. A daily automated process permanently deletes any location data older than 7 days from our servers. If your device is powered off, loses connectivity, or has location permissions disabled, the App may display your last known location clearly labeled with the time it was recorded.

We do not track your movements over time. We do not store location patterns or behavioral data derived from your location.

Device Information

We collect your device name and push notification token (FCM token) to deliver real-time notifications when your location is accessed by a connection. We store one token per registered device.

Activity Log

We maintain a rolling log of the most recent 50 location-access events per user — recording who viewed your location and when. This audit trail is visible to you in the App and enforces our transparency promise. A daily automated process permanently deletes activity records older than 30 days. All activity data is deleted when you delete your account.

Subscription and Billing Information

If you subscribe to a paid plan, we store your subscription tier, renewal dates, and group membership status. Payment processing is handled entirely by Apple through the App Store. We do not receive or store your payment card details.

3. How We Use Your Information

We use your information exclusively to provide and improve the Services:

Providing location sharing: To deliver your current location to connections you have approved.

Sending notifications: To notify you when an approved connection accesses your location, and to deliver subscription-related communications.

Authentication and security: To verify your identity, secure your account, and detect unauthorized access.

Managing subscriptions: To administer your plan, apply group discounts, and manage billing through the App Store.

Legal compliance: To comply with applicable laws, respond to lawful legal process, and protect the rights and safety of our users.

4. What We Do NOT Do

We do not sell your data. We will never sell, license, or otherwise transfer your location data or personal information to advertisers, data brokers, or other third parties for commercial purposes.

We do not show ads. We do not use your data for ad targeting or profiling. There are no advertisements in Latitude.

We do not retain location history. We do not store historical location data, movement patterns, or behavioral profiles derived from your location.

We do not allow silent monitoring. Every location access by an approved connection triggers an immediate notification to you. There is no way to access your location without your knowledge.

We do not share with third parties. We do not share your location data with any third party except as required by law or as necessary to operate the Services (e.g., cloud infrastructure providers bound by confidentiality obligations).

5. Data Retention

Location data: Only your most recent foreground and background location updates are stored; each is overwritten when a new update arrives. Location data older than 24 hours is never shared with connections. A daily automated process permanently deletes any location data older than 7 days.

Activity logs: Capped at 50 entries per user. A daily automated process permanently deletes entries older than 30 days. All activity data is deleted upon account deletion.

Location check records: Internal records of location access events are permanently deleted after 30 days by automated process.

Account information: Retained while your account is active. Upon account deletion, your data is flagged for immediate removal and permanently deleted within 30 days, subject to any legal holds.

Billing records: We may retain minimal billing and transaction records for up to 7 years as required by applicable tax and financial regulations, even after account deletion. These records do not include location data.

6. Account Deletion and Data Deletion

You may delete your Latitude account at any time through the App settings. Upon deletion:

Immediate actions: Your account is soft-deleted (marked with a deletion timestamp). All active follow connections are immediately revoked. Your location data and activity logs are flagged for deletion.

Complete deletion within 30 days: A daily automated process permanently and irreversibly deletes all soft-deleted accounts — including location data, activity logs, follow records, group memberships, and device tokens — within 30 days of your deletion request.

Exceptions: We may retain certain minimal records as required by law (e.g., billing records for tax purposes). These do not include location data.

Deleted user data is removed from our primary database systems within 30 days of the deletion request. Residual copies in automated system backups are handled in accordance with our infrastructure provider's data processing and retention terms, which provide for deletion of backup data in the normal course of operations. After this process, no copy of your personal data will remain on our primary systems, except for legally required billing records as described above.

7. Security

We implement industry-standard technical and organizational security measures to protect your data, including:

Encryption in transit: All communications between the App and our servers are encrypted using TLS/HTTPS.

Encryption at rest: Location data and personal information stored in our database are encrypted at rest.

Access controls: Access to user data is restricted to personnel who require it to operate the Services, and is subject to confidentiality obligations.

No method of transmission over the internet is completely secure. While we take significant steps to protect your data, we cannot guarantee absolute security against sophisticated attacks, zero-day vulnerabilities, or threats beyond our control. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly at support@latitudelocation.com if you suspect unauthorized access.

Security Incidents

In the event of a data breach that affects your personal information, we will notify you as required by applicable law, and will provide information about what data was affected and the steps we are taking in response. We will contact you at the email address associated with your account.

8. Sharing with Third Parties

We do not sell or rent your personal information. We may share limited data in the following circumstances:

Service providers: We use Google Cloud Platform and Firebase (Google LLC) for cloud hosting, database storage (Firestore), user authentication, and push notification delivery (Firebase Cloud Messaging). We do not use Firebase Analytics, Crashlytics, or other Firebase data collection or analytics services. Google processes data on our behalf under a Data Processing Agreement and is not permitted to use your data for any purpose other than providing infrastructure services to us. You can review Google's privacy commitments at cloud.google.com/terms/data-processing-addendum.

Legal obligations: We may disclose your data if required to do so by law, court order, or lawful government request. We will notify you of such requests to the extent permitted by law.

Protection of rights: We may disclose information if we believe in good faith that doing so is necessary to prevent fraud, protect the safety of any person, or enforce these Terms.

9. Children's Privacy

Latitude is designed for families and supports use by minors aged 13 and older under active parental supervision. Before a minor's account is activated, a parent or legal guardian must create the account or complete the in-app parental consent screen. By consenting, the parent or guardian takes responsibility for the minor's use of the Services.

Children under 13: Latitude is not directed to children under 13 and we do not knowingly collect personal information from anyone under 13. Account creation requires users to confirm they are 13 or older. If you believe a child under 13 has used the Services without verifiable parental consent, contact us immediately at privacy@latitudelocation.com and we will promptly investigate and delete any data collected.

Parental rights: Parents and guardians may request access to, correction of, or deletion of personal information collected from a minor in their care by contacting us at privacy@latitudelocation.com. We will respond within 30 days.

10. Your Rights and Choices

Control location sharing: You can disable location sharing at any time through the App or your device's system settings.

Manage connections: You can approve, reject, or revoke any connection at any time. When you revoke a connection, they immediately lose the ability to access your location. Their prior accesses will remain in your activity log for your reference until the log's normal 30-day rolling deletion applies.

View your activity log: You can see a complete record of who has accessed your location and when.

Access and correct your data: You may request a copy of the personal information we hold about you, or request corrections to inaccurate information, by contacting us at privacy@latitudelocation.com.

Delete your account: You may delete your account at any time. See Section 6 for details on data deletion.

California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom it is shared.

Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions (e.g., legal obligations). You can exercise this right by deleting your account in the App.

Right to Correct: You may request correction of inaccurate personal information we hold about you.

Right to Opt-Out of Sale or Sharing: We do not sell your personal information and do not share it for cross-context behavioral advertising. No opt-out is required, but you are entitled to this confirmation.

Right to Non-Discrimination: We will not discriminate against you — including by denying service, charging different prices, or providing a lesser quality of service — for exercising any of your CCPA rights.

To exercise your California rights, contact us at privacy@latitudelocation.com. We will respond within 45 days as required by law.

EU / EEA / UK Residents (GDPR)

If you are located in the European Union, European Economic Area, or United Kingdom, your rights are governed by our GDPR Addendum, which supplements this Privacy Policy and takes precedence in the event of any conflict. The GDPR Addendum covers your rights under GDPR Articles 15–22, the legal basis for each processing activity, international data transfer safeguards, and how to lodge a complaint with a supervisory authority.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through an in-app notification at least 14 days before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated policy. If you do not accept the updated policy, you may delete your account before the effective date.

12. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at: privacy@latitudelocation.com