Privacy Policy for Where is my people

Last Updated: September 21, 2026

Where is my people ("we," "our," or "the App") is a family location-sharing app for iOS and Android, published by Karuppasamy Pandiyan Marimuthu under the name Humanvoice. This Privacy Policy explains what information the App collects, how it is used, who can see it, and the choices you have.

1. Information We Collect

To provide the service we collect the following information:

• Account details: your first and last name, email address and date of birth. Your date of birth is used only to decide whether a parent or guardian must confirm your account (see Section 9). Your password is stored as a secure hash by our authentication provider; we never see it.
• Parent or guardian details (for younger users): a parent or guardian's email address and the time they confirmed.
• Location: your device's precise location, including while the App is in the background, together with its accuracy, speed, direction of travel and the time it was recorded. We store only your most recent location on our servers; we do not keep a history of where you have been. If your phone is offline, the newest unsent location is held in encrypted storage on your phone until it can be sent.
• Device status: battery level and whether the phone is charging, your phone's platform (iOS or Android), and a push-notification token so we can send the App a notification.
• Family circle information: the family circle you belong to, your role in it, and its invite code.
• Places: places that you or your family add (for example Home, Work, School), each with a name, type, map position and radius. The App can show a place badge when you are at one of these places.
• Note for family (optional): a short message of up to 50 characters that you can write for your family. It is visible to the members of your family circle.
• Map activity: a timestamp that shows a family member currently has the live map open. The App uses this to update locations faster while someone is looking, and to save battery when nobody is.
• Technical data: our hosting and security providers process standard technical information such as your IP address when your phone connects to the service.

2. How We Use Information

• Showing your family where you are on the live map and in the family list (including battery level and the place you are at).
• Running your account: signing you in, confirming your email address, resetting your password, and keeping your family circle together.
• Saving battery: adjusting how often your phone reports its location depending on whether someone is watching and whether you are moving.
• Protecting the service: preventing automated sign-ups and abuse, and warning you if you choose a password that has appeared in a public data breach.
• Legal compliance: keeping records needed to confirm parental consent and to answer data requests.

We do not use your information for advertising and we do not build advertising profiles.

3. Who Can See Your Information

Your location, battery level, current place and note are visible to the active members of your family circle and to no one else. We do not sell, rent or share your information with advertisers or data brokers. Our service providers (Section 4) process data only to run the App for us.

4. Service Providers

We rely on the following providers to run the App:

• Supabase: database and account sign-in (authentication).
• Cloudflare: hosts the App's server (Cloudflare Workers) and provides the Turnstile bot check that runs invisibly when you sign in, sign up or ask for a password-reset code.
• Google Firebase Cloud Messaging: delivers push notifications to your phone, including a silent message that asks the App to update its location.
• Amazon Web Services (Amazon SES): sends account emails such as the confirmation link and password-reset codes.
• Mapbox: displays the map. Your phone requests map images from Mapbox.
• Apple and Google (your phone's built-in geocoder): turns coordinates into street and area names on the member card. This lookup is made by your phone's operating system.
• Have I Been Pwned: when you choose a password, only the first five characters of a one-way hash of it are sent, to check whether it appears in known breaches. Your password itself is never sent.

If you tap "Open in Google Maps" on a member card, Google Maps opens with that location and is governed by Google's own privacy policy.

5. Device Permissions

• Location (including "Always" / "Allow all the time"): required to share your location with your family while the App is in the background. You can change or revoke it in your device settings, but sharing will stop.
• Notifications: used for the App's push messages and background service.
• Internet / network: required to send and receive locations.
• Motion / activity detection (where your device supports it): used to detect when you start moving, so the App can stop using GPS while you stay still.

6. Data Storage and Security

Data is sent to our servers over encrypted connections (TLS) and is encrypted at rest by our database provider. On your phone, the App keeps a small encrypted local store (AES-256, with the key held in the device's secure storage) for the newest unsent location and the last family snapshot; both are erased when you sign out or delete your account. No system is perfectly secure, but we take reasonable steps to protect your information.

7. Data Retention, Export and Deletion

• Only your latest location is kept. Each new location replaces the previous one.
• Export your data: in the App go to Settings → Export my data to save a copy of the information we hold about you as a file.
• Delete your account: in the App go to Settings → Delete account. Your profile, location, places you created and family memberships are removed from our database. If you created a family circle, that circle and its places are removed with your account, so its members will lose access to it.
• Without the App: you can request deletion on our account deletion page.

8. Your Rights

Depending on where you live (for example under the EU/UK GDPR, India's Digital Personal Data Protection Act, or California law) you may have the right to access, correct, export and delete your personal data, to withdraw consent, and to complain to a data-protection authority. You can exercise most of these rights inside the App (Settings), or by emailing us using the contact details below.

9. Children's Privacy

The App is designed for families, including children. We ask for your date of birth when you create an account. If you are under 16 (or the age at which a parent's consent is required where you live), a parent or guardian must confirm before your location is shared: we ask for their email address and record when they confirmed. We do not knowingly collect information from children without this confirmation. If you believe a child has used the App without a parent's consent, contact us and we will delete the account.

10. International Data Transfers

Our service providers may store and process information in countries other than your own. We choose providers that protect data in transit and at rest, and we process your information only as described in this policy.

11. Changes to This Policy

We may update this Privacy Policy as the App changes, for example if we add a new provider or feature. Changes will be posted on this page with a new "Last Updated" date, and for significant changes we will tell you in the App.