Privacy Policy

Last updated: April 9, 2026

Thank you for using Family GPS Locator & Tracker (the “App”). The App is developed and operated by byeshe. We know that precise location and related information are highly sensitive. This policy explains how we collect, use, store, share, and protect information when you use the App, and what rights you have.

Family/circle location sharing, cloud sync, chat, and similar features usually require you to create an account or sign in. If you do not provide certain information, you may not be able to use the corresponding features.

Operator: byeshe (“we,” “us”).
Contact: play@byeshe.com

1. Scope

This policy applies when you use the App and related services through the Android client (including cloud sync, push notifications, optional subscriptions, and ad display). If you download the App from a third-party app store, you must also follow that store’s rules.

2. Information we collect and how we obtain it

Information we obtain falls into information you actively provide or help us obtain and information collected automatically to provide the service. To enable family/circle location sharing, geofence alerts, account and sync, and other features, we may process the following (depending on whether you grant permissions, join circles, and your settings):

2.1 Information you actively provide or help us obtain

For example: account information when you register or sign in; nickname and avatar you set in the App; invitation details you scan or enter to join a circle; content you send in chat. If applicable law requires us to send you important service-related notices, we will use the contact details you provide. If we conduct marketing communications, we will obtain your consent where required by law.

2.2 Automatically collected information

Beyond the items listed below, we may automatically collect, for example: device type; device identifiers (such as advertising IDs available at the OS or SDK level); IP address on mobile networks; OS version; App usage and crash diagnostics; to operate, secure, analyze, and improve the service.

2.3 Detailed list

2.4 In-app purchases and payments

If you purchase a subscription or in-app items, payment is processed by the app store (e.g., Google Play). We do not collect or store your full card number or other sensitive payment credentials. We may receive transaction IDs, subscription status, and purchase results as needed to enable or disable premium features (e.g., ad removal). For how the store handles payment data, see that store’s privacy policy (e.g., the Google Payments Privacy Notice).

3. Purposes and legal bases (summary)

We process information to: provide and maintain the service (location sharing, geofences, sync, notifications); protect security and prevent abuse; improve the product and diagnose failures; perform our contract with you (including paid features); conduct analytics in applicable jurisdictions based on legitimate interests (using aggregation or de-identification where possible); and obtain your consent where required by law (e.g., certain marketing or optional features). If you are in the EEA, UK, or similar regions, applicable law may distinguish bases such as contract, legitimate interests, and consent. If you are in certain U.S. states, additional “sale/share” opt-out rules may apply.

4. Sharing and processors

We do not sell your personal information to unrelated third parties. We may disclose aggregated or anonymized data to third parties that help us operate the service to improve the product. We may also share personal information with or allow third parties to process it in the following cases:

Third-party privacy policy links: The following are provided by third parties and governed by their terms:

5. Maps and third-party SDKs

Maps (Google Maps, etc.): The App uses Google Maps Platform and similar services to display maps, markers, and geographic information. To render maps and show location-related views, your device sends necessary technical data to Google (e.g., map tile requests, interaction data). Viewing location-related map content in the App may involve joint processing with the map service. In addition to the location provisions in this policy, use is subject to Google’s terms and privacy policy, including the Google Maps Platform Terms of Service and Google Privacy Policy. We configure credentials for maps and similar services in line with industry practice (e.g., restricting use to the official package name and certificate) to reduce key misuse.

Third-party SDKs and components (summary): To provide account, cloud data, push, analytics, crash diagnostics, remote config, ads, and attribution, the App integrates SDKs or similar components from third parties, including (as actually integrated): Firebase (e.g., Authentication, Firestore, Storage, Cloud Messaging, Analytics, Crashlytics, Remote Config), Google Play services (e.g., in-app billing), Google Mobile Ads / AdMob, and Meta (Facebook), Adjust, TikTok, and similar via mediation or attribution. Data types, purposes, and retention for each SDK are described by its provider; Sections 2 and 4 summarize this, with main links in Section 4. If you use the App through a store (e.g., Google Play), our “Data safety” and similar disclosures should align with these practices; if you notice inconsistencies with this policy or store disclosures, contact us as in Section 17.

6. Family sharing and consent (not for covert monitoring)

The App is intended for families or trusted circles to share location, battery, and related status with knowledge and consent. The App is not designed to track someone without their knowledge or consent, and does not provide features for covert tracking, spyware-style monitoring, or circumventing reasonable expectations of others.

Typically, members join the same circle via invitations, invite codes, or QR codes; sensitive information such as location and battery is shown to authorized circle members only when you grant the relevant system permissions and turn on in-App sharing. Continuous sharing or background location may involve system permission prompts, in-App controls, and (where applicable) foreground services and notifications so you and relevant members know sharing is active.

You must use the service only as allowed by applicable law and mutual understanding, and establish circle relationships only with people who agree to share. Adding someone to a circle or using their location for harassment, discrimination, illegal stalking, or similar conduct without their knowledge and consent violates our Terms of Service and may result in account restrictions or termination. If you believe someone is abusing the service, contact us at play@byeshe.com.

7. Cross-border transfer and storage

When using Firebase and other cloud services, data may be stored on servers outside your region and transferred across borders as needed to provide the service. We manage risk through contracts, standard contractual clauses where applicable, or other lawful means. Continued use means you understand such cross-border processing; where the law requires separate consent, we will obtain it in the product flow.

8. Retention

We retain information only as long as needed for the purposes in this policy, unless a longer period is required by law. For some automatically collected diagnostics, analytics, and usage statistics, when not tied long-term to your account, we may retain them for up to about 24 months, then delete or retain only in aggregated or anonymized form. When you delete your account, leave a circle, or turn off sharing, we will stop unnecessary processing promptly and delete or anonymize data as required by our rules (to the extent technically reasonable and lawful). If you want us to delete specific user content you provided through the App, you may contact play@byeshe.com; we will respond within a reasonable time (some data may be necessary for operation and cannot be deleted). For in-App account deletion steps and scope, see Section 11.

9. Security

We use reasonable technical and organizational measures to protect data (e.g., encryption in transit, access controls, reliance on cloud providers’ security). No internet service can be perfectly secure; please protect your device and account and do not share sensitive verification codes with others.

10. Minors

The App is not primarily directed at children under 13; we do not knowingly collect personal information from children under 13 for marketing. The App supports family use, but we do not recommend that minors below the local age of digital consent consent alone to precise location processing. If you are a parent or guardian, please guide minors’ use and provide consent on their behalf. If we learn we have collected a child’s personal information without verifiable parental consent or another lawful basis, we will delete it from our servers promptly. If you are a guardian and believe your child provided personal information to us, contact play@byeshe.com.

11. Account and data deletion

You may initiate account deletion in the App at any time. After successful deletion, data written to the cloud in connection with your Firebase user ID (UID) will be cleaned up according to our process, and your login identity will be removed. This is usually irreversible; back up anything you need before confirming.

In-App steps (Android):

  1. After signing in, open the circle home (main screen showing your family/circle and members).
  2. Open the More menu in the top toolbar (vertical three-dot icon ⋮).
  3. Choose “Delete account”, read the prompts, and confirm.
  4. If your Google account is linked to the App account: the system will ask you to verify with Google before data cleanup and deletion. If you use an account without Google linked (e.g., anonymous sign-in only), confirming will directly clean cloud data and delete the account.

Web self-service (no App install): If you have linked Google, you can open Account and data deletion on this site, sign in with the same Google account as in the App, and confirm deletion; the same page provides email request instructions (e.g., when self-service is not possible).

Deletion scope (summary): When the flow completes successfully, we will endeavor to delete or disassociate data stored in the Firebase stack related to your account, including for example: your profile and business data in Cloud Firestore (circle relationships, sharing settings, location and zone records, as applicable); avatars and circle-related media in Firebase Storage. Some de-identified, aggregated, or legally required records may not be immediately erased from all backups; we will handle them under applicable law and industry practice.

If you cannot use the App: If you cannot complete deletion in the App due to a lost device, login issues, or similar, see Account and data deletion (web self-service and email). For manual help, email play@byeshe.com with your identity and request; we may ask for information needed to verify identity and will assist within a reasonable time after verification.

12. Your rights and how to opt out

Depending on where you live, you may have additional rights under local law. California residents should read Section 13. Residents of the European Economic Area, United Kingdom, or Switzerland should read Section 14. For everyone: besides account deletion in Section 11, you may use in-App settings where available or contact play@byeshe.com.

Simple ways to stop collection: You can stop using the service at any time by uninstalling the App or similar means provided by your device or store; after uninstallation, the App will generally not collect new information actively (data already in the cloud may still be handled per retention and deletion requests). For ad personalization, you can limit ad tracking or reset the advertising ID in Android settings.

13. California privacy rights (CCPA and CPRA)

This section applies to California residents and supplements the rest of this policy. Terms used here have the meanings given in the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

13.1 Categories of personal information

In the preceding 12 months, we may have collected the following categories of personal information (depending on how you use the App): Identifiers (e.g., account IDs, email if provided via Google sign-in, device or advertising identifiers); personal information in Cal. Civ. Code § 1798.80(e) (e.g., name or avatar you choose); geolocation data (precise location when you enable sharing); commercial information (subscription or purchase status from Google Play); internet or other electronic network activity (App usage, diagnostics, interactions with ads); audio, electronic, visual, or similar information (e.g., chat attachments such as voice or images, if you send them); and inferences drawn from the above (e.g., preferences implied by settings). Under CPRA, precise geolocation may qualify as sensitive personal information; we process it only when you enable relevant features. We do not ask for other categories of sensitive personal information (such as health data) for unrelated purposes.

13.2 Sources and purposes

Sources include: you; your device and the App; authentication and cloud providers (e.g., Google, Firebase); and advertising, analytics, or attribution partners described in this policy. Purposes are described in Sections 2–5 and include operating the App, location sharing within circles, security, analytics, crash diagnostics, ads for non-subscribers, and legal compliance.

13.3 Disclosure and “sale” / “sharing”

We do not sell personal information for money. We may disclose personal information to service providers and contractors (e.g., Google/Firebase, ad and attribution partners) to operate the service, consistent with CCPA/CPRA. Some partners may use identifiers or activity data for cross-context behavioral advertising or measurement; under California law such uses may be treated as “sharing” or a “sale” in certain cases. You may opt out of such uses as described in Section 13.5.

13.4 Your California rights

Subject to exceptions under law, you may have the right to: know what personal information we collect, use, and disclose; delete personal information we hold (see also Section 11); correct inaccurate personal information; opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising; and limit the use or disclosure of sensitive personal information to uses necessary to provide the services you request (where applicable). We will not discriminate against you for exercising these rights.

13.5 How to exercise California rights

Submit a request by emailing play@byeshe.com with “California privacy request” in the subject line, or use account deletion and other controls described in this policy where they satisfy your request. We may need to verify your identity before responding. You may designate an authorized agent under CCPA rules; we may require proof of authorization. We will respond within 45 days of a verifiable request unless we notify you of a lawful extension. For opt-out of interest-based ads on devices, you may use Android settings such as Opt out of Ads Personalization and reset or limit advertising identifiers, in addition to emailing us.

14. GDPR and UK GDPR (EEA, UK, and Switzerland)

This section applies if you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, and supplements the rest of this policy.

14.1 Data controller

For personal data covered by the EU General Data Protection Regulation (GDPR) or the UK GDPR, the controller is byeshe. Contact: play@byeshe.com.

14.2 Legal bases for processing

We process personal data on one or more of the following bases, as applicable: performance of a contract (providing the App and features you request); legitimate interests (e.g., securing the service, improving reliability, fraud prevention, aggregated analytics), balanced against your rights; consent where required (e.g., certain optional features or marketing where we ask for it); and legal obligation (where the law requires processing or retention).

14.3 International transfers

Personal data may be processed in countries outside your region (including the United States) when we use cloud and advertising providers. We use appropriate safeguards such as standard contractual clauses approved by the European Commission or UK authorities, or other mechanisms permitted by GDPR/UK GDPR, as described in Section 7.

14.4 Your GDPR and UK GDPR rights

Where applicable, you have the right to: access your personal data; rectify inaccurate data; erase data in certain circumstances; restrict processing; data portability for data you provided where processing is automated and based on contract or consent; object to processing based on legitimate interests (including profiling for direct marketing, where applicable); and withdraw consent at any time where processing is consent-based, without affecting prior lawful processing. You may also lodge a complaint with a supervisory authority in your country of residence, place of work, or an alleged infringement; a list of EU authorities is available from the European Data Protection Board. In the UK, the ICO is at ico.org.uk.

14.5 How to exercise these rights

Email play@byeshe.com with your request. We may need to verify your identity. Account deletion is available as in Section 11 where applicable.

15. Policy updates

We may revise this policy from time to time. Material changes will be communicated through in-App notices, page announcements, or similar. Continued use after updates means you accept the revised version (except where the law requires renewed consent).

16. Your consent

By using the App, you agree that we may process your information as described in this policy. “Processing” includes collection, storage, use, combination, disclosure, deletion, and similar technical and administrative activities.

17. Contact us

For questions about this policy or personal information processing: play@byeshe.com.