Privacy Policy

1. Introduction

Welcome to the Privacy Policy for ZuboTrack and ZuboGo (collectively referred to as "the Apps", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our location tracking applications available on the Apple App Store and Google Play Store.

We take your privacy seriously. This policy is designed to be transparent about our data practices and to comply with applicable privacy laws including the General Data Protection Regulation (GDPR) for users in the European Economic Area, the California Consumer Privacy Act (CCPA) for California residents, the Lei Geral de Proteção de Dados (LGPD) for Brazilian users, and other applicable regulations.

By downloading, installing, or using our Apps, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our Apps.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account or use our Apps, we may collect:

• Account Information: Name, email address, phone number, and profile information
• Authentication Information: Password and security credentials
• Contact Information: Information about family members or friends you choose to connect with
• User-Generated Content: Profile pictures, status messages, or other content you upload

2.2 Location Information

You can control location sharing permissions through your device settings. However, disabling location services will limit or prevent the core functionality of our Apps.

2.3 Device and Usage Information

We automatically collect certain information about your device and how you interact with our Apps:

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Core Service Functionality

• Location Sharing: To share your real-time location with family members and friends you have explicitly authorized
• Location History: To provide you with historical location data and movement patterns
• Geofence Alerts: To notify you when connected users enter or leave designated areas
• Safety Features: To enable emergency alerts and location sharing in urgent situations

3.2 Service Improvement

• Analyzing usage patterns to improve app features and user experience
• Identifying and fixing technical issues through crash reporting
• Testing new features and conducting quality assurance

3.3 Security and Compliance

• Protecting against fraudulent or unauthorized activity
• Verifying your identity for account access
• Complying with legal obligations and responding to lawful requests

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your personal data based on the following legal grounds:

5. How We Share Your Information

5.1 With Your Consent

Location Sharing: Your location data is shared only with individuals you have explicitly added and authorized as contacts (family members or friends). You have granular control over who can see your location and can revoke access at any time through the app settings.

5.2 Service Providers

We engage trusted third-party companies to perform services on our behalf. These include:

• Google Firebase: Cloud infrastructure, authentication, and database services
• Firebase Crashlytics: Crash reporting and app stability monitoring
• Google Analytics: Usage analytics and app performance metrics

These service providers have access to your information only to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose. We have signed Data Processing Agreements with these providers to ensure compliance with data protection laws.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests from public authorities, including:

• Complying with subpoenas, court orders, or legal processes
• Protecting our rights, property, or safety, and that of our users or others
• Investigating or preventing potential violations of our Terms of Service

5.4 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice in our Apps of any change in ownership or uses of your information.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

You can request deletion of your location history at any time through the app settings or by contacting us. Upon account deletion, we will remove your personal information within 30 days, except where retention is required by law.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3. Location data at rest is encrypted using AES-256 encryption.
• Access Controls: Strict access controls limit who can access your data within our organization.
• Authentication: Multi-factor authentication options for account security.
• Regular Security Audits: We conduct regular security assessments and penetration testing.
• Firebase Security: We leverage Firebase's enterprise-grade security infrastructure.

Despite our safeguards, no security system is impenetrable. We cannot guarantee the absolute security of your information, and you use our Apps at your own risk.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. To exercise any of these rights, please contact us at contact@zubotrack.com.

How to Exercise Your Rights: To submit a request, please email us at contact@zubotrack.com with the subject line "Privacy Rights Request." We will respond within 30 days (or sooner where required by law). We may need to verify your identity before fulfilling your request.

9. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country.

Specifically, our servers are hosted by Google Firebase, which may process data in multiple regions including the United States, European Union, and other locations where Google operates data centers.

For transfers from the European Economic Area, United Kingdom, or Switzerland, we rely on:

• Standard Contractual Clauses (SCCs): Approved by the European Commission for international data transfers
• Adequacy Decisions: Transfers to countries with adequacy decisions from the European Commission
• Data Processing Agreements: Contractual safeguards with our service providers

10. Children's Privacy

Our Apps are not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete that information.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at contact@zubotrack.com so we can take appropriate action.

Parents and guardians may create accounts for their minor children (13-17 years old) and have full control over the child's account, including the ability to view and delete location data.

11. Third-Party Links and Services

Our Apps may contain links to third-party websites or services that are not owned or controlled by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites or services you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.

We will notify you of any material changes by:

• Posting the updated Privacy Policy in our Apps with a new "Last Updated" date
• Sending an email notification to the address associated with your account
• Displaying a prominent notice within the app upon your next login

Your continued use of our Apps after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this policy periodically.

14. Apple App Store and Google Play Compliance

14.1 Location Permissions

Our Apps request the following location permissions in accordance with Apple and Google guidelines:

• Foreground Location: Used when the app is open to display your current location
• Background Location: Used to enable continuous location sharing with your designated contacts even when the app is not actively in use. This is essential for the core functionality of our family tracking service.

Prominent Disclosure: Before requesting background location access, we clearly explain that location data will be collected in the background to share with your selected contacts. You can revoke location permissions at any time through your device settings, though this will disable core app features.

14.2 Privacy Nutrition Label (Apple)

The following data types are disclosed in our App Store Privacy Nutrition Label:

• Precise Location (linked to user identity)
• Contact Info (name, email, phone number)
• User Content (photos, profile information)
• Identifiers (device ID, user ID)
• Usage Data (product interaction, crash data)

This data is used for app functionality, analytics, and product personalization (for app improvements).

14.3 Google Play Data Safety Section

Our Google Play Data Safety disclosure accurately reflects the data collection and sharing practices described in this Privacy Policy. Location data is collected in real-time and shared only with user-authorized contacts.

15. California-Specific Disclosures

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to know what personal information we collect and how we use it.

15.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email address, phone number, device ID)
• Geolocation data (precise GPS location)
• Commercial information (in-app purchase history, if applicable)
• Internet or network activity (app usage data, crash logs)
• Visual information (profile pictures, if uploaded)

15.2 Categories of Personal Information Disclosed

We have disclosed the above categories of personal information to our service providers (Firebase, Google) for business purposes. We do not sell personal information.

15.3 Shine the Light Law

California Civil Code Section 1798.83 permits California residents to request information regarding the disclosure of personal information to third parties for their direct marketing purposes. We do not share your personal information with third parties for their own marketing purposes.

16. Your Consent

By using ZuboTrack or ZuboGo, you consent to the collection, use, and processing of your information as described in this Privacy Policy. You have the right to withdraw your consent at any time by deleting your account or contacting us.