Version dated 22 October 2026. Effective upon publication. In case of any discrepancy between language versions, the Ukrainian version prevails.
This Policy explains what data the "GPS Tracker & Locator" app (the "App") processes, for what purposes, where it is stored, for how long, and what rights you have. The App has two parts: "Parents" (installed by parents or legal guardians) and "Child" (installed on the child's device). By using the App you confirm that you have read this Policy.
The data controller (within the meaning of the Law of Ukraine "On Personal Data Protection" and, for users in the European Economic Area, Regulation (EU) 2016/679, GDPR) is:
Individual entrepreneur Anna Harashchenko (FOP Harashchenko Anna Anatoliivna), Ukraine
Taxpayer identification number: [TIN]
Postal address: [postal address]
E-mail for data protection matters: [privacy@domain]
No Data Protection Officer has been appointed, as the law does not require one for processing of this scale; please use the e-mail above for all requests.
Hereinafter "we", "the Operator".
2.1. The App is intended exclusively for parents and legal guardians who want to know where their child is and stay in touch with them. The "Child" part may be installed only on the device of a child for whom you bear parental responsibility.
2.2. The App is not a covert surveillance tool. On the child's device it works openly: the child sees that location sharing is on and can switch it off (parents are notified). The child sees who is connected to their device.
2.3. The App does not record audio or video, does not activate the microphone or camera without the child's own action, and does not read messages, calls, contacts, photos or the content of other apps. The "Walkie-talkie" feature works only while the child presses and holds the button.
2.4. The App may not be used to monitor adults or other people's children. Such use is prohibited by the Terms of Use and may be a criminal offence (Article 182 of the Criminal Code of Ukraine, "Violation of privacy", and similar laws elsewhere). The user bears full responsibility for such use.
| Category | Data | Source | Purpose |
|---|---|---|---|
| Parent account | e-mail address, name, city | entered by you | sign-in, contacting you, initial map position |
| Sign-in code | one-time 4-digit code and its creation time | generated by the server | verifying that the e-mail is yours |
| Child profile | name or nickname, gender (to choose the character), 6-digit pairing code | entered by you | showing the child in the App, pairing their device |
| Child location | geographic coordinates, accuracy, time | child's device (GPS, network) | showing on the map, place notifications, SOS |
| Movement history | the last 300 route points | derived from coordinates | showing the route for the last hours |
| Child device status | battery level, "online" flag | child's device | low battery notifications |
| Places (geofences) | name, centre coordinates, radius | entered by you | arrival and departure notifications |
| Events | arrivals/departures, SOS, low battery, completed tasks — the last 50 | generated by the server | event feed |
| SOS signal | the fact and time of pressing | child's device | immediate notification of parents |
| Dragon and tasks | character name, points, list of tasks and their status | entered by you and the child | motivating the child through play |
| Settings | enabled notifications, unknown-caller protection | entered by you | operation of features |
| Technical data | IP address, device type and app version in server logs | automatic | security, troubleshooting |
We do not collect: contacts, the content of messages and calls, photos, audio or video, browsing history, the list or content of other apps, payment details (subscriptions are billed by the app store).
The App does not use cookies, advertising identifiers, third-party analytics or trackers.
Is providing data mandatory? An e-mail address is required to create an account; without it you cannot sign in. Without location access on the child's device the map, places and SOS features will not work. The child's name, city and the character's name are optional or may be fictitious.
Automated decision-making. We make no automated decisions with legal effects for you or the child. Notifications about entering or leaving a place or about low battery are generated automatically and are purely informational.
4.1. Consent of a parent or legal guardian. The child's data is processed solely on the basis of consent given by the child's parent or legal guardian (Article 11 of the Law of Ukraine "On Personal Data Protection"; Article 8 GDPR). By creating a child profile you confirm that you are the child's parent or legal guardian and are entitled to give such consent. You may withdraw consent at any time by deleting the child profile or your account.
4.2. Performance of a contract — the Terms of Use of the App (your account data, settings, subscription).
4.3. Legitimate interest of the Operator — preventing abuse, ensuring security and stable operation of the service (technical logs).
We process data only to: show parents the child's location; send notifications about places, battery and SOS; let the child call their parents; run the game character; maintain and protect the service.
We never use the child's or parents' data for advertising or marketing profiling, and we do not sell or share it with third parties for their own purposes.
6.1. Data travels between the child's device and the parents' device through our server, because two phones cannot otherwise find each other on the internet. The server is located in Ukraine with the hosting provider Hosting Ukraine LLC (ukraine.com.ua). Data in transit is protected by encryption (HTTPS/TLS).
6.2. Some data is stored locally on the devices: the sign-in token, the child's pairing code, display settings.
6.3. Processors acting on our behalf and under our instructions:
6.4. Map. To display the map the App loads map tiles from OpenFreeMap (OpenStreetMap data). That service receives the device's IP address and the coordinates of the map area you are viewing. No identifying data about the child or parents is sent to it.
6.5. Data is stored in Ukraine. We do not transfer it outside Ukraine and the European Economic Area except to the processors listed in section 6.3 (the app stores and the Google and Apple push services), which provide appropriate safeguards under their own terms.
6.6. We may disclose data upon a lawful request from public authorities in cases expressly provided for by law.
| Data | Period |
|---|---|
| Parent account, child profiles, places, settings | for as long as the account exists |
| Movement history | only the last 300 points; older points are deleted automatically |
| Events | only the last 50; older events are deleted automatically |
| Sign-in codes | 15 minutes |
| Technical server logs | up to 30 days |
| After account deletion | data is deleted immediately; backups within 30 days |
You have the right to: know what data of yours we process and obtain a copy; correct inaccurate data; have data deleted (the "right to be forgotten"); restrict processing; withdraw consent; receive your data in a machine-readable format; object to processing; lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or, for EU residents, with the supervisory authority of your country.
You can delete a child profile or the whole account directly in the App: Menu → My account → Delete account or Settings → Delete child's device. Deleting the account erases all parent and child data irreversibly. Send other requests to [privacy@domain]; we respond within 30 days. To verify your identity we may ask you to send the request from the e-mail address registered to the account.
In accordance with Article 12 of the Law of Ukraine "On Personal Data Protection", this document informs you, at the time of collection, about the data controller, the composition and content of the data, the purposes of processing and your rights.
We use transport encryption (HTTPS/TLS), one-time sign-in codes, access tokens, restricted server access and regular software updates. No system is absolutely secure; in the event of a data breach we will notify you and, where required, the supervisory authority within 72 hours of discovery.
10.1. The "Child" part is used by the child under the responsibility of the parents. All it needs is the pairing code provided by the parents. We do not ask the child to enter any personal data. The child's name is entered by the parents; we recommend using a nickname.
10.2. The "Child" part contains no advertising, no in-app purchases, no links to external websites and no communication with strangers.
10.3. The child can see at any time that location sharing is on and can switch it off.
We may update this Policy. We will notify you of material changes in the App or by e-mail at least 14 days before they take effect. The current version is always available at [https://domain/privacy].
For any questions about this Policy or your data: [privacy@domain], [postal address].