My Location Privacy Policy

Updated October 1, 2026.

My Location for iPhone and iPad is operated by Flashcards World SL. Contact us at privacy@mylocation.app about privacy, support, access to your data or deletion.

This section covers the native iPhone and iPad app and the account, synchronization and sharing services it uses. Android and website advertising or analytics disclosures apply to those products, not to the native iOS app. Opening a website from the app makes that website's own policy relevant as well.

The essentials

You can browse the map, save places and record routes without a My Location account. The native iOS app contains no advertising SDK or app analytics SDK and does not use your data for cross-app advertising tracking. Signing in enables account synchronization; live sharing and public map links are separate actions you choose. A private recording is not automatically shared with friends, but a signed-in user's saved track can be synchronized to their account.

Information used by each feature

Current location and saved places

Precise or approximate coordinates and accuracy, depending on your permission. Saved content can include a place name, address, notes, collections and marker preferences. This supports map display, saved places and account synchronization when signed in.

Recording and recorded routes

The route coordinates, timestamps, accuracy, altitude and speed available from the device, plus the chosen walk/run/ride/hike activity and distance, duration and elevation statistics. These support recording, replay and account synchronization. The app does not read your HealthKit record.

Search and navigation

Search text, a relevant map region or coordinates, and the origin/destination needed to answer a search, look up an address or calculate a route are sent to Apple's MapKit services. Location also supports guidance and rerouting.

Sign-in and synchronization

Firebase account identifier and the name, email address and profile details provided by Apple, Google or email sign-in. Apple may supply a private relay address. Saved places, collections, tracks and routes are stored with your account so your devices can synchronize them.

Friends

Friend identifiers, profile information, invitations, relationships, blocking and sharing choices. This is an in-app social graph; the iOS app does not request access to your device's Contacts address book.

Live sharing

The current position, accuracy, measurement time, session duration and chosen audience, with an optional public-link label/password. Sharing with friends or a link starts only after your action.

Public map/route links

A copy of the places or route you select. When sharing a places map, notes and addresses are excluded unless you select the option to include them. Anyone with a public link can access its contents and can forward the link.

Place Alerts and notifications

The requested place/radius, subject and requester identifiers, approval status, event settings and a recent arrival/departure event. Notifications use an installation identifier, a push token and your language setting to reach the right account and device. Notification delivery is optional. Receiving an alert does not itself track the recipient's location.

App Store subscriptions

Apple handles payment. The app uses StoreKit's verified purchase/entitlement information to enable Pro on your Apple devices. In this iOS release, the app does not upload signed App Store transactions to our purchase-verification endpoint. It may retrieve an existing account entitlement from our service. We do not receive your card number or banking credentials.

Network access and support

Our services and infrastructure providers process connection information needed to deliver requests and protect the service, including IP information used for rate limiting. If you contact support, we receive the contact details and message you choose to send. Do not send passwords, one-time sign-in links or sensitive location history unless it is necessary for the issue.

Service providers and recipients

Apple provides the platform's location/map services, App Store payments, Sign in with Apple when selected, and Apple push delivery. Google Firebase provides authentication and notification services; Google Sign-In is used only when selected. Cloudflare hosts the My Location API, synchronized account data and sharing services. These providers process information needed for the features they deliver under their applicable privacy terms. We do not sell your personal data or provide your iOS location history to advertising networks.

People you select as friends can receive your live position when the corresponding sharing permissions and an active sharing session allow it. Anyone holding a public map or live-sharing link may access the information the link exposes; a live-link password adds a separate access requirement when configured. A screenshot, exported file or copy saved by another person remains outside our control after you share it.

Provider information: Apple privacy, Firebase privacy and security, and Cloudflare privacy.

Location permission and background use

You decide whether to grant location access and whether precise location is enabled in iOS Settings. You can still search and choose places manually without granting location access. Recording, navigation and live sharing need location for the features you start; they may request temporary precise access. An explicitly started recording, navigation or live-sharing session can continue with the screen locked. Finish recording, end navigation or stop sharing in the app to end that activity. These activities are independent: finishing a recording does not end unrelated navigation or sharing that you started separately.

The app does not start live sharing merely because you open a map or receive a Place Alert. Change permissions in Settings → Privacy & Security → Location Services → My Location. Change notifications separately in Settings → Notifications → My Location.

Storage and retention

Signed-out places and recordings stay in app storage unless you export/share them or later choose to move them into a signed-in account. Device or platform backups may preserve local data according to your device's backup settings. Signing out stops live sharing but does not delete synchronized account data; the app can retain that account's local cache for a later sign-in.

Public links you block are remembered on this device and are not synchronized to your account. You can remove those blocks in Account → Blocked Shared Links. To let you finish an interrupted account deletion, the app also remembers the affected account and cleanup stage locally until completion is confirmed.

Account content remains until you delete the content or your account. Public map snapshots are independent copies: editing or deleting an original place does not update a previously created snapshot. Delete its shared link to remove access to that snapshot. Account deletion also removes account-owned shared maps and social/sharing data.

Live sharing publishes a current position rather than a server-side route history. Position freshness is normally limited to approximately two minutes from a fresh measurement. Stopping removes the active position; interrupted connectivity can delay a stop request. Anonymous links expire within their chosen duration and cap; a label/end-status record can remain for about 24 hours after sharing ends. Signed-in link configuration can remain until replaced or deleted with the account. Place Alerts retain their latest event for up to 24 hours rather than a movement history.

We retain a minimal account-deletion marker, consisting of the account identifier and deletion time, to prevent delayed requests from restoring deleted account data. This security marker is retained indefinitely; it is separate from saved location content and the deleted authentication account. Infrastructure providers apply their own applicable security and operational retention practices. Contact us for an explanation of records associated with your request.

Your choices and deletion

Use the app to delete saved places, tracks and shared links, stop live sharing, remove or block friends, revoke alert permissions and manage device permissions. Exports are available through the app's applicable free or Pro features; you may also contact us about access to your personal data.

To delete your account, open Account → Delete Account, confirm and complete identity verification. For an email-link account, return through the confirmation email and select Delete Account again. If deletion cannot finish, the app reports the failure so you can retry. Account deletion does not cancel an App Store subscription: manage or cancel it through Apple separately. You may request deletion immediately regardless of an active subscription.

You may contact us to request access, correction, deletion or other privacy rights available where you live. We may need information to verify that a request concerns your account. Where applicable, you may also raise concerns with your data-protection authority. Our purposes for processing are providing the service you request, your permission for optional location/notification features, maintaining security and complying with applicable obligations.

The service is not intended for children under 13. If you believe a child has provided personal information, contact us. We will update this policy when our practices change and identify the updated date here.