Privacy Policy

1. Privacy Overview

Spot: GPS Tracker is a consent-based location sharing service operated by Khristina Pastushenko. The app is built to help users share location information with people they choose, not to enable secret monitoring.

2. Company and Scope

This Privacy Policy applies to Spot: GPS Tracker, our related website pages, account and onboarding flows, subscription tools, customer support, and any mobile app features that link to this policy.

The company responsible for the Service is Khristina Pastushenko. Where privacy law uses the term "controller", Khristina Pastushenko is the controller for personal information collected through the Service unless a specific feature states otherwise.

Third-party websites, app stores, payment portals, map providers, and external services are governed by their own privacy terms.

3. Location Sharing

Location is the core feature of Spot. With your permission, the app may collect precise and approximate location information using GPS, Wi-Fi, cellular network signals, device sensors, and operating system location services.

Depending on your settings and permissions, location-related data may include:

• latitude and longitude;
• timestamps for location updates;
• routes, trips, visited places, or movement history;
• arrival, departure, and geofence events;
• speed, direction, or movement status, where available;
• battery level, charging state, connectivity state, and similar reliability signals.

The app may collect location while open, while running in the background, or when closed if you enable the permission needed for background location. Background location allows the app to keep sharing location and sending place alerts when you are not actively viewing the app.

You can turn off location access in Android settings or in available in-app controls. If you do, live tracking, history, geofences, and alerts may stop working or become incomplete.

4. Information We Handle

Account and profile

We may process your name, email address, username, password or authentication token, profile photo, account settings, language, country, and preferences.

Groups, circles, and invitations

If you create or join a group, we process membership lists, invitations, role or permission settings, shared profile information, and the location details made available inside that group.

Device and app data

We may collect device model, Android version, app version, IP address, installation identifiers, push notification token, region and timezone settings, network status, diagnostics, crash logs, performance data, and fraud or security signals.

Usage and website data

We may record events such as screens viewed, features used, button clicks, session timing, onboarding answers, cookie or local storage identifiers, and website logs.

Subscriptions and payments

For paid features, we may receive transaction IDs, purchase tokens, plan type, subscription status, renewal or cancellation status, receipt metadata, billing country, refund or chargeback status, and limited card details such as brand and last four digits when a processor provides them.

Support and communications

When you contact us, we handle your message, contact details, account identifiers, attachments, screenshots, support history, and any information needed to investigate the issue.

5. Why We Use Data

We use personal information to:

• create, secure, and maintain accounts;
• show your shared location to approved users and show their shared locations to you;
• run location history, geofence, place alert, notification, and group features;
• process subscriptions, verify access, prevent billing abuse, and provide receipts;
• send service, security, account, subscription, and support messages;
• troubleshoot crashes, improve performance, and maintain reliability;
• detect fraud, unauthorized tracking, account compromise, and other misuse;
• comply with legal, tax, accounting, app store, payment, and regulatory obligations;
• send optional product news or offers when allowed by law and your preferences.

Where a legal basis is required, we rely on different bases depending on the context: contract for account and subscription features, consent for precise location and optional communications, legitimate interests for security and product improvement, and legal obligation when records or disclosures are required by law.

6. Who Can See Data

People you share with

Group or circle members may receive the information needed for the sharing experience: profile details, live or recent location, location history, movement state, device battery or connectivity status, invitations, and group activity. The exact visibility depends on the app features and settings available to you.

Team access

Authorized personnel and contractors may access personal information only for business needs such as support, security, operations, compliance, billing, and product maintenance.

Legal and safety disclosures

We may disclose information when we believe disclosure is required by law, needed to respond to valid legal process, necessary to protect users or the public, or appropriate to investigate fraud, abuse, security incidents, or unauthorized tracking.

Business changes

If Khristina Pastushenko is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, personal information may be transferred as part of that transaction subject to appropriate safeguards.

Sharing with your instruction

We may share information with another party when you ask us to do so, connect an integration, use a feature that requires sharing, or give consent for a specific disclosure.

7. Service Providers

We use vendors and platform services to operate Spot. They may process information for us under contracts or platform terms that limit how they can use the data.

Provider categories may include:

• cloud hosting, databases, and infrastructure;
• authentication and account services;
• maps, geocoding, routing, and location infrastructure;
• analytics, diagnostics, crash reporting, and performance monitoring;
• push notification delivery;
• subscription, billing, payment, fraud prevention, and app store services;
• email delivery, customer support, and communications tools;
• security, compliance, and abuse prevention tools.

Examples may include Google Play Billing, Google Maps Platform or similar mapping services, Firebase services, Stripe or another payment processor, cloud hosting providers, and transactional email providers.

Payment providers and app stores may act independently for certain processing, such as payment authorization, refund review, tax handling, chargebacks, and account-level subscription management.

8. Storage, Transfers, and Security

Khristina Pastushenko is based in Cyprus. Personal information may be processed in Cyprus, the European Economic Area, the United Kingdom, the United States, or other countries where we or our providers operate.

For international transfers that require safeguards, we use measures such as contractual protections, Standard Contractual Clauses, the UK transfer addendum or similar mechanisms, access controls, encryption in transit, and provider security reviews where appropriate.

We use technical and organizational safeguards designed to protect personal information, including access restrictions, authentication controls, logging, encryption where appropriate, backups, security monitoring, and incident response processes.

No internet service can be guaranteed to be completely secure. You should protect your account credentials, keep your device secure, and use caution when sharing location with others.

9. Retention

We keep personal information only for as long as it is reasonably needed for the purposes described in this policy, unless a longer period is required or permitted by law.

• Account data is usually kept while the account remains active.
• Location history is kept for the period needed to provide history features and app reliability.
• Support records may be kept while needed to resolve issues and keep a support history.
• Billing and transaction records may be kept for tax, accounting, refund, chargeback, and audit reasons.
• Security logs may be kept to detect abuse, investigate incidents, and protect the Service.

When information is no longer needed, we delete it, anonymize it, aggregate it, or isolate it from active use, depending on the data type and applicable requirements.

10. Your Controls

You can control many types of processing directly:

• turn location, notification, contacts, camera, media, or motion permissions on or off in Android settings;
• leave a group or remove group members where the app allows it;
• change profile details and sharing settings available in the app;
• unsubscribe from optional marketing emails using the unsubscribe link or by contacting us;
• manage cookies and local storage through your browser settings;
• manage mobile advertising and tracking settings through your device settings, where available.

Depending on your location, you may also request access, correction, deletion, portability, restriction, objection, consent withdrawal, or a copy of certain personal information.

Send requests to operate@legaldocs.cc. We may ask for information needed to verify your identity, locate your account, and protect other users' privacy.

11. Billing and Deletion

You may request deletion of account-related personal information by contacting us or by using any deletion tool available in the app or website.

Deleting the app from your device does not delete your account and does not cancel a paid subscription. Deleting your account also may not cancel recurring billing handled by Google Play, Stripe, or another payment provider.

To stop future subscription charges, use the cancellation method connected to the original purchase channel, such as Google Play subscription settings, the website billing flow, or the applicable payment provider portal.

After a verified deletion request, we delete or anonymize account data unless we need to keep limited information for legal, security, fraud prevention, payment, accounting, dispute, or compliance reasons.

12. Children and Families

Spot is not intended for children under 13, or under the minimum age required in the user's location, unless a parent or legal guardian gives any required consent and supervises the use of the Service.

If a parent, guardian, or authorized adult uses Spot for a child or dependent, that adult is responsible for obtaining required permissions, explaining the sharing arrangement, managing group membership, and ensuring that the use is lawful and appropriate.

If you believe a child provided personal information without required consent, contact us so we can review and take appropriate steps.

13. Regional Notices

European Economic Area, United Kingdom, and similar jurisdictions

You may have rights to access, correct, delete, restrict, object to processing, receive a portable copy, withdraw consent, and complain to a data protection authority. Consent withdrawal does not affect processing that happened before withdrawal.

California

If you are a California resident, you may request access, deletion, correction, portability, and information about categories of personal information collected, disclosed, sold, or shared. We do not sell personal information in the ordinary meaning of "sell", and we do not knowingly sell or share personal information of children under 16.

Categories we may collect include identifiers, commercial information, internet or network activity, geolocation data, device information, customer support content, and inferences drawn from app settings or use. We collect and disclose these categories for the purposes described in this policy.

Other U.S. states and other countries

Residents of jurisdictions with privacy laws may have additional rights, including the right to appeal certain decisions or opt out of targeted advertising, sale, or profiling where those concepts apply. We do not use personal information for targeted advertising in Spot.

We will not discriminate against you for exercising privacy rights. To make a request, contact operate@legaldocs.cc.

14. Updates and Contact

We may update this Privacy Policy when the Service, providers, laws, privacy practices, or business needs change. The effective date at the top of the page shows when the current version became effective. If a change is material, we may provide additional notice in the app, by email, or through another reasonable method.

Some browsers send "Do Not Track" signals. The Service does not currently respond to those signals. You can still use the controls described above to manage app permissions, cookies, and privacy requests.

Questions, requests, or complaints can be sent to:

Khristina Pastushenko
Kleious, CAMELIA COURT, PAPHOS, 8042, Cyprus
Email: operate@legaldocs.cc