1. Scope
This policy explains how GhostLink (“GhostLink,” “we,” “us,” or “our”) handles information when you use the GhostLink mobile application, website, and related support services.
2. Information we handle
Identity and profile information
GhostLink creates a cryptographic identity and lets you choose a username. We store the username, public cryptographic keys, device identifiers, device certificates, and profile settings required to operate the service. We do not require a phone number or email address to create a GhostLink identity.
Private identity keys and recovery material are created for use on your device and are not intentionally uploaded to GhostLink. Keep your recovery phrase private.
Location information
With foreground location permission, the app reads your device location when needed to show your map and while you are actively sharing. Depending on availability, a location update may include coordinates or a selected region, accuracy, altitude, speed, heading, battery level, and a timestamp.
Your selected privacy level—such as exact, radius, state, or country—is applied before the update is encrypted on your device. Our backend receives an encrypted payload rather than the readable location. Approved recipient devices receive the cryptographic material needed to decrypt the updates you chose to share.
Connections and delivery details
We store information needed to route encrypted updates, including the people involved in a connection, sharing direction, selected permission level, start and expiration times, revocation status, recipient-device identifiers, and update timestamps. This metadata is not the encrypted location itself.
Avatars and photos
Photo-library access occurs only when you choose an image. Custom avatars are processed on your device and uploaded to a publicly accessible avatar URL so they can be displayed to other users. Do not use a sensitive image as your avatar.
Support and technical information
If you contact support, we receive the information in your message. Our infrastructure and website-hosting providers may also process standard technical logs such as IP address, device or browser type, request time, and error information for security and service operation.
3. How we use information
- Provide usernames, profiles, device registration, and connection discovery.
- Deliver encrypted location updates to the people you select.
- Apply sharing expiration, revocation, blocking, and account-deletion requests.
- Protect the service against fraud, abuse, security incidents, and technical failures.
- Respond to support requests and comply with applicable legal obligations.
We do not sell your personal information, use your location for advertising, or include a third-party advertising SDK in the app.
4. Encryption and your recipients
End-to-end encryption protects location contents while they pass through our infrastructure. It does not prevent a person you intentionally share with from viewing, recording, screenshotting, or further disclosing what they receive. Share only with people you trust.
No security system can guarantee absolute protection. A compromised device, exposed recovery phrase, malicious software, or future cryptographic weakness may defeat these protections.
5. Service providers and disclosure
GhostLink relies on service providers to operate:
- Supabase provides database, authentication, storage, realtime delivery, and serverless infrastructure.
- Mapbox provides map rendering and map data. Its SDK and services may receive technical and map-use information under its policy.
- Apple and Google provide app distribution, operating-system permissions, and related platform services.
We may disclose information when required by applicable law, to respond to valid legal process, to protect users or the service, or as part of a business transfer. Because location contents are encrypted, the data available to us may be limited to ciphertext and metadata.
6. Retention and deletion
Encrypted location updates receive an expiration time no later than seven days after creation, or sooner when the related share expires. Expired updates are excluded from location-history retrieval. Expired records may remain temporarily in operational storage or provider backups until cleanup and backup-retention processes remove them.
Profile, device, and connection records are generally kept while your identity remains active. You can use “Delete account” in Settings to request deletion of your profile, devices, connections, encrypted location records, and stored avatar. Some limited records may be kept when reasonably necessary for security, legal compliance, dispute resolution, or backup rotation.
7. Your choices
- Choose exact, radius, state, or country-level sharing for supported connections.
- Choose how long a share lasts and stop sharing at any time.
- Change location or photo permissions in your device settings.
- Use a default avatar instead of uploading a photo.
- Delete your GhostLink account from the app.
Depending on where you live, you may have additional rights to access, correct, delete, or object to the handling of your personal information. Contact us to make a request. We may need to verify that you control the relevant GhostLink identity.
8. Children
GhostLink is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information through GhostLink, contact us so we can investigate and take appropriate action.
9. International processing
GhostLink and its providers may process information in countries other than your own. Those countries may have different data-protection laws. We use service providers and safeguards appropriate to the services we operate and the jurisdictions that apply.
10. Changes to this policy
We may update this policy as GhostLink changes. We will update the date above and provide additional notice when required. Your continued use after an update is subject to the revised policy.
11. Contact
Questions or privacy requests can be sent to teoudovcic@gmail.com.