Privacy Policy

Last updated: 4 April 2026

LOKATE ("we", "our", "us") operates the LOKATE mobile application and website (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using LOKATE, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, password, display name, profile photo, occupation, home country, languages spoken, arrival and departure dates.
• Profile Preferences: Whether you are looking for work, housing, equipment, community, or offering services.
• User Content: Messages, marketplace listings, photos, tips, reviews, and event posts you create.
• Safety Data: Emergency contacts (names, phone numbers, email addresses, relationships), safety check-in messages, and timed check-in activity types.
• Support Communications: Emails and messages you send to our support team.

1.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type, and screen resolution.
• Usage Data: Pages viewed, features used, time spent in the app, and interaction patterns.
• Location Data: Approximate location based on your selected resort/city. Precise GPS location is only accessed when you explicitly use the Safety Check-In or Share Location features, and only at that moment.
• Cookies and Local Storage: We use cookies and browser local storage for authentication, preferences (e.g. customised hero tiles), and analytics. See our Cookie Policy for details.

1.3 Information from Third Parties

• Authentication Providers: If you sign in via a third-party provider (e.g. Google, Apple), we receive your name and email address from that provider.
• Weather Data: We fetch weather data from Open-Meteo based on your selected location. No personal data is sent to this service.
• Currency Data: Exchange rates are fetched from the Frankfurter API. No personal data is sent.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Create and manage your account.
• Display location-relevant content (jobs, services, guides, emergency contacts).
• Enable messaging between users.
• Process safety check-ins and send alerts to your designated emergency contacts.
• Send you service-related notifications (e.g. new messages, job alerts).
• Respond to support requests.
• Detect and prevent fraud, abuse, and security issues.
• Analyse usage patterns to improve the user experience.

3. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

• With Other Users: Your display name, profile photo, bio, occupation, and public profile flags are visible to other authenticated users. Marketplace listings and tips you post are visible to users in the same location.
• Emergency Contacts: When you use the Safety Check-In feature, your check-in message and location are shared with the emergency contacts you have designated.
• Service Providers: We use Supabase for database and authentication, Vercel for hosting, and Open-Meteo/Frankfurter for weather and currency data. These providers process data on our behalf under appropriate agreements.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or government request.
• Safety: We may disclose information to prevent harm, investigate violations of our Terms, or protect the rights and safety of our users.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it. Safety check-in logs are retained for 12 months for safety and legal purposes. Anonymised, aggregated data may be retained indefinitely for analytics.

5. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS) for all data.
• Encryption at rest for database storage.
• Row Level Security (RLS) ensuring users can only access their own data.
• Secure authentication via Supabase Auth with bcrypt password hashing.
• Regular security reviews and updates.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and personal data.
• Portability: Request your data in a portable, machine-readable format.
• Restriction: Request that we restrict processing of your data.
• Objection: Object to processing of your data for certain purposes.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

7. Children's Privacy

LOKATE is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we discover that a child under 16 has provided us with personal information, we will delete it promptly. If you believe a child under 16 has used our Service, please contact us at [email protected].

8. International Data Transfers

Our servers are located in the European Union. If you access the Service from outside the EU, your data may be transferred to and processed in the EU. We ensure appropriate safeguards are in place for any international transfers in compliance with GDPR.

9. GDPR Compliance (European Users)

If you are in the European Economic Area (EEA), UK, or Switzerland:

• Our legal basis for processing is: contract performance (providing the Service), legitimate interest (improving the Service, security), and consent (optional features like location sharing).
• You have the right to lodge a complaint with your local data protection authority.
• Data controller: LOKATE, contactable at [email protected].

10. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: know what personal information we collect; request deletion of your data; opt out of the sale of your data (we do not sell data); and not be discriminated against for exercising your rights. Contact [email protected] to exercise these rights.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app and on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, contact us at:

• Email: [email protected]
• Support: [email protected]