Privacy Policy

We may collect the following categories of information:

• Account information: name, email address, phone number, password, account settings
• Profile information: emergency contacts, household or team members, organization details, preferences
• Location data: precise location, speed, direction of travel, how exact the position is, and the device's battery level, collected only after the person being located agrees on their own device. It reaches us in one of three ways: from Guardian while it is open on that person's device, from a private sharing link opened on that person's device, or from a separate tracking app (OwnTracks) that the person installs and connects to their family's account. A vehicle can report the same information from a phone or tracker that a parent or guardian places in it
• Location history: a trail of past positions for each person or vehicle that shares a location, and records of arriving at or leaving saved places and safe zones
• Places and zones: names and addresses of saved places (such as home, school and work) and safe zones
• Description and photos of family members: height, weight, hair and eye color, identifying marks, and photos that a family chooses to add so they can be given to responders if someone is missing
• Vehicles and valuables: details a family chooses to record about its vehicles and belongings, such as make, model, color, license plate, vehicle identification number (VIN), serial numbers, what an item is worth, insurance company and policy number, renewal dates, photos, and notes about an item that is lost or stolen. Only the family's parents and guardians can see these
• Calendar: events a family adds, and, if a person connects Google Calendar, a copy of that person's Google events
• Home devices: a list a family chooses to keep of its cameras, sensors and alarms (name, kind, where it is in the home, brand, serial number, monitoring company and phone number, notes), and the events a device reports through its alert link, such as movement seen, a door opened or an alarm going off, with the time. Guardian does not connect to cameras and does not receive, view or store video or pictures from them
• Usage data: app activity, device identifiers, browser information, timestamps, logs, crash reports
• Document and vault data: files, images, notes, and documents you upload
• Emergency health information: allergies, medications, medical conditions, medical devices, doctor, pharmacy and health insurance details, emergency instructions, and other details a family chooses to add for urgent response
• Mobile number for text alerts: the number you give us if you choose to receive alerts by text message, and the date and time you agreed
• Excluded health records: blood work, surgery records, lab results, full clinical charts, and similar detailed medical records unless a separate approved use case requires them
• Communication data: messages, support requests, and feedback
• Billing data: payment status, plan selection, transaction metadata, and limited billing details processed by third parties
• Device data: operating system, device type, app version, language, and network information

We use information to:

• provide and operate the Services
• show family members where each other are, and show parents and guardians where a family member has been
• raise alerts and warnings (for example SOS, leaving a safe zone, a missed check-in, a phone that has stopped reporting, low battery, driving over a speed the family set, and arriving at or leaving a place) and send them to parents, guardians and other adults in the family by email and, if they opted in, by text message
• prepare a report of a family member's information for responders or law enforcement when a parent or guardian asks for one
• process subscriptions and payments
• secure accounts and prevent fraud or misuse
• send service updates, notifications, and support messages
• improve performance, reliability, and product design
• comply with legal obligations
• enforce our Terms of Service and Acceptable Use Policy
• support emergency-only health data use cases limited to the minimum information needed for urgent response

The Services may process sensitive information, including precise location information, emergency contact data, and limited emergency-only health information such as allergies, medications, critical condition flags, and emergency instructions.

We do not require or intend to collect detailed medical records such as blood work, surgery history, lab results, or full clinical charts unless a separate approved use case requires them.

You are responsible for obtaining any required consent from users, employees, family members, or other individuals before sharing their information through the Services.

How location is collected. A person's location is collected only after that person agrees on their own device. Guardian in a web browser can only read a device's location while Guardian is open on the screen. For location that continues when the screen is off, the person installs a separate app, OwnTracks, and connects it to their family's account using a private link. OwnTracks is made and published by others, not by VantageIQ; it sends the location to our Services, and its own handling of information is governed by its own terms.

Who can see it. Everyone with a login in a family can see where each sharing family member is now. Location history is visible to the family's parents and guardians, and each person can see their own. No one outside the family can see it, except as described in "How We Share Information."

How to stop. An adult can pause or turn off their own location sharing at any time in Guardian, and can switch off or remove the tracking app. A family member aged 13 to 17 can ask to turn sharing off; it stays on until a parent or guardian approves. A parent or guardian can turn off any family member's sharing link at any time.

Maps and addresses. Maps are drawn with map images from Google and from CARTO and OpenStreetMap. Showing a map sends the area being viewed, and standard connection information such as an IP address, to the map provider. When you save an address for a place, the address is sent to OpenStreetMap's address service to find its position. When a parent or guardian asks for the address of a stop on the Daily Timeline, the position of that stop is sent to the same service to find its address. If you choose "Directions," the position is opened in Google Maps.

Family Calendar. An event for the whole family or for a circle can be seen by everyone with a login in the family. An event for one person can be seen by that person and by the family's parents and guardians, and by the rest of the family only if it is marked to be shown to them. If an address is given for an event, the address is sent to OpenStreetMap's address service to find its position. While an event that has a place is under way, parents and guardians are shown whether the last position reported by that person's phone is at that place. If you connect Google Calendar, Guardian reads the events on your main Google calendar, from one week back to 90 days ahead, and keeps a copy of them in the Family Calendar; you and your family's parents and guardians can see the copies. Guardian does not change anything in your Google Calendar. You can disconnect it at any time and choose whether the copies are removed.

We may share information with:

• Service providers that help us host, store, process, communicate, analyze, or support the Services
• Payment processors for subscription and billing operations
• Other members of your family account: basic information (name, photo, phone number, email address and current location) is visible to everyone with a login in the family; medical details, documents and location history are visible to the family's parents and guardians and to the person they are about
• Email and text message providers: alerts are delivered by email and, for people who opted in, by text message through a messaging provider (Twilio). An alert can include a family member's name and location
• Organizations and account administrators when an account is managed by a family, employer, school, church, or similar entity
• Emergency contacts or designated recipients when alerts, check-ins, or safety workflows are triggered by you or your settings
• Legal and compliance authorities when required by law or to protect rights, safety, security, or property

We do not sell personal information. We do not share mobile numbers or text-message consent with third parties or affiliates for their marketing or promotional purposes.

We retain information only as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required by law, contract, security, dispute resolution, or recordkeeping obligations. When an account is deleted or closed, we may retain limited data for a reasonable period for legal, fraud-prevention, backup, and audit purposes.

Location history (the trail of a person's past positions) is deleted once it is more than 90 days old. A person's most recent position stays on their profile for as long as they share it. Alerts and the records of arrivals and departures are kept for as long as the family's account is open, so that a family can look back when it matters.

Account Record. Guardian keeps a record of sign-ins and of what is opened, added, changed or deleted in a family's account, with who did it and when. The family's parents and guardians can read it, and nobody in the family can change it. It is kept for as long as the family's account is open.

Emergency information. When a person's emergency information is opened with its private link by someone who is not signed in to the family, the opening is recorded and the family's parents and guardians, and that person, are told by email.

Usual places. For each person who shares their location, Guardian works out from their location history of the last 60 days the areas they have been in, where they spend their nights, and how far from home they normally go. It uses this only to warn the family's parents and guardians when that person is somewhere new and unusually far from home, or somewhere new late at night. It is worked out again each day, is not used for anything else, and a family can turn the warning off in Settings.

Incidents. A family's parents and guardians can record incidents (for example a theft or an accident) with notes, photos and files. These are kept for as long as the family's account is open, or until the family deletes them. Notes on an incident cannot be edited after they are written.

Copies and backups. A family's parents and guardians can download a copy of their family's records at any time. VantageIQ may make backup copies of all records so that they can be put back if something goes wrong; each time staff download such a copy, it is written in the Account Record of every family whose records it includes. Once a file is downloaded, keeping it safe is the responsibility of whoever downloaded it.

We use reasonable administrative, technical, and physical safeguards to protect information. No system is completely secure, and we cannot guarantee absolute security.

A family account is opened and controlled by an adult who is the child's parent or legal guardian. That adult decides what information about a child is added, and can review it, change it, or ask us to delete it at any time.

Children under 13 do not have their own login. A parent or guardian may keep a profile for the child and is the only one who manages it. Location sharing for a child under 13 can only be set up by a parent or guardian.

Children aged 13 to 17 may be given their own login by a parent or guardian. With it they can see their own profile, basic information about their family (names, photos, phone numbers, email addresses and where family members are on the map), share their own location, check in, and send an SOS. They cannot see other family members' medical details, documents or location history. Changes to their own profile, and turning off their location sharing, take effect only after a parent or guardian approves. Sending an SOS and checking in never need approval.

At 18 a family member controls their own profile and their own location sharing.

We do not knowingly collect information directly from a child under 13 without a parent or guardian. If we learn that we have collected information from a child in violation of applicable law, we will take steps to delete it.

Text message alerts are optional. You turn them on in Settings by giving a mobile number and agreeing to receive them. Agreeing is not a condition of buying or using the Services.

Texts are sent only for urgent alerts, such as an SOS, leaving a safe zone, a missed check-in, a phone that has stopped reporting, or driving over the family's speed limit. How many you receive depends on what happens in your family. Message and data rates may apply. Reply STOP to stop at any time, or HELP for help; you can also turn text alerts off in Settings. Mobile carriers are not responsible for delayed or undelivered messages.

Depending on your account type and applicable law, you may be able to:

• update account information
• choose which alerts you receive, and turn text message alerts on or off
• pause or turn off your own location sharing (a family member aged 13 to 17 asks a parent or guardian)
• turn off or replace a private sharing link, which stops any device using it
• export certain data
• request deletion of your account or personal information

If your account is provided by an employer, school, church, agency, or other organization, that organization may control the account and associated data. The organization may be able to access, monitor, or manage content according to its own policies and agreements.

We may update this Privacy Policy from time to time. The updated version will be posted with a revised effective date.

For questions about this Privacy Policy, please contact us through the app's support channel.