Welcome to Phone Number Location Tracker (the "App"), developed and operated by WhiteOak Labs ("we", "us", or "our"). We take your privacy seriously and are fully dedicated to handling your personal and sensitive data responsibly, transparently, and in strict accordance with the Google Play Developer Program Policies, the General Data Protection Regulation (GDPR), and California privacy laws (CCPA/CPRA).
This Privacy Policy explains what information we collect, how it is used, under what circumstances it may be processed, how we protect your information, and how you can exercise your data access and deletion rights.
Summary of Core Privacy Commitments
- No Advertising: The App does not contain third-party advertisements and does not use advertising tracking networks.
- Strict Mutual Consent: Location sharing is 100% voluntary, mutual, and bidirectional. Covert, hidden, or non-consensual tracking is strictly prohibited and technically impossible in the App.
- Prominent Status-Bar Notification: Whenever active live location sharing is running, Android displays an ongoing persistent notification.
- Data Control & Deletion: You can disconnect members, revoke permissions, or request permanent deletion of your data at any time.
1. Strictly Consensual Location Sharing (Anti-Stalkerware Policy)
Google Play strictly prohibits stalkerware, spyware, and covert surveillance applications. In complete adherence to these safety requirements:
- Mutual Two-Way Agreement: You can only share your location with or view the location of another user if both parties actively and intentionally connect by exchanging a unique Connection ID or scanning a QR code. One party sends a connection request, and the other party must explicitly accept it.
- Continuous Transparency: The App does not operate invisibly or silently. When live location sharing is running, a persistent, prominent notification is displayed in your device's notification tray indicating that location sharing is in progress.
- Instant Opt-Out: Either connected party can stop sharing location or permanently remove the connection at any time directly within the App with immediate effect.
- No Third-Party Spy Tracking: The App cannot be used to secretly monitor or locate any phone without the target device having the App installed and granting explicit, continuous permission.
- Phone Number Lookup Clarification: The phone number lookup and area code tools ("Device Finder", "Dial Codes") only match dial prefixes against publicly available international telecom numbering plans (using the open-source
libphonenumber library). This feature identifies telecom carriers and approximate city/region codes offline; it does not track or reveal the real-time physical GPS location of arbitrary phone numbers.
2. Information We Collect and How We Use It
We only collect and process data that is strictly necessary to deliver the App's core safety and navigation features:
A. Precise and Approximate Location Data
Permissions: ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION
- Foreground Location: When the App is active on your screen, we access your device's GPS coordinates to display your position on the map, provide speedometer/velocity readings, show nearby points of interest, and allow you to configure Geofence safety zones.
- Transmission: Your location coordinates are transmitted securely over encrypted channels to our Firebase Realtime Database exclusively to display your position to your mutually connected family members or friends.
Important: Background Location Disclosure (ACCESS_BACKGROUND_LOCATION)
Why Background Location is Needed: The App requests background location access (accessing location even when the App is closed or not in active use) strictly for two primary features:
- Mutual Real-Time Location Sharing: When you actively enable location sharing with approved connections, our foreground service (
PositionSyncService) continues syncing your coordinates so that your designated family members can view your location in real time for safety purposes.
- Geofence / Zone Alerts: To monitor user-defined boundaries (Safe Zones or Danger Zones) and automatically notify you when your device enters or exits these designated safety areas.
Your Control: Background location is never enabled without your explicit choice. You can grant, change, or revoke this permission at any time in your device settings under Settings > Apps > Phone Number Location Tracker > Permissions > Location. You can also stop sharing at any moment within the App.
No Commercial Exploitation: Background location data is never sold, leased, or shared with advertising networks or data brokers.
B. Device and Technical Identifiers
- Unique Device Identifier: We retrieve a secure Android ID (
Settings.Secure.ANDROID_ID) to establish your unique, anonymous user identification key (UID) within our backend database. This UID is required to pair devices, generate your shareable QR code, manage connection invitations, and associate your active location updates.
- Hardware Information: Device model (e.g., Pixel 7, Galaxy S23), manufacturer, operating system version, and App build version. This information is used for device compatibility, crash diagnostics, and to display a friendly device label to your connected members.
C. User-Provided Profile Information & Feedback
- Profile Display Name: You may voluntarily provide a friendly nickname or display name (e.g., "Dad", "Sarah's Phone") in the Settings menu. If provided, this name is stored locally and synced to our database so your approved connections can recognize you. If omitted, your device model is used as the default label.
- Feedback & Rating: When you voluntarily submit feedback or report an issue via our in-app feedback dialog, we collect your star rating, written feedback comments, timestamp, and device model to resolve technical issues and improve the App.
D. Camera Access
Permission: CAMERA
- Purpose: Camera access is requested solely to scan QR codes displayed by your family members or friends to instantly establish a connection.
- On-Device Local Processing: The camera feed is processed in real-time entirely on your device using on-device scanning libraries (Google ML Kit and ZXing).
- Zero Storage or Transmission: We do not take photos, record videos, store camera frames, or transmit any imagery to any server.
E. Notification Access
Permission: POST_NOTIFICATIONS
- Required on Android 13 (API level 33) and above to deliver Geofence arrival/departure alerts, friend invitation notifications, and to display the mandatory ongoing system notification while background location sharing is active.
3. Data Collection Summary Table
| Data Type |
Specific Items |
Purpose |
Shared with Third Parties? |
Retention |
| Location |
Precise & Approximate GPS coordinates, speed, timestamp |
Core app functionality, live location sharing, zone alerts |
Only shared with your mutually approved connections via Firebase |
Ephemeral; continuously overwritten with latest coordinate |
| Device / Identifiers |
Android ID, device model, OS version |
Account identification, pairing connections, diagnostics |
Google Firebase (Backend database, Crashlytics) |
Retained while app is in use; deletable upon request |
| Personal Info |
User-chosen display name, voluntary feedback text |
Member recognition, customer support |
Google Firebase |
Retained until changed, deleted, or requested for removal |
| Camera |
Real-time camera feed for QR scanning |
Pairing with other devices via QR code |
Never shared (Processed 100% on-device) |
Zero retention; not recorded or stored |
| Diagnostics & Analytics |
Crash logs, error stack traces, anonymous feature usage |
App stability, bug fixing, performance monitoring |
Firebase Crashlytics, Firebase Analytics |
Subject to standard Firebase retention windows (up to 90 days) |
4. Advertising Policy (No Ads)
Zero Third-Party Advertising
Phone Number Location Tracker does not contain third-party ads. We do not integrate advertising SDKs (such as Google AdMob, Unity Ads, Facebook Audience Network, or AppLovin), we do not collect or transmit the Google Advertising ID (AAID), and we do not participate in targeted advertising, behavioral tracking, or data monetization.
5. Third-Party Service Providers
We partner only with reputable, privacy-compliant infrastructure providers to operate the App. These third parties only process data on our instructions and under confidentiality agreements:
- Google Play Services: Used for core location detection (Fused Location Provider) and mapping infrastructure (Google Maps SDK). (Google Privacy Policy)
- Google Firebase Realtime Database: Secure cloud database used to store device pairing keys, display names, and relay live coordinates between approved connections. (Firebase Privacy and Security)
- Firebase Crashlytics & Analytics: Aggregated, privacy-safe crash reporting and usage analytics to identify crashes and improve app reliability. (Firebase Analytics Policy)
- Google Play In-App Review: Enables users to provide Google Play store ratings natively. (Google Play Services Policy)
6. Data Retention and Account / Data Deletion Policy
We retain personal information only for as long as necessary to provide you with the App's services, comply with legal obligations, or until you request its deletion.
How to Delete Your Data Directly In the App
- Stop Location Sharing: Turn off location sharing toggle at any time to immediately cease transmitting your coordinates.
- Remove Connected Members: Open the "Connections" tab and tap "Remove" on any connected contact. This immediately deletes the mutual sharing permission and severs data transmission between both devices in our database.
- Delete Geofence Zones: Open the Geofence section, swipe or tap delete on any saved zone to remove all associated coordinates from your local device database.
7. Data Security Measures
We implement robust technical and organizational security measures to protect your information:
- Encryption in Transit: All communications between the App and Firebase servers or Google Maps APIs are secured using standard Transport Layer Security (TLS 1.2 / TLS 1.3 / HTTPS).
- Database Rules: Firebase Realtime Database rules restrict access to ensure only mutually approved connection keys can read location coordinates.
- Minimal Storage: Coordinates are treated as transient live data and are continuously overwritten rather than compiled into perpetual location history logs.
8. Children's Privacy (COPPA and GDPR-K)
The App is intended for general audiences and family safety use. We do not knowingly collect personal information directly from children under 13 years of age (or under 16 in the EEA/UK) without verifiable parental consent.
If parents or legal guardians choose to connect their minor children's devices for family safety tracking, the parent or guardian is responsible for supervising the child's device, managing permissions, and granting consent for location sharing. If we learn that we have collected personal data from a child under the relevant minimum age without verifiable parental consent, we will take immediate steps to delete that data from our servers. Parents wishing to review or delete their child's data may contact us at zeelllll2000@gmail.com.
9. Your Legal Rights (GDPR & CCPA/CPRA)
Depending on your geographic location, you may have specific legal rights regarding your personal data:
- European Economic Area (EEA) and United Kingdom (GDPR / UK GDPR): You have the right to access your personal data, request correction of inaccurate data, request erasure ("Right to be Forgotten"), restrict or object to processing, and request data portability. Our legal basis for processing location data is your explicit, revocable consent (Article 6(1)(a) GDPR).
- California Residents (CCPA / CPRA): You have the right to know what personal information we collect, request deletion, and request correction. We do not sell your personal information, nor do we share your personal information for cross-context behavioral advertising.
To exercise any of these rights, please submit a request to zeelllll2000@gmail.com. We will respond within thirty (30) days without discriminating against you for exercising your privacy rights.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect modifications in our operational practices, technical features, or legal requirements. When updates are published, the "Last Updated" date at the top of this document will be revised accordingly. We encourage you to review this Privacy Policy periodically to stay informed about how we safeguard your information.
11. Contact Us
If you have any questions, concerns, comments, or data deletion requests regarding this Privacy Policy or our privacy practices, please contact us at: