Privacy Policy

1. Information we collect

• Account information: email address and password (stored hashed, we never see it in plain text).
• Device information: IMEI, device label, model, and a per-device pairing key used to authenticate the mobile app.
• Location data: GPS coordinates sent periodically by the DevTrac mobile app while it's active on a registered device, along with battery level and signal accuracy.
• SIM identifiers: a one-way hash of available SIM/carrier identifiers, used only to detect a SIM swap on Pro/Family plans. We do not store or transmit the raw SIM serial number, phone number, or IMSI.
• Payment information: handled directly by our payment processor, Flutterwave. We do not receive or store your full card number.
• Support messages: anything you submit through the support form.

2. How we use this information

To provide the core service — displaying a device's location, executing lock/wipe/alarm commands you issue, generating police reports and insurance-claim documentation, detecting SIM swaps, processing payments, and sending transactional emails (incident alerts, billing notices, trial reminders).

3. Who we share data with (subprocessors)

• Supabase — database, authentication, and file storage
• Vercel — application hosting
• Mapbox — map rendering
• Flutterwave — payment processing
• Resend — transactional email delivery

We do not sell your data, and we do not share device location data with anyone other than you, the account holder.

4. Data retention

Location history is retained for as long as your account is active, so past incident reports remain accurate. You can request deletion of your account and associated data at any time (see Section 6).

5. Security

Data is encrypted in transit (TLS) and access to it is scoped per-account via database-level row security, so one user's devices and location history are never visible to another user.

6. Your rights

You can access, correct, or delete your account data by contacting us at [CONTACT EMAIL — fill in on publish]. Depending on your location, you may have additional rights under laws such as the GDPR (EU/UK), CCPA (California), or NDPR (Nigeria), including the right to data portability and the right to object to certain processing.

7. Children's privacy

DevTrac accounts are for adults. A parent or guardian may register a minor's device under their own account, but the account itself must belong to an adult.

8. Changes to this policy

We'll update the date at the top of this page when this policy changes.

9. Contact

Questions about this policy: [CONTACT EMAIL — fill in on publish]