Lost in Touch — Privacy Policy

Data we collect

Phone number. Used to identify your account (sign-in via SMS code) and to let you add people you're in touch with by phone number.
Name. The display name you enter, shown to people you're in touch with.
Location (city-level, approximate). With your device's location permission, we capture your approximate location periodically and share a city-level, delayed snapshot with people you're already in touch with. We do not share precise coordinates, and location is never shared with anyone outside your accepted in-touch connections.
Photos. Photos you choose to attach to a post are uploaded and shown to the people you've opted to share that content tier with.
Content you post. Post text, check-in messages, and invite details you write.
Relationship and interaction data. Who you're in touch with, your sharing preferences for each person, check-ins, and invites.
Push notification token. If you allow notifications, your device registers a token we use to deliver check-in, invite, and relationship alerts. We don't use it for anything else.
Advertising identifiers. We show ads through Google AdMob, which may collect your device's advertising identifier and general ad interaction data to select and measure ads. See "Third-party services" below.

What we don't do

No public profiles — content is only visible to people you've specifically connected with and opted to share with.
No read receipts on requests or invites.

How data is shared

Data is only visible to people you've formed a mutual "in touch" connection with, and only according to the sharing level (tier) you've chosen for that person. Location presence is only shared with accepted in-touch connections, on a delay, and is retained for a limited rolling window before being deleted.

Third-party services

Supabase: Hosted in the US West region — our backend database, authentication, and file storage provider. See Supabase's privacy policy at supabase.com/privacy.
Twilio: Sends the one-time SMS codes used to sign you in. These messages are limited to authentication codes; we don't send marketing SMS. See Twilio's privacy policy at twilio.com/legal/privacy.
Google AdMob: Shows ads in the app and may collect your advertising identifier and ad interaction data for ad selection and measurement. See Google's privacy policy at policies.google.com/privacy.

Retention & deletion

Most of your data — profile, relationships, posts, check-ins, and invites — is kept until you delete it or delete your account. Location presence is the one exception: it's automatically retained for a rolling 21-day window and then deleted on its own, regardless of whether you delete your account.

You can permanently delete your account at any time from the app: Settings → Delete account. This immediately and permanently removes your profile, relationships, posts, check-ins, invites, photos, push notification token, and location history. This action can't be undone.

Advertising identifiers are managed by your device and Google, not us — deleting your account doesn't reset them; you can do that in your device's system settings.

Children's privacy

Lost in Touch is not directed at children under 13 (or the relevant age in your jurisdiction), and we do not knowingly collect data from them.

Changes to this policy

We'll update the "Last updated" date above when this policy changes.

Contact

Questions about this policy or your data — reach us directly:

zlr20830@gmail.com