Hereo Location Tracker – Privacy Policy

Privacy Policy

Last updated: January 20, 2026

Intro

This Privacy Notice explains how we collect, use, disclose, and protect your personal data when you use Hereo Location Tracker (the "App"), and describes your privacy rights and how the law protects you.

By downloading, registering, or using the App, you acknowledge this Privacy Notice and consent to the collection, processing, transfer, and use of your personal data as described here. If you do not agree, you must stop using the App.

We do not knowingly process personal data of children under 16 years of age without appropriate consent. If you are under 16, please ask your parent or legal guardian to review and accept this Notice on your behalf. If you believe a minor has provided data without consent, contact us and we will delete it.


About Us (Data Controller)

Company name: CraftersLabs OÜ
Registered address: Harju maakond, Tallinn, Kesklinna linnaosa, Kaupmehe tn 7-120, 10114
General inquiries: oleg@crafterslabs.com


Sources of Data

We obtain personal data:

You may correct your personal data by contacting us (see "Your Rights"). The same lawful basis and retention rules apply to corrected data.


Lawful Bases

We rely on the following lawful bases for processing:


Types of Data We Collect (What, Why, Legal Basis)

1) Identification & Account Data

What: name, email, phone number (if used), Apple ID identifiers, account/Circle IDs.
Why: to create/manage your account, authenticate access, enable Circles, customer support.
Basis: contract; legitimate interests; consent (where applicable).

2) Location Data

What: device GPS coordinates and related metadata; approximate IP-based location.
Why: to provide real-time location sharing, geofences/alerts, history (per plan), and safety features (e.g., SOS).
Basis: consent; contract; legitimate interests (App operation & safety).

You can turn location sharing on/off in the App or device settings at any time.

3) Device & Technical Data

What: device model, OS version, language, time zone, app version, unique identifiers (e.g., IDFA where enabled), crash logs, diagnostics.
Why: to keep the App secure and functioning, fight fraud/abuse, improve performance, analytics.
Basis: legitimate interests; contract; consent (e.g., IDFA/marketing).

4) Usage & Interaction Data

What: features used, screens viewed, taps, session duration, notifications received, in-App events.
Why: to personalize content, improve UX, measure feature adoption, troubleshoot.
Basis: legitimate interests; contract; consent (analytics where required).

5) Media & Device Functions (optional)

What: profile photo (gallery/camera); limited access to camera/gallery when you choose to upload.
Why: to set/update your profile and enhance identification for Circle members.
Basis: consent; contract.

6) Subscription & Transaction Data

What: plan, status, renewal dates, region, transaction identifiers, receipts, refunds (via Apple).
Why: to activate services, verify eligibility, provide customer support, prevent abuse.
Basis: contract; legal obligation; legitimate interests.

7) Consumption Information (Apple)

What (examples): account tenure, App Account Token (UUID), purchase/refund status, platform, play time, user status.
Why: to review refunds and prevent fraud/deceptive activity in accordance with App Store policies.
Basis: legitimate interests; consent where applicable.

We do not collect special categories of personal data (e.g., health, religion, political views) or criminal records. We apply data minimization and process only what is necessary for stated purposes.


Third-Party Services & Disclosures

We share data only as necessary for the purposes described above and with safeguards in place. We do not sell your personal data.

Types of recipients

Representative list of providers (may change over time):

Apple Inc.; Google LLC; Firebase/Google Analytics; Amplitude Inc.; Cloudflare Inc.; Amazon Web Services, Inc.; Hetzner Online GmbH; Velia.net Internetdienste GmbH; Namecheap Inc.; Meta Platforms, Inc.; Appfigures Inc.

We require all third parties to process personal data only on our instructions, maintain appropriate security, and comply with applicable laws.

Send Consumption Information API (Apple)

If you request a refund for an in-app purchase or subscription, you acknowledge and consent that we may transfer Consumption Information to Apple to assess the request and prevent fraud, subject to Apple's Privacy Policy.


International (Cross-Border) Transfers

Your data may be processed in countries outside your residence, including outside the EU/EEA/UK/US. Where required, we implement appropriate safeguards (e.g., Standard Contractual Clauses or equivalent) to protect your data.


Changes to this Privacy Notice

We may update this Notice from time to time. For material changes, we will notify you in the App (or by email, where appropriate) and, where required, seek your consent again. Continued use of the App after changes take effect constitutes acceptance of the updated Notice.


Opt-Out & Withdrawal of Consent

You can opt out or withdraw consent at any time by:


Data from Third Parties

When you purchase subscriptions, we receive transaction/receipt data and related metadata from the Apple App Store for activation, support, and fraud prevention. Processing of such data is also governed by Apple's terms and privacy policies.


Banking Information

Payments are processed exclusively by Apple. We do not collect or store your full payment card details. Your relationship for payment data is with Apple under its privacy notices.


Data Security

We implement technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Access is limited to personnel and providers with a business need and confidentiality obligations.

Examples of security technologies and practices:

In case of a personal data breach, we will notify you and/or authorities where legally required.


Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described here, including legal, accounting, or reporting requirements. We consider the amount, nature, sensitivity of data, potential risk of harm, the purposes of processing, and legal requirements.

You can request deletion (see "Your Rights"). We may anonymize data for analytics/statistics; anonymized data is not personal data.


Your Legal Rights

Residents of the European Economic Area (EEA) & United Kingdom

Subject to conditions and exceptions, you have the right to:

To exercise rights, contact oleg@crafterslabs.com. We may verify your identity before responding.

United States Residents

Depending on your state law, you may have rights to access, correct, delete, portability, opt-out of sale/sharing/targeted advertising, and to limit use of sensitive data, and rights against solely automated decision-making. To exercise, contact oleg@crafterslabs.com. We typically respond within 30–60 days (with possible extension where permitted).

We do not sell personal information, but you may still submit an opt-out request; we will record and honor your preference where applicable.

Canada Residents

You may have rights under federal/provincial privacy laws, including access, correction, and complaint with the Office of the Privacy Commissioner of Canada. Contact us at oleg@crafterslabs.com.


Children's Privacy (COPPA – U.S.)

For children under 13, we obtain verifiable parental consent before collecting, using, or disclosing personal information. A parent/guardian may provide consent through permitted App Store purchase flows or other approved methods. You may revoke consent at any time by contacting oleg@crafterslabs.com; upon revocation we will delete the child's personal data unless retention is legally required.


Children’s Privacy and Data Protection

  1. We do not knowingly collect, process, store, or track personal data of individuals under the age of 18 without verifiable parental or legal guardian consent.
  2. For any minor user, parental or legal guardian consent must be obtained by:
  3. If verified consent is not provided, withdrawn, or found invalid, we will:
  4. Parents or legal guardians may request access, correction, or deletion of their child’s data at any time by contacting support.
  5. We retain no child data beyond what is strictly necessary to confirm and document parental consent.

"Do Not Sell My Personal Information" (California)

We do not sell your personal information. California residents may still request that we do not sell/share personal information in the future. Submit any request to oleg@crafterslabs.com.


Glossary (Selected)


Contact Us

Questions, requests, or complaints about this Privacy Notice or your personal data:

oleg@crafterslabs.com