Privacy Policy

Loxymity is operated by AMSEK RESEARCH LABS LLP. References to “we”, “us”, or “our” in this policy refer to AMSEK RESEARCH LABS LLP. You can reach us at [email protected].

Not every category below applies to every user. Several are collected only if you switch the relevant feature on, and each one says so.

• Location data — your GPS coordinates, accuracy, speed, heading, battery level, and charging state. Collected continuously in the background when you have enabled location sharing.
• Account data — your email address and display name, provided when you register. Your phone number, if you link WhatsApp or Alexa.
• Device data — anonymous device identifiers, app version, and background-reliability diagnostics used to diagnose crashes and keep tracking alive on manufacturer-restricted phones.
• Motion and driving data — if driving reports are enabled, we record trip start and end points, distance, duration, speed and stop patterns. We also sample your accelerometer during a drive to measure road roughness (the Smoothness Index). Accelerometer data is summarised on the device into per-interval figures; the raw sensor stream never leaves your phone.
• Messages — the content of circle chat and direct messages, plus delivery and read status. Stored so messages sync across your devices.
• Calls and call recordings — metadata for in-app voice and video calls (participants, start and end time, duration). Voice calls are recorded; see section 5 below, which explains this in full.
• Bluetooth relay data — if the offline courier is enabled, your phone broadcasts an encrypted, rotating identifier and may carry small encrypted packets on behalf of other Loxymity users who are nearby and offline, and they may carry yours. A relaying device cannot read what it carries. See section 6.
• iBeacon data — UUID, major, and minor values of Bluetooth iBeacon tokens you register in the app.
• Geo-fence data — names and coordinates of geo-fences you create.
• Flight data — flight numbers and itineraries you choose to track, and the public position reports associated with them.
• Assistant queries — questions you ask in the app, in WhatsApp, or to Alexa, and the answers returned. See section 5 for how these are processed.
• Backups (optional) — if you enable Loxymity Vault, an encrypted copy of your on-device database. We store the encrypted file and cannot read it; the key is derived from your backup password, which never leaves your device.
• Contact data (optional) — if you grant contacts permission, we collect names, phone numbers, and email addresses from your device contacts. This data is used solely to suggest people to invite to your circle and, with your consent, for marketing communications. You may revoke this permission at any time in your device settings.

• To show your location to members of circles you have joined.
• To send geo-fence entry/exit notifications to your circle.
• To detect your iBeacon tokens and share their presence with your circle.
• To deliver SOS alerts to your circle.
• To produce your driving reports and road-quality figures.
• To deliver messages and calls between circle members.
• To track flights you have asked us to track and tell your circle when they land.
• To match official government weather and disaster alerts against where your circle actually is, so you only receive alerts that are relevant to you.
• To answer questions you ask the assistant, in the app, in WhatsApp, or via Alexa.
• To improve the reliability and performance of the service.
• To suggest circle invites based on your contacts (only if permission granted).
• To send relevant product updates to people in your contacts list who may benefit from Loxymity (only if you have granted contact access and only to contacts who have not opted out).

We do not use your location, messages, calls, or driving data to target advertising, and we do not sell any of it. We do not use your content to train machine-learning models.

Loxymity uses an adaptive algorithm to balance accuracy and battery life. There are no fixed polling intervals; the app picks one of two modes from what your phone is doing:

• Moving — at most one update every 60 seconds, and only after you have moved at least 20 metres.
• Stationary — at most one update every 10 minutes, and only after a 50 metre change. The app switches to this mode as soon as it detects you have stopped.
• Battery below 20 % and not charging — the stationary cadence is used regardless of whether you are moving. Charging exempts you from this downgrade; it does not otherwise increase how often your position is collected.
• During a drive — a drive in progress keeps the faster cadence even below 20 % battery, easing to one update every 2 minutes, and stops overriding the battery saver entirely below 10 %.

You can turn off location sharing entirely at any time from the Settings screen inside the app.

Call recording. In-app voice calls placed between circle members are recorded automatically from the moment the call starts. Recording is a property of the service, not a per-call choice, so there is no prompt before each call — by placing or answering an in-app voice call you and the other participants consent to that call being recorded. Video calls are not recorded. Recordings are encrypted at rest, held for 28 days and then deleted automatically. If you do not want a conversation recorded, use your normal phone dialler instead of an in-app call.

Laws on recording conversations differ by country and by state, and in some places all parties must consent. You are responsible for your own compliance when you place a call, and you should tell anyone you regularly call in-app that these calls are recorded.

The assistant. Questions you ask Loxymity — in the app, in WhatsApp, or through Alexa — are sent to a third-party language-model provider (Groq) to be interpreted, together with the minimum context needed to answer, which may include a circle member name and their current location. The provider processes the request on our behalf and does not retain it to train models. Many questions are answered from a curated local corpus or from your device cache and never reach the provider at all.

When a phone has no internet connection, nearby Loxymity phones can carry its location or messages onward until one of them reaches the network. If you have the feature enabled, your phone participates in both directions.

• Packets are encrypted end-to-end. A phone that carries a packet cannot read it, and learns nothing about whose packet it is.
• The identifier broadcast over Bluetooth rotates, so a device cannot be followed across sightings by a passive observer.
• A relayed location is only ever delivered to the circles the sender already shares with. Relaying does not widen who can see you.
• You can turn the courier off in the app. Your own location sharing continues to work normally over the internet.

We do not sell your personal data to third parties, and we have no advertising. We share data only as follows:

• Your circle members — can see your real-time location and geo-fence events as long as you are sharing.
• Law enforcement — we may disclose data where required by a court order or applicable law.

We also use the following processors, each under a data processing agreement and each receiving only what its function requires:

• Supabase — our database and authentication provider. Your data is stored in the Asia Pacific (Mumbai, India) region.
• Cloudflare R2 — stores encrypted Vault backups and call recordings.
• Agora — carries in-app voice and video calls and produces recordings.
• Groq — interprets assistant questions, as described in section 5.
• Google Maps Platform — map tiles, geocoding, directions and Street View imagery. A coordinate is sent when one of these is displayed.
• BigDataCloud — converts coordinates into place names.
• adsbdb and FlightAware — resolve and track flights you have asked us to track.
• OpenWeather and WeatherAPI — weather conditions for a location.
• Meta (WhatsApp Business Platform) and Amazon (Alexa) — carry your messages and voice requests if you link those integrations.
• Expo, Apple (APNs) and Google (FCM) — deliver push notifications.
• RevenueCat, Apple, Google, Stripe and Razorpay — process subscription purchases and validate entitlements. None of them receive location data.

• Latest location — overwritten on every update; only the most recent position is stored on our servers.
• Location history on our servers — how long we keep a point depends on the best plan you benefit from: 2 days on Free, 30 days on Gold, 90 days on Platinum and 180 days on Infinite. Because a circle plan covers the whole circle, a Free member of a paid circle gets that circle's window rather than 2 days. If you later drop to a shorter window, points already stored are not retroactively deleted before their original window expires. Older points are deleted automatically.
• Location history on your phone — your device keeps its own copy for as long as you choose, on every plan including Free. This copy is yours: it is not subject to the server windows above, and you control it from Data & Storage in the app, where you can shorten retention or delete it outright.
• Driving reports — retained for 30 days on Free and Gold, and for the length of your history window on Platinum and Infinite.
• Call recordings — 28 days, then deleted automatically.
• Messages — retained until you or the sender deletes them, or until the circle is deleted.
• Vault backups — retained while backups are enabled. Disabling Vault deletes the stored copy.
• Contacts — retained until you delete your account or revoke contacts permission.
• Account data — retained until you delete your account. Account deletion requests can be sent to [email protected]; data is removed within 30 days.

All data is encrypted in transit (TLS 1.2+) and at rest. Authentication tokens are stored in your device's secure keychain / keystore — never in plain storage. We use row-level security on our database so each user can only access their own data and data shared within circles they belong to.

Two things are encrypted such that we cannot read them at all. Vault backups use AES-256-GCM with a key stretched from your backup password on your device; we hold only the ciphertext and never receive the password. Offline courier packets are encrypted end-to-end between the sender and the circle they are addressed to, so neither the phones that carry them nor our servers can read them in transit.

Loxymity is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at [email protected].

We may update this policy from time to time. When we do, we will update the effective date above and, where the changes are material, notify you via email or an in-app notice.

Questions about this policy? Email [email protected] or write to: AMSEK RESEARCH LABS LLP, [email protected].