Privacy Policy
Allokay: Family Safety, by Workaholic Developers. Last updated 11 October 2026.
Allokay helps families and friends know that everyone is okay: it shares your location with the people in your circles, lets you check in once a day, watch a trip, and send an SOS. Location is sensitive, so this policy says plainly what we collect, who sees it, how long we keep it and how you delete it. There is no hidden tracking, ever: everyone in a circle knows they are in it.
The short version
- Your location is shared only with the people in your circles, who you can always see in the app under Who can see me. You can pause sharing or share an approximate location with a circle.
- Locations are encrypted on our server and deleted after 7 or 31 days (the circle admin chooses).
- No ads, no trackers, no analytics SDKs, and we never sell or rent your data.
- You can delete your account in the app at any time; your history is deleted with it.
What we collect
Your account. A display name, a colour, an optional profile photo, your time zone and language. There is no email address, phone number or password: your account lives on your phone, and a recovery code (stored only as a one-way hash) lets you move it to a new phone. Photos are re-encoded on our server (which removes camera metadata such as the GPS position) and encrypted.
Your device. The platform (iOS or Android), phone model, system and app versions, and a push notification token so we can send you alerts.
Your location, while sharing is on. Position (latitude and longitude), accuracy, speed, heading, altitude and the time of each fix. On iPhone, the system's "visits" (where the phone stayed for a while) and geofence events for your circles' saved places. The app collects this in the background when you allow "Always" location access, because that is what lets your family see you are okay without opening the app. On Android a persistent notification shows while sharing is on.
Phone status. Battery level, whether it is charging or in low-power mode, whether location services and precise location are on, and the location permission you granted. This powers the "low battery" and "location is off" alerts your circle can see.
Things you create. Circles and their settings, saved places (name, position, radius, address), alerts you set up, daily check-ins and the optional status you type, Watch my trip destinations and arrival times, SOS events, pings ("are you okay?") and their answers, ring requests, pause requests, and the alerts feed built from these events.
We do not collect your contacts, photos (other than a profile photo you choose), messages, browsing or app usage, advertising identifiers or health data.
Kept only on your phone. Phone numbers you type for the Call button, your app lock PIN (stored hashed in the Keychain / Keystore), your language and theme, and a short copy of your circle so the app opens quickly offline. These never leave your phone and are removed when you sign out or delete your account.
How we use it
Only to run Allokay: to show your circle where you are, build your timeline (visits, routes and time away from home), send the alerts you and your circle asked for (arrivals, check-ins, trips, SOS, battery, location off, phone not reporting, speeding), keep the tracking accuracy right for the moment (higher during an SOS or a watched trip), and keep the service secure. We do not profile you, advertise to you or use your data to train anything.
Who can see your information
- People in your circles. They see your name, colour, photo, live location, current place or street address, battery and phone status, check-ins, trips and SOS, and your timeline for the days the circle keeps. In a circle where you share an approximate location they see only a position rounded to about 1 km, no address or place and no timeline. While you have paused sharing, they see "paused" and the last place you were at; no new positions are stored.
- Who can see me. The app lists, for every circle, each person who can see you, your precision and your pause state. Nobody can see you without being listed there.
- Live links. When you start an SOS or a watched trip, Allokay creates a private link
(
allokay.wdlab.app/s/…). Anyone who has that link can see your name, latest location, battery, your path in the last hour and, for a trip, the destination, until the link expires: one hour after you end the SOS (at most 24 hours) or one hour after the trip ends. You decide who you send it to. - Nobody else. We do not share your information with advertisers, data brokers or anyone else, unless the law requires it.
Children
Allokay is a family app. A child's account is set up on the child's phone together with a parent, and joins the family circle only through an invite from a parent who is the circle's admin and who chooses the child role. We collect from a child only what is listed above and only to run the service for their family; there are no ads, no profiling and no public profiles. Children always share a precise location with their family circle, and a parent can turn on the child safety lock, which means leaving the circle, pausing sharing, removing places or changing precision needs the parent's PIN. The child is always told when the lock changes, and the app explains it to them.
Parents can see their child's information in the app, remove the child from the circle, or delete the child's account from the child's phone (Settings, Delete account), which deletes the child's data. If you are a parent and think your child is using Allokay without your consent, write to us at info@workaholicdevelopers.com and we will help you delete it.
How long we keep it
| Data | Kept for |
|---|---|
| Location points, iPhone visits, timelines | 7 or 31 days, as the circle chooses (the longest of your circles), then deleted every night |
| Alerts feed | The circle's 7 or 31 days |
| Check-ins | Up to a year, so your streak can be counted; the status text you typed is removed after 31 days |
| SOS and trip records | Up to 31 days after they end (live links stop working much sooner, see above) |
| Pings and ring requests | 7 days |
| Invites | Deleted a day after they expire (they last 7 days) |
| Address lookups | 90 days, as a cache keyed by rounded coordinates, not linked to any person |
| Push delivery log (no message text) | 30 days |
| Your account, places and settings | Until you delete them or your account |
Security
All traffic uses HTTPS. On our server, coordinates, addresses, place names, statuses, alert details and photos are encrypted at rest (AES-256) with a key that is kept separately from the database. Access to the server is limited to Workaholic Developers.
Services we use
- Apple Push Notification service and, on Android, Firebase Cloud Messaging deliver alerts. They receive your device's push token and the notification text (which can include a name or place name).
- OpenStreetMap Nominatim: to show street addresses, our server sends coordinates rounded to about 11 m to the OpenStreetMap Foundation's address service. The request comes from our server, not your phone, carries no information about who you are, and the answer is cached.
- OpenFreeMap serves the map tiles. Your phone (or browser, on a live link) downloads map tiles for the area on screen directly from OpenFreeMap, which sees your IP address and that area, as any map does.
- Our website loads fonts from Google Fonts and the map library from unpkg; it sets no cookies.
Your choices and rights
- Pause sharing, share an approximate location, leave a circle or turn off location access at any time (a child under the safety lock needs a parent for some of these).
- Choose which alerts you get and set quiet hours.
- Delete your account in Settings: your account, devices, location history, timelines, check-ins, trips, SOS events, alerts about you and your photo are deleted immediately. If you were the only admin of a circle, the longest-standing adult becomes its admin; a circle with nobody left is deleted.
- Ask us for a copy of your data, or for help with anything in this policy, at info@workaholicdevelopers.com. Depending on where you live (for example under the GDPR or India's DPDP Act) you may also have the right to correct or erase your data and to complain to your data protection authority.
Changes
If we change this policy we will update the date above, and tell you in the app before any change that affects how your location is used.
Contact
Workaholic Developers · info@workaholicdevelopers.com · workaholicdevelopers.com