Privacy at Lifeline.

Location information is personal. This notice explains what the Lifeline website, iPhone app and tracker service handle, why we use it, and how to reach us.

Effective October 22, 2026 · Operated by Aerodyne Inc.

Information we handle

• Tracker locations and events. GNSS coordinates, measurement and receipt times, accuracy or uncertainty, speed when available, movement events and derived journey or place context.
• Device and connection information. Tracker identifiers, firmware version, battery state, charging state, cellular connection information and technical diagnostics used to operate and troubleshoot the device. “Device health” means technical operating status, not medical information.
• Nearby Wi-Fi observations. Wi-Fi scan uploads contain access-point identifiers, signal strength and scan timing or radio information, sent over authenticated HTTPS. The service replaces access-point identifiers with owner-specific keyed hashes before persistent storage. This telemetry does not include Wi-Fi network names (SSIDs). These observations can be linked with known GNSS positions to build a private Wi-Fi positioning map. Hashing reduces direct exposure of access-point identifiers; it does not make location-linked observations anonymous.
• Provisioning and access information. Information needed to identify an authorized device, authenticate requests and associate access with its owner. Sign in with Apple provides an app-specific account identifier to authenticate you; the app does not request your name or email address for sign-in. We also handle caregiver invitations, account membership, per-phone signed-in sessions and phone labels, and device ownership records.
• Notifications. Notification preferences and an Apple push-notification device token let us send enabled alerts to your phone, such as arrivals, departures or low tracker battery.
• Inquiries and support. Information you choose to submit through the contact form, including your name if provided, email address, topic, message and consent. We use it to handle your inquiry.
• Website and service requests. Hosting and security systems receive ordinary technical request information, which may include IP address, time, requested URL, browser information and errors.

How we use it

We use this information to receive tracker reports, provide location history and estimates, maintain accounts and device ownership, manage caregiver access, deliver enabled notifications, improve positioning and power management, troubleshoot failures and respond to inquiries. Location estimates may be inaccurate, stale or unavailable.

The current website has no advertising, third-party analytics scripts or marketing trackers. We do not sell tracker location information or use it for targeted advertising.

Who receives information

Tracker information is intended for authorized owners and caregivers, not public browsing. People with legitimate service administration responsibilities may access information when necessary to operate the service or provide support.

We use infrastructure providers to deliver the service: Cloudflare provides this website and internet-facing delivery or security services; Vultr hosts the Lifeline backend, which privately receives contact-form submissions. Cloudflare serves the static contact page. Your cellular provider processes connection and network information under its own terms. A public GNSS assistance source provides satellite assistance data; the tracker’s location is not sent to that source to obtain the public feed.

The iPhone app uses Apple services for App Store distribution, Sign in with Apple, Apple Push Notification service and Apple Maps through MapKit. To calculate a driving-time estimate home, the app sends the tracker’s location and your configured home location to Apple. Opening driving directions sends those route endpoints to Apple Maps as well. Apple also processes map requests needed to display the map. Apple processes information for these services under its own privacy terms. We may also disclose information when legally required or to address abuse and protect people or the service.

Retention

Current service retention is limited by data type:

• Detailed tracker telemetry and associated scan records are scheduled for deletion after 7 days.
• Wi-Fi calibration observations and related provenance used for positioning are retained for up to 30 days.
• Contact-form inquiries are retained for up to 30 days. Abuse prevention uses keyed, hashed rate-limit tokens; the inquiry store does not retain your raw IP address. Hosting and network providers may handle IP addresses separately as described above.
• The iPhone app keeps an encrypted, account-scoped last-known snapshot and a bounded set of recent journey records for offline viewing for up to 7 days. This local cache is excluded from device backups and cleared when you sign out. Saved readings keep their original location and contact times; opening an offline reading does not make it a new report.
• Rolling local service backups are retained for approximately 2 additional days. They are stored on the same host; current backups are not copied to an off-host service.

Operational cleanup runs periodically, so removal may occur after the scheduled cutoff rather than at its exact instant. Account or provisioning records needed for an active device, support records beyond the contact form and necessary security records may be retained for the time required for those purposes. We will update this notice if retention changes.

Security and your choices

Device and authorized-client requests use credentials, and internet communication with the API uses HTTPS. No system can guarantee complete security or uninterrupted availability. Keep device credentials and account access private, and contact us promptly if a tracker or authorized phone is lost.

You can stop new reports by switching the tracker off. You can delete your Lifeline account in the app’s Settings after confirming your identity with Apple. This revokes your Lifeline phone sessions and removes your account and tracker history you own. Disconnecting Lifeline’s authorization in your Apple Account is currently a separate step; the app provides a link after deletion if it is needed. To request access, correction or deletion of information associated with your tracker, use our contact form. We may need to verify ownership before acting. Deletion from active service may precede expiry from rolling backups. Please do not include precise locations, secret credentials or medical details in an inquiry.

Caregiver use and children

Lifeline is designed for use by adults with appropriate authority and permission to operate a tracker. The app is for parents, caregivers and other authorized adults; it does not offer child accounts. A tracker may process the location of a child when an authorized parent or guardian uses it for that purpose. Do not use Lifeline to track someone secretly or without the knowledge, permission or legal authority required for your circumstances.

Contact and updates

Aerodyne Inc. operates Lifeline. Send privacy questions or requests through our contact form. We will revise this notice when our practices or available features change and show the effective date here.