Privacy Policy

Last updated 4 October 2026

ClanTrack shares where you are with the people in your clans, all the time. That is the most sensitive data an app can hold, so this page says plainly what is collected, why, and who sees it. It describes what the app actually does, not what it might do later.

Who we are

ClanTrack is operated by an individual developer in South Africa. For any privacy question, or to have your data deleted, email privacy@clantrack.com.

What we collect

Your account

Your email address, your name, and any name you choose to use in a particular clan. Your email is used only for your account: confirmation codes and password resets. We do not send marketing email.
Your password, stored only as a PBKDF2-HMAC-SHA256 hash. We cannot read it.

Your location, while sharing is on

Latitude, longitude and how accurate the phone says the position is, with the time it was taken.
Collected continuously, including when the app is closed or not in use, because that is what lets your clan find you. Android shows a permanent notification the whole time sharing is on.
When you pause sharing in every clan you belong to, positions are no longer stored at all — not merely hidden.

About your phone

Battery level and whether it is charging, so your clan can be warned before your phone dies.
Whether the phone allows background location, and whether battery saving or battery optimisation is on, so the app can warn when sharing is about to stop working.
The phone's model name, an identifier the app creates for it, the app version, and a push notification token from Google Firebase.

Your clans

Which clans you are in, your role, whether you are sharing, whether care mode is on and who turned it on, and the alerts about members (for example "phone gone quiet" or "paused sharing").

What we do not collect

No advertising identifiers, no third-party analytics, no tracking across other apps or sites.
No contacts, photos, microphone or camera.
No payment details.

Who sees it

The people in your clans

Members of a clan you joined see your current position while you share with that clan, when your phone last checked in, its battery level, your recent positions (up to the last 7 days), and the alerts about you. Nobody is added to a clan without accepting an invite on their own phone, and every member can see every other member. When you pause sharing, the clan sees that you paused but not where you are.

Services we rely on

Google Firebase Cloud Messaging delivers alerts to phones (and, for iPhones, Apple's push service). It receives the push token and the alert text, such as "Mom's phone has gone quiet". Alerts never contain a position.
Mailgun sends confirmation and password reset emails.
Google Maps draws the map inside the app. Google's map component collects its own technical data under Google's privacy policy; it does not receive your clan's history.
Our server is a virtual machine hosted by DigitalOcean in Amsterdam.

We do not sell your data, and we do not share it for advertising.

How long we keep it

Location history: 7 days, then deleted automatically. Only your most recent position is kept beyond that, and it is replaced by the next one. Location history is never included in backups.
Alerts: 90 days.
Your account and clan memberships: until you delete them.
Records of phones you signed out of: 30 days.

Your choices

Pause sharing with a clan at any time, in the app (unless you turned on care mode, which a clan admin can turn off again).
Leave a clan at any time; the clan is told.
Delete your account: in the app, Profile → Delete account. It is immediate and removes your location history, memberships and devices. Without the app, see clantrack.com/delete-account.
Withdraw location permission in your phone's settings at any time. Sharing stops, and your clan will be told your phone has gone quiet.
Get a copy of your data: ask, and we will send it.

South Africa's POPIA and the EU GDPR give you rights over your personal information, including access, correction and deletion. The list above is how to use them here.

Security

Traffic between the app and our server is encrypted with TLS. Passwords, sign-in credentials for each phone, confirmation codes and invite codes are stored only as one-way fingerprints, so a copy of our database is not a set of usable credentials. No system is perfectly secure, and we would rather say so.

Children

ClanTrack is not intended for children under 13, and we do not knowingly collect their information.

Changes

If this policy changes in a way that affects what is collected or who sees it, we will say so in the app rather than quietly editing this page.