Lusis

Privacy Policy

Last updated: 2026-05-05

Lusis ("we", "our", "the app") is a private location-sharing app operated by STODR LLC, a Washington State (USA) limited liability company ("STODR", "the operator"). This policy explains what data Lusis collects, how it's used, who it's shared with, and the choices you have.

Plain-English summary

The short version, in plain language, is:

The rest of this document is the full legal version of the above.

Data we collect

Account data

When you sign up, we collect:

Location data

When you enable location sharing, Lusis collects:

Location is reported at an adaptive interval that balances accuracy against battery life — faster updates while you're moving, slower updates while you're stationary, and longer gaps when your battery is low. The exact tuning changes over time as we learn more from real usage; specific intervals aren't part of this policy.

Usage data

Technical data

Activity and motion data

To save battery, Lusis adapts how often it reports your location based on whether you're moving. To do this, the app reads short-term signals from your phone:

Raw activity history is not retained. The classification is used to set the next location update interval and is then discarded.

Crash and diagnostic reports

When the app crashes or hits an unexpected error, we collect a diagnostic report containing:

We do not deliberately include personal information in crash reports. Crash reports are sent to Sentry (sentry.io); see "Service providers" below.

In-app feedback

When you submit feedback through the in-app form, we store the text you typed, your user ID, and a timestamp. We read it manually to triage bugs and improve the app. You can request deletion of any feedback you've submitted by emailing [email protected].

Diagnostic and product telemetry

Lusis logs a small set of named events to its own backend (Supabase) to diagnose bugs and tune the location and battery algorithms. These are first-party events — none of them are sent to any third-party analytics service.

Examples of events we log:

Each event is stored with your user ID, the event name, a timestamp, and a small structured payload (typically: device state, an error message, or a coarse-rounded location). We do not include the contents of check-in messages, the names of saved places, your phone number, or your email in these events.

Permissions we request

How we use your data

We use the data above only to:

  1. Show your location to members of your shared circle you've explicitly invited and who have accepted the invitation.
  2. Deliver check-in messages from one circle member to another.
  3. Trigger geofence notifications when you arrive at or leave a saved place.
  4. Operate the app — authentication, data sync, crash diagnostics, and minimal server-side logs required for service operation. We use a third-party crash reporter (Sentry) to be told when the app fails, but we do not use any analytics SDK, advertising SDK, attribution SDK, or behavioral tracker.

We do not use your data for:

Where your data is stored

Account data, location history, check-ins, saved places, profile photos, push tokens, user-submitted feedback, and diagnostic event logs are stored on Supabase infrastructure (supabase.com), which uses data centers in the European Union (Frankfurt, Germany). Data is encrypted at rest and in transit. Supabase is our data processor; they process data only on our instructions and do not use it for their own purposes.

Crash and diagnostic reports are stored separately by Sentry (see Service providers below).

Service providers

Lusis relies on a small set of third-party services to operate. Below we describe what each category of service receives. The currently-named providers in each category are listed at the end of this section; we update that list whenever a provider changes, but the descriptions of what each category sees do not change.

We do not use any analytics, advertising, attribution, fingerprinting, or A/B-testing services.

Currently-named providers

This list reflects the providers in each category as of the "Last updated" date at the top of this page. When a provider changes, we update this list and the date.

Who can see your location

Your location is visible only to:

  1. Members of the shared circle you created or joined, and only while you have location sharing enabled.
  2. The operator, when investigating account-specific issues you've reported to us, and only with your explicit consent.

Your location stream is never sent to:

Location history retention

Location points are retained while your account is active. You can delete your entire account and all associated data at any time using Settings → Delete account in the app (see "Account deletion" below). A configurable auto-delete window for older location history is on our roadmap and will be announced in-app when available.

Push notifications

Push notifications are delivered via Expo Push (a thin layer over Apple Push Notification service and Firebase Cloud Messaging) for circle check-in alerts. Push tokens are cleared when you sign out or lose access to the app.

Your rights

You have the right to:

To exercise any right that isn't already self-service in the app, email [email protected]. We respond within 30 days.

If you are in the European Economic Area, United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

California residents (CCPA / CPRA)

If you are a California resident, you have the additional right to know what personal information we collect and how we use it (covered above), the right to delete it, the right to correct it, and the right to opt out of sale. We do not sell personal information to any third party. There is nothing to opt out of, but if this ever changes we will provide a clear opt-out mechanism.

Account deletion

You can delete your account and all associated data directly in the app via Settings → Delete account. Deletion is immediate and permanent. If you can no longer sign in, email [email protected] with the subject line "Delete my Lusis account" from the email address associated with your account, and we will complete the deletion within 7 days.

Upon deletion, we will remove:

Changes to this policy

We will post any changes to this page and update the "Last updated" date above. If the changes are material, we will notify active users in-app before the changes take effect.

Contact

Questions or requests: [email protected]

Operator: STODR LLC, Washington State, USA