Privacy Policy

1. Scope

This Privacy Policy applies to the FLOCKYOU mobile application, website, and backend services (together, the “Service”). FLOCKYOU is a civic-awareness tool for viewing publicly reported automated license-plate reader (“ALPR”) locations and supported official public traffic-camera views.

This policy does not apply to third-party websites, app stores, public agencies, or services that have their own privacy policies.

2. Information processed to provide the Service

Location and nearby-camera requests

If you grant permission, the app uses precise location to place you on the map, calculate distance and bearing to reported cameras, select nearby background alert regions, and answer nearby-camera requests. Proximity calculations, alert cooldowns, and geofence selection occur on your device.

A nearby-camera request sends a center coordinate and radius to the FLOCKYOU backend. FLOCKYOU uses that request to return nearby public records and does not write the request coordinate to its application database. Location permissions can be changed in your device settings.

Route and place requests

When you request address suggestions or compare routes, the request may include a search query, origin, destination, and route settings. If active navigation detects that you have remained off route, an automatic reroute can send your updated origin and selected destination. Route progress and spoken-prompt state are calculated on your device. The FLOCKYOU backend sends only the information needed to Google Places and Google Routes to provide those features. FLOCKYOU does not log request bodies, marks route responses private and non-cacheable, and does not maintain a trip-history table.

Official public-camera views

Some supported public transportation-agency services receive a bounding area around the current map view so the app can request nearby public cameras. Other jurisdiction-wide feeds are filtered on the device. If you open an agency-hosted image, page, or stream, the agency and its hosting providers receive ordinary web request data, such as your IP address and browser or device user agent.

Accounts

An account is required for camera reports and route search. If you create an account, FLOCKYOU stores your chosen handle, a salted password verifier, a recovery-code digest, and hashed session records. We do not ask for your name, email address, phone number, or social-media identity. Your session token stays in your device keychain or keystore.

Community reports

If you submit a camera report, FLOCKYOU processes the reported camera coordinate, report type, observation time, and any note you provide. The report coordinate is the subject of the report; it is not treated as your movement path. New-camera, presence, and inaccuracy reports enter moderation. Three removal reports from distinct app installations automatically remove a camera. All reports require sign-in. The app sends your account session to authenticate the request, along with a random private app-install key. The server stores only an HMAC of that key to prevent one installation from confirming the same camera twice. FLOCKYOU does not store an account ID, handle, session, raw installation key, advertising ID, phone identifier, name, or email with the report. Hosting and network providers still process ordinary connection data as described below.

Premium purchases

If Premium purchases are enabled and you make a subscription or lifetime purchase, Apple or Google handles payment information. RevenueCat and the applicable app store process the signed-in first-party account ID and transaction or entitlement status so the backend and device can verify the same Premium access. FLOCKYOU disables RevenueCat’s automatic device-identifier collection and does not receive your full payment-card information.

Operational data

Hosting and network providers may process IP addresses, timestamps, request paths, device or browser information, and security events to deliver and protect the Service. Request bodies, authorization headers, and query coordinates are not intentionally added to application logs. The FLOCKYOU website does not include advertising cookies or analytics code, though its host must process ordinary connection data to serve a page.

3. How information is used

We use the limited information described above to:

• provide maps, nearby reports, routes, alerts, and offline packs;
• operate optional accounts and Premium purchase entitlements;
• receive, moderate, and prevent abuse of community reports;
• secure, debug, and maintain the Service; and
• comply with law and enforce our Terms of Service.

We do not use location, routes, account information, or community reports to create advertising profiles.

4. Service providers and public sources

We disclose information only as needed to providers that help operate a requested feature or the Service. Depending on the feature and platform, these may include:

• cloud hosting, database, networking, and security providers;
• Google Places and Google Routes for place and route requests;
• OpenStreetMap/Overpass and supported transportation agencies for public camera information;
• Apple and Google for app distribution and purchases; and
• RevenueCat for Premium purchase entitlement management.

These disclosures are for service delivery, not a sale of information or sharing for cross-context behavioral advertising. We may also disclose information when reasonably necessary to comply with law, protect users, investigate abuse, or defend legal rights. If the Service is involved in a merger, financing, acquisition, or asset transfer, this policy will continue to apply to transferred information unless users are notified otherwise.

5. Retention

• FLOCKYOU does not keep a database of nearby-camera request coordinates, route origins, destinations, or trip history.
• Camera data and offline packs may be cached on your device for performance and offline use. You can remove the app or clear its stored data through your device controls.
• Account and session records are kept while the account exists and are deleted when you use the in-app account-deletion control, subject to limited security or legal retention requirements.
• Moderation records may be retained as needed to maintain the integrity and source history of public camera reports. Community reports do not store an account, session, raw installation key, or hardware identifier. They retain only the transformed app-install key used to prevent duplicate confirmations.
• Infrastructure logs are retained for the shortest practical operational period configured with the provider.

6. Your choices and rights

You can deny or change foreground and background location permission, disable proximity alerts, choose which camera sources appear, delete locally stored offline data, and uninstall the app. Core mapping and local proximity features do not require an account.

You can sign out or permanently delete an optional account from Settings in the FLOCKYOU app. Subscriptions can be managed or canceled through the app store that processed the purchase. Depending on where you live, you may also have rights to access, correct, delete, or restrict certain personal information, or to appeal a privacy decision.

To make a privacy request or ask a question, begin at the FLOCKYOU support page or use the privacy or support contact identified on FLOCKYOU’s current App Store or Google Play listing. We may need to verify a request before acting on it.

7. Security

FLOCKYOU uses safeguards designed for the information it handles, including encrypted transport, restricted credentials, salted password verifiers, hashed session tokens, secure device storage, and request-log redaction. No security method is perfect, and we cannot guarantee absolute security.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information, use the privacy contact on the current app-store listing so we can investigate and take appropriate action.

9. International use

The Service may be operated from and processed in the United States and other places where its providers operate. Privacy protections may differ from those in your jurisdiction. Where required, we use appropriate measures for cross-border processing.

10. Changes to this policy

We may update this policy as the Service changes. We will post the revised policy with a new effective date and provide additional notice when required by law. Material changes apply prospectively unless law requires otherwise.

11. Contact

Privacy questions and rights requests may be started from the support page. Account deletion can be initiated from Settings in the FLOCKYOU app. Before a public store release, testers may also use the support channel included with their test invitation.