Privacy Policy

Effective 11 November 2026. This policy explains what Nexus Family Safety (“the app”, “we”) collects on Android and iPhone, why, who can see it, and the choices you have. The app is provided by Ecross Technologies Private Limited, India.

1. What we collect

• Account details: how you sign in. On Android in India this is your mobile phone number, verified with a one-time code sent by SMS. On Android in other countries you sign in with your Google account: Google gives us your email address, your name and a link to your profile picture (we keep the link, not the picture; your circle sees the picture on the map). On iPhone you can use Sign in with Apple: Apple gives us a unique identifier for you. We do not ask Apple for your name or email address, so with Sign in with Apple we never see your Apple email, real or private-relay. We also store the name you enter in the app, and a record that you confirmed you are 18 or older and accepted our terms.
• Precise location, including in the background: while location sharing is on, the app collects your phone’s precise location even when the app is closed or not in use. On iPhone this needs you to allow location “Always”, and iOS shows its location indicator while the app uses it. On Android a notification shows while the app is recording a trip (and all day on phones where drive detection is turned off). This is used to show your live position to your circle, to send arrival and departure alerts, and to record your trips.
• Trips and driving report (Android and iPhone): start and end time and place, route, distance, duration and speed of drives and rides the app detects automatically, and from these a weekly driving report (number of drives, distance, top speed, hard stops). Only you see your trips; the report is shared with your circle only if you switch that on.
• Physical activity and motion (Android and iPhone, optional): if you allow it, your phone (Google Play services on Android, the motion sensors on iPhone) tells the app when you start or stop being in a vehicle or on a bike, so a trip is noticed as soon as it starts. This is used on your phone only: we do not send it to our servers, show it to your circle, use it for ads or share it with anyone. You can turn it off in your phone’s Settings.
• Places: places you or your circle add (for example Home), and when you arrive at or leave them.
• Reactions: when you tap a reaction such as “Glad you're home” on a family member's arrival, we store that reaction so they can see who sent it.
• SOS alerts: when you press SOS, we store the time, your location and battery level so your circle can see it.
• Device information: phone brand and model, Android or iOS version, app version, battery level, notification (push) token, and whether location, battery saver or a permission is turned off on your phone (so your family can see why it isn't sharing). On Android we also store which phone-setting steps you have completed, to keep sharing reliable.
• Crash reports (Android and iPhone): technical information about app crashes (device model, Android or iOS version, the error), through Google Firebase Crashlytics. They include no location.
• Place suggestions (Android and iPhone): your phone notes the places where you stay a long time (for example overnight) and keeps them on the phone for up to 21 days, to ask “Is this Home?”. Nothing leaves your phone unless you tap Yes, and then only that one place is saved to your circle.
• Diagnostics (Android): a short log kept on your phone of when location sharing started or stopped and when trips were detected, to help find out why a trip was missed. It holds no locations, names or places, and it leaves your phone only if you choose to send it from the Safety tab.
• Usage statistics (Android and iPhone): which steps of the app people complete (for example creating a circle or finishing phone setup), counted with a random app ID, through Google Firebase Analytics. Google also works out a rough country or region from your internet connection. No location from your phone, name, phone number, place names or circle details are included.
• Advertising measurement (Android and iPhone): so we can tell whether our own ads work and show them to people likely to find the app useful, the Meta (Facebook) SDK tells Meta when the app is installed or opened, when an account is created, when a circle is created or joined, when someone joins your circle, when the store’s Premium purchase screen opens, and when a Premium subscription or free trial is bought, renewed or restored, or a purchase fails (with the plan, price and currency). On Android this comes with your phone’s advertising ID, which you can reset or delete in your Android settings (Settings > Privacy > Ads). On iPhone we do not collect the advertising ID. Meta receives no location, name, phone number or circle details.
• Premium purchases: when a member buys Premium we keep a record of it: the store (Apple or Google), the plan, the purchase identifier the store gives us, start and end dates, whether it renews or is a trial, which account bought it and which circle it covers. Apple or Google takes the payment: we never see or store your card or payment details. Meta receives the purchase events described in the advertising measurement item above, never your card or payment details. On Android we also keep, with the purchase record, the random app ID that the Meta SDK creates for the app on your phone (not your advertising ID), so that we can later tell Meta when a free trial becomes a paid subscription, which happens at the store when the app may be closed.

2. How we use it

• To show your location and battery level to the people in your circle, and to tell them when you reach or leave a place.
• To keep your private trip diary and send you a weekly summary of your own trips and arrivals.
• To tell your circle when your phone has stopped sharing, so they are not misled by an old location.
• To send you and your circle notifications, including SOS alerts.
• To sign you in, keep the service secure and prevent misuse.
• To find and fix problems.
• To count installs, sign-ups and Premium purchases from our own ads, to help those ads reach people likely to find the app useful, and to see which steps of the app people finish so we can improve it.
• To provide Premium: to check a purchase with Apple or Google, to switch Premium on for the circle it covers, and to apply the free plan’s limits (3 saved places, 7 days of trip history) to circles without it.

We do not use your location or your family’s details for advertising and we do not sell your data or share it with data brokers. No advertising or analytics service receives your location.

3. Who can see your data

• Your circle: the people you invite, and who join, can see your name, your Google profile picture if you signed in with Google, your live location and battery level while sharing is on, arrival and departure alerts for shared places, and any SOS you send. If your phone has stopped sharing for more than an hour, your circle may be told, with the reason if we know it (for example battery saver). You can see who is in your circle and who can see you in the app.
• Leaving a circle: you can leave at any time in the app. You and the circle stop seeing each other’s location, your arrivals there and the invite links you made are removed, and the others are told you left. Your trips stay yours.
• Pausing: you can pause sharing at any time. While paused, other members cannot see your location. SOS still works because you press it yourself.
• Trips are private: only you can see your trips.
• Premium: everyone in a circle can see whether Premium is on and until when. They cannot see who paid, or anything about the payment.
• Us: we access personal data only where needed to run and secure the service, or where the law requires.

4. Service providers

We use these providers to run the app. They process data on our behalf, except where noted:

• Supabase: database and sign-in. Our data is stored in India (Mumbai).
• Google (Firebase, Google Maps, Google sign-in and Google Play): push notifications, crash reports and usage statistics, map display on Android, sign-in for Android users outside India, and payment and billing for Premium on Android.
• Meta (Android and iPhone): counts app installs, app opens, sign-ups, circles created or joined, and Premium checkouts, purchases and trials for our own ads, as described in section 1. Meta also handles these events under its own terms and privacy policy.
• Apple: Sign in with Apple, push notifications (Apple Push Notification service), map display on iPhone, and payment and billing for Premium on iPhone (App Store).
• MSG91: sends the one-time sign-in code by SMS to phone numbers in India.
• Vercel: hosts this website.

5. How long we keep it

We keep your data until you delete your account. Your live location is a single latest position that is replaced as you move. You can delete individual trips in the app. When you delete your account, all the personal data described above, including your Premium purchase records, is deleted from our systems immediately, and on iPhone we also tell Apple to end the Sign in with Apple link to the app. Apple and Google keep their own payment records under their own policies. Deleting your account does not cancel a subscription: cancel it first in your Apple ID settings or in Google Play, or you will keep being charged, and the circle it covered returns to the free plan. Encrypted backups held by our database provider are overwritten automatically on a rolling basis. Our SMS provider may keep delivery records of sign-in messages under its own policy.

6. Your choices and rights

• Delete your account and data: in the app, open Safety, then Account and privacy, then Delete my account. See how to delete your account.
• Stop location collection: pause sharing in Safety, or turn off location permission in your phone’s Settings.
• Access or correct your data: your name and trips are visible and editable in the app. For anything else, contact us.
• Withdraw consent: you can withdraw consent at any time by deleting your account or turning off permissions. Some features then stop working.

7. Where your data is processed

Our servers are in India. If you use the app from outside India, your data is sent to and stored in India. We protect it with encryption in transit, database access rules and the contractual safeguards required by the laws that apply to you (see the regional sections below).

8. Information for your region

United States

• Precise location is “sensitive” personal information under several state laws (for example California, Colorado, Virginia). We collect it only with your consent, use it only to provide the app as described above, and we do not sell or share it for advertising.
• Depending on your state you may ask us to tell you what we hold, correct it, delete it, or limit how sensitive data is used. Use the in-app deletion, or contact us. We will not treat you differently for using these rights.
• The app is for adults only. It is not directed to children under 13, or to anyone under 18.

European Economic Area and United Kingdom

• Who is responsible: Ecross Technologies Private Limited is the controller of your data.
• Our legal bases: your explicit consent for location (you can withdraw it any time by pausing, changing permissions or deleting your account), and performance of the service you asked for for your account details.
• Transfers: your data is stored in India. We rely on appropriate safeguards for the transfer, such as standard contractual clauses, where the law requires them.
• Your rights: access, correction, erasure, restriction, portability and objection, and the right to complain to your local data protection authority. Contact us to use them.

Australia

• We handle your personal information in line with the Australian Privacy Principles. We collect it to run the app, as explained above.
• Your information is disclosed to our service providers overseas, mainly in India (our database), and in the United States (Google, Apple). We take reasonable steps to make sure they protect it.
• You can ask to access or correct your information, or make a privacy complaint, by contacting us. If we cannot resolve it, you can complain to the Office of the Australian Information Commissioner.

United Arab Emirates

• We collect and use your personal data only with your consent and for the purposes above, as required by the UAE Federal Personal Data Protection Law.
• Your data is transferred to and stored in India. By using the app you agree to this transfer, which you can withdraw by deleting your account.
• You may ask to access, correct or erase your data, or object to its use, by contacting us.

India

• You have rights under the Digital Personal Data Protection Act, 2023, including access, correction, erasure and grievance redressal. Write to the contact below and we will respond within a reasonable time.

9. Children

The app is for adults only (18+). We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, contact us and we will delete the account.

10. Security

Data is sent over encrypted connections. Access to each person’s data is limited by database access rules so that only you and the people you share with can see it. No system is perfectly secure, so please keep your phone locked and your circle limited to people you trust.

11. Changes to this policy

If we change this policy in a way that matters, we will tell you in the app before the change takes effect. The date above shows the latest version.

12. Contact and grievance

Ecross Technologies Private Limited, India. Email: care@carx.io