Privacy policy
Loc is a social map: you leave a live frame at the place you are and see what others around you have left. This page explains what data we process and why, who we share it with and how long we keep it.
Data controller · Fatih Ozata (Vexloft)
Privacy · 01
Data controller and contact
Data controller: Fatih Ozata (Vexloft). For any question or request: merhaba@logat.co
Privacy · 02
What we process and why
Your email address: to open your account and send a one-time code each time you sign in. We do not store passwords.
Your name and short bio: shown to other users on your profile.
Frames: the photo, the place you picked and the time. Visible on the map for 24 hours.
Requests and messages: to run chat. A chat only opens when both sides accept.
Reports and blocks: to protect the community.
Privacy · 03
Date of birth is not stored
We ask for your date of birth once at sign-up, only to work out whether you are 18 or older. The result is stored as a single "adult" flag; the date itself is never written anywhere. Loc is closed to anyone under 18.
Privacy · 04
Location
There is no live location tracking. While the map is open, your location rounded to about 100 metres is sent to our server to show the frames around you; it is never stored or shown to anyone.
To prevent fake locations, a coarse version (about 1 km) is kept in memory only, for at most 30 minutes.
When you post a frame, the only place recorded is the place you picked. Frames sit on places, not on people.
Privacy · 05
Photos
Frame photos are taken with the in-app camera; there is no upload from your gallery. Your profile portrait, if you add one, can be taken with the camera or picked from your gallery; when picking, the app only sees the photo you choose. Location metadata (EXIF) is stripped on our server during upload.
Before publication every photo passes an automated check for inappropriate content. A photo that fails is never written to storage.
Privacy · 06
Notifications
If you allow notifications we store your device’s notification address. Notifications carry no content (message text is never sent) and stay silent at night.
Privacy · 07
Usage statistics
To understand how the app is used we count event names such as "frame posted" or "request sent". These events are not linked to your account and are kept on our own server; we use no advertising or tracking service.
Privacy · 08
Service providers and international transfer
Server and database: Hetzner Online GmbH, Helsinki data centre (Finland).
Photo storage: Cloudflare R2.
Inappropriate content screening: Microsoft Azure.
Sign-in code email: Resend.
Push notification delivery: Expo.
These providers process data only on our behalf and only for the purpose above. We do not sell your data or share it for advertising.
Privacy · 09
Retention and deletion
Frames are visible on the map for 24 hours. You can delete your account inside the app (Settings → Delete account).
Retention periods: frames you have not saved to your profile are deleted with their photo after 30 days; saved frames stay until you remove them. Messages stay while the chat is open; once someone leaves the chat or blocks, they are kept for 6 more months as evidence for reports and appeals, then deleted. Sign-in codes are deleted 1 day after they expire, email delivery records after 90 days, app error and freeze records after 30 days, and notification addresses unused for 180 days. Consent records and report and moderation records are kept for legal proof and accountability.
When you delete your account your email address, profile details, frames and the messages you wrote are erased. What remains: safety records that cannot be linked back to you, and an irreversible trace of your email — so that signing up again with the same address does not reset blocks or the one-request rule.
Privacy · 10
Your rights
You have the right to access, correct and erase your data and to withdraw your consent. You can change optional consents in Settings at any time. For anything else: merhaba@logat.co