Legal

Privacy Policy

Last updated: September 17, 2026

This Privacy Policy explains how Eresteo LTD ("Eresteo," "we," "us," or "our") collects, uses, stores, shares, and protects personal information when you use our mobile applications, websites, and related services (collectively, the "Services").

This Privacy Policy is intended to explain our data practices. Where applicable law or platform rules require your consent for a particular type of data processing, we request that consent separately through the relevant Service.

1. About Us

Eresteo LTD operates the Services and acts as the data controller for personal data processed through the Services, except where otherwise stated.

Registered address:

Eresteo LTD

Onisiforou Center, Floor 2

Agios Theodoros

Neofytou Nikolaidi & Theodorou Kolokotroni

Paphos 8011

Cyprus (CY)

Email: support@eresteo.com

If you have questions about this Privacy Policy or wish to exercise your privacy rights, you may contact us using the contact information provided in Section 14.

2. Definitions

Personal Data:

Information that identifies you directly or indirectly or can reasonably be linked to you.

Service / Services:

Any mobile application, website, feature, or related service provided by Eresteo LTD that links to this Privacy Policy.

Device:

A smartphone, tablet, or other electronic device used to access a Service.

User / You:

An individual who accesses or uses a Service.

Usage Data:

Technical and interaction information generated through use of a Service.

Family Group:

Where supported by a Service, a group of connected users who choose or are authorized to share information with one another through that Service.

3. Information We Collect

3.1 Information You Provide Directly

When you create an account, configure a Service, join a group, use a feature, or contact us, you may provide information such as:

Full name
Email address, including information received through supported sign-in providers such as Google Sign-In
Phone number, where used
Profile photo
Profile information and preferences
Family-group or relationship information, where applicable
Support inquiries, feedback, and communications
Information you deliberately submit or share through a Service

The specific information collected depends on the Service and the features you use.

3.2 Location Data

Certain Services that provide location-based functionality may collect and process location information, including:

Precise GPS location
Current and recent location
Location history and timeline information
Location timestamps
Territory, geofence, arrival, or departure events where such features are enabled

Where required for a Service's functionality and permitted by your device settings and applicable law, location data may be collected in the background, including when the app is closed, is not visible on the screen, or is otherwise not actively in use.

Background location may be used to provide features such as continuous location sharing with authorized connected users, location history, and location-based safety, territory, arrival, or departure features.

Location information is not collected for the purpose of targeted advertising and Eresteo LTD does not sell location data.

You may change or revoke location permission through your device settings. Disabling location access, particularly background or precise location access, may prevent or significantly limit location-based functionality.

3.3 Device and Technical Data

Depending on the Service, we may automatically collect technical information necessary to operate, secure, troubleshoot, and improve the Services, such as:

Device type and model
Operating system and version
App version
IP address
App or installation identifiers
Push-notification tokens
Battery level and battery-related status where required by a feature
Connection and technical status
Usage and interaction information
Crash reports
Diagnostic and performance information

We do not use device information to track users across unrelated apps for advertising purposes unless this is separately disclosed and legally permitted.

3.4 Media, Audio, and User Content

Depending on the Service, the features you choose to use, and the permissions you grant, we may process:

Profile photographs or other images you select
Images captured using the device camera when you deliberately use a feature requiring the camera
Audio recordings or voice notes that you deliberately record or share
SOS messages or information submitted through safety features
Other content that you choose to provide or share through a Service

We do not continuously record through your microphone merely because microphone permission has been granted. Microphone access is used for features requiring audio input when those features are activated by the user, unless a different behavior is clearly disclosed before use.

Where your operating system permits limited media selection, a Service may access only the media you choose rather than your entire media library.

3.5 Safety and Connected-User Information

Certain Services may provide family, safety, emergency, or connected-user functionality. Where applicable, we may process information such as:

SOS or emergency events
Territory or location-based safety events
Battery status
Location-sharing status
Device connectivity or availability status
Information necessary to inform authorized connected users about relevant safety events

The exact information visible to another user depends on the Service, feature, relationship between users, and applicable settings and permissions.

3.6 Payment and Subscription Information

When you purchase a subscription or other paid product, we may receive transaction information from the relevant payment provider, such as:

Transaction identifier
Transaction date and time
Subscription plan and status
Purchase amount and currency
Country or region associated with the transaction

We do not directly collect or store your complete payment-card number, bank-account credentials, or similar direct payment credentials when payment is processed through third-party payment providers such as Google Play, the Apple App Store, or another authorized payment provider.

Those providers process payment information according to their own privacy policies.

3.7 Third-Party Sign-In

If you choose to sign in using Google or another supported identity provider, we may receive information permitted by that provider and authorized by you, which may include:

Name
Email address
Profile picture
Provider-specific account or authentication identifier

We do not receive your password for the third-party account.

4. How We Use Your Information

We process Personal Data only for defined purposes and where we have an appropriate legal basis.

Typical purposes may include:

Creating and managing your account
Providing requested Service functionality
Providing family, safety, connected-user, or location features where applicable
Processing location information, including background location, where required by the Service and permitted by law
Processing media, camera, microphone, or other user-provided content when requested by you
Sharing information with authorized connected users where that is a feature of the Service
Delivering SOS, safety, service, or account notifications
Processing subscriptions and purchases
Responding to support requests
Diagnosing crashes and improving reliability
Preventing abuse, fraud, and security incidents
Complying with legal requirements
Protecting our legal rights and the rights of users and others

Depending on the circumstances, the applicable legal basis may include:

Performance of a contract
Your consent
Our legitimate interests
Compliance with a legal obligation
Protection of vital or other legally recognized interests
Parental or guardian authorization where required by applicable law

Where our processing depends on your consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

5. Sharing Your Information

We do not sell your Personal Data.

We may disclose information in the following circumstances:

5.1 With Authorized Connected Users

Certain Services are designed to allow users to share information with other authorized or connected users.

Depending on the Service, feature, and settings, connected users may be able to see information such as:

Profile information
Current location
Location history, where enabled
Battery status
Location or territory events
SOS information
Connection or availability status
Audio notes or other content that you deliberately share

Users should only connect with people whom they are authorized and willing to share information with.

5.2 Service Providers

We may use third-party service providers for functions such as:

Cloud hosting and database infrastructure
Authentication
Push notifications
Crash reporting and diagnostics
Analytics
Customer support
Payment and subscription processing

These providers may process information on our behalf only as necessary to provide their services, subject to applicable contractual and legal safeguards.

5.3 Payment Providers

Google Play, Apple, or other authorized payment providers may process subscription and transaction information according to their own privacy policies.

5.4 Legal Requirements

We may disclose Personal Data where we reasonably believe disclosure is required by applicable law, regulation, legal process, or a valid governmental or judicial request.

5.5 Safety, Fraud Prevention, and Legal Rights

We may process or disclose information where reasonably necessary to:

Protect users or other persons from harm
Investigate fraud, abuse, or security incidents
Enforce our terms and policies
Establish, exercise, or defend legal claims

5.6 Business Transfers

If Eresteo LTD is involved in a merger, acquisition, financing, reorganization, or sale of all or part of its business or assets, Personal Data may be transferred as part of that transaction, subject to applicable law.

5.7 With Your Authorization

We may share information for another purpose where you have specifically authorized us to do so.

6. Data Retention and Deletion

We retain Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required or permitted by applicable law.

6.1 Account Data

Account information is normally retained while your account remains active.

When an account-deletion request is completed, Personal Data associated with the account will normally be deleted or anonymized within 30 days, except for limited information that we are legally required or otherwise lawfully permitted to retain.

6.2 Location Data

Where a Service stores location information, it is retained only for as long as necessary to provide the relevant location or history functionality and according to any retention or deletion controls made available through that Service.

When an account is permanently deleted, associated location information is also scheduled for deletion, subject to legitimate legal exceptions described in this section.

6.3 Transaction and Legal Records

Certain transaction, accounting, tax, fraud-prevention, dispute, or legal records may need to be retained after account deletion for the period required or permitted by applicable law.

Information retained for these purposes is limited to what is reasonably necessary and is not retained for the purpose of continuing to provide Services to a deleted account.

6.4 Diagnostic and Usage Information

Diagnostic, crash, performance, and usage data may be retained for a limited period as necessary to maintain and improve the Services. Information may also be aggregated or anonymized so that it can no longer reasonably identify an individual.

6.5 Support Communications

Support communications may be retained for a reasonable period to resolve requests, maintain service records, prevent abuse, and comply with legal obligations.

6.6 Backups

Residual copies of deleted information may temporarily remain in protected backup systems until those backups are overwritten or expire according to our backup cycle. Such information will not be restored for ordinary use except where necessary for disaster recovery, security, or legal reasons.

When information is no longer required, we delete, anonymize, or otherwise securely dispose of it as appropriate.

7. Data Security

We use reasonable technical and organizational safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration, loss, or destruction.

These measures may include:

Encryption of data in transit using secure transport protocols
Authentication and account-security controls
Restrictions on access to Personal Data
Security and diagnostic monitoring
Measures designed to protect our infrastructure and databases

No electronic transmission or storage system can be guaranteed to be completely secure. Users should also protect their account credentials and devices against unauthorized access.

8. Your Privacy Rights

Depending on where you live and the laws that apply to you, you may have rights including:

Access: Request information about the Personal Data we hold about you.
Correction: Request correction of inaccurate or incomplete Personal Data.
Deletion: Request deletion of Personal Data.
Portability: Request certain Personal Data in a structured, commonly used, machine-readable format where applicable.
Restriction: Request restriction of certain processing.
Objection: Object to certain processing based on legitimate interests.
Withdrawal of Consent: Withdraw consent where processing depends on consent.
Complaint: Lodge a complaint with the competent data-protection or supervisory authority where applicable.

8.1 Delete Your Account

Where a Service allows users to create an account, users may request permanent deletion of that account and associated Personal Data using the account-deletion function provided through the Service or through the applicable account-deletion webpage. You can request account deletion at https://eresteo.com/account-deletion.html.

Deleting an account does not necessarily cancel a subscription managed directly by an external app store or payment provider unless the Service expressly confirms that the subscription has been cancelled. Where required, subscriptions must be cancelled through the store or payment provider through which they were purchased.

8.2 Exercising Your Rights

You may exercise applicable rights by:

Using privacy, permission, or account controls available within the relevant Service
Using the applicable account-deletion mechanism
Contacting us using the information in Section 14

We may need to verify your identity before fulfilling certain requests.

We will respond within the period required by applicable law.

9. Device Permissions

A Service may request device permissions necessary for features you choose to use.

9.1 Location

Certain Services may request precise foreground and background location permission.

Background location enables relevant location, safety, or connected-user features to continue functioning when the app is closed or not actively in use.

9.2 Camera

Camera permission may be requested when you choose to capture a photo or use another feature requiring camera access.

9.3 Microphone

Microphone permission may be requested when you choose to record an audio message, voice note, or use another feature requiring audio input.

9.4 Photos and Media

A Service may request access to selected photos or media when you choose to upload, share, or save media.

9.5 Notifications

Notification permission may be used for features such as:

Safety alerts
SOS notifications
Location or territory events
Service-related updates
Account or subscription information
Other notifications provided by the relevant Service

You may manage device permissions through your operating-system settings. Revoking a permission may prevent the related feature from functioning correctly.

10. Children's and Minors' Privacy

The Services are not intended to be used by minors in violation of applicable law.

Where applicable law requires consent, authorization, or supervision from a parent or legal guardian before a minor may use a Service or before Personal Data concerning that minor may be processed, the Service may only be used after that requirement has been satisfied.

A minor should not independently create or operate an account where applicable law requires parental or guardian involvement.

Where a Service is lawfully used by a minor, we may process the categories of information necessary to provide that Service, which may include:

Profile information
Device information
Location and location history, where applicable
Battery status, where applicable
Safety or SOS events, where applicable
Territory or location events, where applicable
Content that the minor or an authorized user deliberately provides through the Service

Such information is used only for the purposes described in this Privacy Policy and according to the features of the relevant Service.

Parents and legal guardians may contact us to request access to, correction of, or deletion of a minor's Personal Data where applicable.

If we learn that Personal Data concerning a minor has been collected in circumstances where legally required parental or guardian authorization was not obtained, we will take appropriate steps, which may include restricting the account and deleting the information.

The age at which a person may independently consent to the processing of Personal Data differs between jurisdictions. Use of the Services by minors must comply with the laws applicable in the user's country or region.

11. International Data Transfers

Eresteo LTD and its service providers may process Personal Data in countries other than the country in which you live.

Where Personal Data is transferred internationally and applicable law requires safeguards, we use appropriate transfer mechanisms. These may include contractual safeguards such as Standard Contractual Clauses approved by the European Commission or other legally recognized safeguards.

12. Third-Party Services and Links

A Service may integrate with or provide links to third-party services.

Third-party services process information according to their own privacy policies and terms. Eresteo LTD is not responsible for the independent privacy practices of third parties except to the extent required by applicable law.

We encourage users to review the privacy information provided by third-party services they choose to use.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, data practices, legal requirements, or other relevant circumstances.

When we make changes, we may:

Update the "Last updated" date
Provide notice through the relevant Service, our website, email, or another appropriate method
Request new consent or authorization where required by applicable law

We will not treat continued use of a Service as consent to new processing where applicable law requires separate affirmative consent.

14. Contact Us

For questions, requests, or concerns concerning this Privacy Policy or our processing of Personal Data, contact: