Privacy Policy
Effective October 5, 2026 · Ran Innovations LLC
Your location belongs to you. We do not sell precise location data.
Who we are and scope
Ran Locate is provided by Ran Innovations LLC. This policy covers the Ran Locate iPhone, Android, and web services, including family, circle, temporary-link, safety, driving, places, schedule, and authorized workforce features.
Account and contact information
We collect information you provide or authorize, including name, email address, phone number, date of birth, profile photo, account identifier, authentication provider, circle memberships, roles, invitations, and contact details you type or select for an invitation, a customer, or a phone number. Choosing a phone contact is optional. In the app, Apple's or Android's contact picker gives Ran Locate only the contact you pick. If you also allow contacts access on your iPhone, Siri can find a contact by name when you ask Ran to share your location or route with them: the search happens on your iPhone, and only the contact you choose (their name and the number the link is texted to) is sent to Ran Locate. Ran Locate never uploads or stores your address book, and you can turn contacts access off at any time in your iPhone's Settings. If you ask us to, Ran Locate saves contacts to a private address book in your account so typing a name suggests them later: for a picked contact, only the name and the number or email you chose; for a contacts file or a customer list you import, the names, phone numbers and emails in it. We ask before saving. Saved contacts are visible only to you, are used only to fill in names and numbers inside Ran Locate, can be removed one by one from the suggestions list, and are deleted with your account.
Location, routes, and driving information
When you enable location sharing, we collect precise or approximate coordinates, timestamps, accuracy, movement state, speed and heading, selected places and destinations, routes, stops, arrival or departure events, trip and driving events, and location-sharing settings. This information powers live circle maps, background sharing, temporary links, ETAs, places, driving history, safety check-ins, and authorized work features.
Connected Tesla (optional)
If you connect a Tesla in Settings, you sign in on Tesla's own page and choose what Ran Locate may access; we never see your Tesla password. We store an encrypted Tesla access token, your cars' names and vehicle identification numbers, and which car you chose. Ran Locate reads your car's location, and the destination and arrival time it is navigating to, only when you ask: for example Where's my car, Share my route, or hands-free directions, which also check that your phone is in the car before sending it a destination or sharing its route. We send a destination to your car only when you tap Send to Tesla or ask Siri or a connected assistant to. We do not keep a history of your car's locations. You can disconnect in Settings, remove Ran's key in the car (Controls, Locks), or remove Ran Locate in your Tesla account at any time; disconnecting deletes the stored token.
Background location
If you choose Share all the time and grant Always or background precise-location access, Ran Locate may collect location when the app is closed or not visible, another app is open, or the screen is locked. Points may be encrypted and queued on the device during a temporary network outage and uploaded when service returns. On iPhone, force-quitting the app prevents background relaunch until you reopen it. You can pause sharing or change system permission at any time.
Messages and other user content
We collect private in-app text messages, Share Link conversations, voice notes and audio, profile and vehicle photos, saved places, route notes, schedules, safety responses, support requests, and other content you choose to create. In business workspaces, workers may add on-site job photos, notes and customer signatures and the job arrival time; these are saved on the phone first and uploaded when there is signal, only under the account that took them, and are visible to the business's authorized members for that job. Recipients and authorized circle members can see content you intentionally share with them.
Device, usage, and diagnostics
We may collect device and app identifiers, push-notification tokens, platform and operating-system details, language, time zone, app version, permission and sharing status, battery percentage and charging state when enabled, IP address and request logs, security and audit events, feature interactions, and technical diagnostics such as error details the app reports to our server. We do not use third-party crash-reporting or analytics SDKs. We do not collect advertising identifiers for cross-app tracking.
How we use information
We use information to create and secure accounts; deliver circle maps, messages, invitations, routes, alerts, push notifications, temporary links, safety and driving tools; provide customer support; prevent abuse and fraud; diagnose reliability problems; meet legal obligations; and improve features. We do not use precise movement history or private messages for advertising.
Who can see information
You control which circles receive your location and whether it is precise, approximate, scheduled, temporary, paused, or stopped. Authorized circle members see information allowed by your settings and their role. Temporary-link recipients see the location, route, vehicle details, and conversation associated with that link for its active session. Circle administrators may manage circle membership and links they create for members, but another adult’s sharing cannot be silently enabled without the member’s applicable permission and active sharing state.
Service providers and disclosures
We disclose only the information needed to operate Ran Locate: Supabase processes authentication, account records, databases, files, messages, location/history, and security logs; Vercel hosts the web service and processes requests, IP addresses, and technical logs; Google Maps Platform processes coordinates, addresses, place searches, routes, traffic, and map requests; Esri ArcGIS receives map-tile requests and coordinates for address lookups, and the OpenStreetMap Nominatim, Komoot Photon, and OSRM routing services may receive coordinates, addresses, and search text for fallback address, place, and route lookups; TomTom receives coordinates from our server to look up the posted road speed limit, and the OpenStreetMap Overpass service may receive coordinates for fallback road lookups; Twilio and participating carriers process phone numbers and SMS delivery data; Firebase Cloud Messaging and Apple Push Notification service process device push tokens and notification delivery; Apple or Google processes authentication data when you choose its sign-in service; Apple speech recognition processes voice commands you speak to Ran Locate on iPhone or CarPlay; Amazon receives the requests you make through Alexa if you choose to link Ran Locate to your Amazon account; and Tesla receives our server's requests to read your car's location and route and to send it destinations if you connect a Tesla. These providers must protect data consistently with this policy and may process it in the United States or other countries where they operate.
Optional Ask Ran and OpenAI
Ask Ran uses OpenAI to interpret requests and generate voice responses. Before enabling it, we ask for your explicit permission to share your questions, recent Ask Ran conversation, live voice audio when enabled, and information spoken in replies with OpenAI. Depending on your request, this may include names, locations, destinations, and other app information you are authorized to access. Twilio may relay live voice traffic when needed for connectivity. This account-level choice covers the phone and CarPlay; it does not expand access to another person's private information. Maps, navigation and messaging remain available without Ask Ran. You can review or withdraw permission through AI privacy inside Ask Ran. Opening those controls stops the current phone AI conversation; withdrawal blocks new AI requests. A live session already open on another device ends when closed or at its session limit. We record the disclosure version and time of your choice. Requests use non-storage settings where supported, but provider processing and retention remain subject to the applicable service terms; we do not promise zero retention. Withdrawal does not erase information already processed. See OpenAI's privacy policy at https://openai.com/policies/privacy-policy/ and contact our privacy support for data requests.
No sale, advertising, or tracking
Ran Locate does not sell personal information, precise location, contacts, messages, photos, or voice notes. We do not share location or driving data with insurers or data brokers. We do not use third-party advertising SDKs and do not track users across other companies’ apps or websites for advertising.
Retention
Account and circle data is kept while your account or circle is active. Location and driving history follows the retention choice available in Privacy & data and can be deleted sooner. Active Share Link data remains until the link ends, is revoked, expires, or is deleted; link history, messages, voice notes, photos, schedules, places, security logs, and support records remain only as long as reasonably needed for the feature, safety, abuse prevention, support, or legal obligations. On-site job photos, notes and signatures are business records of work done for a customer and remain with the business after a worker leaves or deletes their account, with the worker's name removed from them; the business can delete them. Deleted data may remain temporarily in access-restricted backups until the provider’s normal backup cycle overwrites it.
Your controls and rights
You can change location permission, pause or stop sharing, choose approximate sharing, leave circles, revoke or delete links, delete messages or history where offered, update profile information, export available data, and permanently delete your account from Account → Privacy & data. You may also request access, correction, export, or deletion through support@ranlocate.com. Consent can be withdrawn by disabling the applicable feature or system permission, but this may stop that feature from working.
Account deletion
In-app account deletion initiates deletion of the entire account and associated personal data that Ran Innovations LLC is not legally required to keep. This includes your uploaded files, such as profile and chat photos, vehicle photos, voice notes and message attachments, and your saved contacts. Job evidence you added in a business workspace is kept by that business without your name, as described under Retention. Captures still waiting to upload on your phone are removed from that phone. If you cannot sign in, follow the public Delete Account instructions. For new Apple sign-ins, verified authorization tokens are encrypted on our server for revocation at account deletion. When a token is available we request revocation with Apple; when it is unavailable or revocation cannot be confirmed, deletion still proceeds and we provide manual Apple-disconnection instructions. Stored authorization tokens are removed when the account is deleted. See ranlocate.com/delete-account for the process and timing.
Children and teens
Ran Locate is not directed to children under 13 and is not presented as a Kids Category app. A parent or lawful guardian must authorize and supervise any minor’s use as required by law. Family features include visible sharing status, approximate zones, scheduled privacy windows, and arrived-safe alternatives. Ran Locate must not be used for secret tracking or unlawful surveillance.
Security
We use encrypted transport, access controls, row-level database security, server-side authorization, expiring private links, rate limits, audit logs, and restricted storage. No internet or location service can guarantee absolute security. Report suspected misuse or unauthorized access to support@ranlocate.com.
Changes and contact
We may update this policy as the product, providers, or law changes. We will change the effective date and provide additional notice for material changes when appropriate. Privacy questions or complaints may be sent to Ran Innovations LLC at support@ranlocate.com.
Workforce tracking must also follow applicable employment, consent, privacy, and record-retention laws.