PRIVACY POLICY

1. WHO THIS POLICY COVERS

Locomate is an indoor-navigation and venue-discovery service operated by PARAMAX TECHNOLOGIES PRIVATE LIMITED, 402, Sahana Enclave, 21st Road, Bandra West, Mumbai 400050, Maharashtra, India. This policy applies to Locomate users and website visitors. A venue, store, mapping provider, app marketplace, or linked third-party service may have its own privacy practices.

2. INFORMATION WE HANDLE

ACCOUNT AND PROFILE DATA

We collect the mobile number used for OTP sign-in and information you choose to add, such as your name, date of birth, gender, profile preferences, and avatar. Authentication identifiers and session tokens are used to keep you signed in securely.

LOCATION, VENUE, AND NAVIGATION DATA

When you allow it or use a navigation feature, Locomate may process precise or approximate location, heading, floor, venue entry point, zone, route origin and destination, route status, travel distance and duration, step or motion signals, check-ins, parking location, and location-sharing status. Some sensor data may be processed on your device; navigation and venue activity may be associated with your account.

CONTACTS AND SOCIAL DATA

If you grant contacts permission, Locomate reads phone numbers from your address book to identify contacts who may already use Locomate. Contact phone numbers are sent to our service for matching. We also process friend requests, friendships, presence, visibility choices, and time-limited location shares. We do not need contact names or contact photos for matching.

PHOTOS, CAMERA, AND AVATAR DATA

If you choose to scan a venue QR code, we use the camera feed for that action. If you choose the AI-avatar feature, a photo you take or select is transmitted to our service and an AI image-generation provider to create the avatar; the resulting avatar may be stored with your profile. Do not upload a photo of another person without permission.

APP ACTIVITY AND CONTENT

We process saved stores, offers and routes; offer claims; notifications; search and navigation activity; preferences; feedback; help requests; and information you submit to support. Where parking or payment features are available, this can include a parking zone or spot, notes, photo, amount, currency, provider, payment reference, and payment status. Payment credentials are handled by the relevant payment provider, not stored by Locomate unless expressly stated.

DEVICE AND TECHNICAL DATA

We may process device platform, model, app version, push-notification token, timestamps, network requests, diagnostic information, and security logs needed to operate, protect, and troubleshoot the service.

WEBSITE CONTACT DATA

If you contact us through the website, your email app sends the name, email, phone number, enquiry type, and message you choose to include directly to our support inbox.

3. HOW WE USE INFORMATION

• Create, authenticate, maintain, and secure your Locomate account.
• Provide indoor maps, routing, venue check-ins, parking assistance, saved content, offers, notifications, and friend features.
• Match contacts, manage friend connections, and show presence or location only according to the visibility and sharing controls you select.
• Create and store an AI avatar when you request one.
• Respond to support, privacy, safety, and account-deletion requests.
• Prevent abuse, investigate errors, maintain service reliability, and enforce our terms.
• Meet legal obligations and establish, exercise, or defend legal claims.

Where applicable law requires consent, we rely on your permission for optional access such as contacts, location, motion, camera, photos, and notifications. You may withdraw device permissions in system settings, though the related feature may stop working.

4. WHEN INFORMATION IS SHARED

We do not sell your personal information. We may disclose limited information to:

• Infrastructure and authentication providers, including Supabase, which supports database, authentication, server, and file-storage functions.
• OTP and communications providers, including MessageCentral, to deliver and verify login codes.
• Mapping and navigation providers, including Mappedin, to provide indoor maps and positioning features.
• AI service providers when you choose to generate an avatar. Your selected source photo is sent for that requested generation.
• Venue, store, or operational partners where needed to fulfil an offer, resolve a venue-specific support issue, or provide a feature you request.
• Authorities or other parties where disclosure is required by law, necessary to protect people or the service, or connected with a corporate transaction subject to appropriate safeguards.

Service providers may process information only to provide contracted services to us, subject to their agreements and applicable law. Data may be processed in countries other than where you live, with protections required by applicable law.

5. SECURITY

We use safeguards designed to protect personal information, including encrypted network transport, authenticated access, access controls, signed file links, and database security rules. No internet or storage system is completely secure, so we cannot guarantee absolute security. Never share an OTP or authentication token with anyone.

6. RETENTION AND DELETION

We retain account and feature data while your account is active and as reasonably necessary to provide Locomate. Short-lived authentication, location-sharing, and signed-access records expire according to their function. Support, security, transaction, and legal records are retained only as long as reasonably necessary for the purpose collected or as required by law. Backup copies may remain for a limited period before being overwritten.

You may permanently delete your account from Settings in the Locomate app or use our account deletion page if you cannot access the app. In-app deletion removes the account and associated personal data immediately. We may retain only information required for fraud prevention, security, dispute resolution, financial recordkeeping, or another legal obligation, restricted to that purpose.

7. YOUR CHOICES AND RIGHTS

• Change location, contacts, motion, camera, photos, and notification permissions in device settings.
• Change friend visibility and sharing preferences in Locomate where available.
• Update inaccurate profile information in the app or by contacting us.
• Request access, correction, deletion, restriction, objection, portability, or withdrawal of consent where applicable law provides those rights.
• Complain to the relevant data-protection authority if you believe your rights were violated.

We may ask you to verify your identity before acting on a request.

8. CHILDREN

Locomate is not directed to children under 13. If local law requires a higher age for independent consent, a parent or legal guardian must authorize the child’s use. If you believe a child provided personal information without valid authorization, contact us so we can investigate and delete it where required.

9. CHANGES TO THIS POLICY

We may update this policy as Locomate changes or legal requirements evolve. We will post the revised policy here, update the date above, and provide additional notice where required. Material changes apply prospectively unless law requires otherwise.

10. CONTACT US

For privacy questions or requests, email support@locomate.app or write to PARAMAX TECHNOLOGIES PRIVATE LIMITED, 402, Sahana Enclave, 21st Road, Bandra West, Mumbai 400050, Maharashtra, India. For account deletion, use the dedicated deletion instructions.