privacy policy
what we collect
Almost nothing. Here is the full list:
- Your approximate location (latitude/longitude) while you are connected.
- A random UUID generated on your device — no name, no email, no account.
- An optional nickname and bio you choose to enter.
- Messages you send to nearby users during the session.
- An optional "shout" (a short ephemeral status) attached to your presence.
what we do not collect
- No real name, email, phone number, or any personally identifiable information.
- No persistent accounts — the UUID lives only on your device.
- No cookies set by this site.
- No IP addresses stored beyond the duration of your connection.
- No analytics or crash reporting SDKs in the mobile app — zero third-party telemetry.
- No background location — location is only accessed while the app is in the foreground.
how location is handled
Your coordinates are sent to the server only while you are actively connected and the app (or browser tab) is in the foreground. Location updates pause automatically when the app is backgrounded. Coordinates are held in memory and used solely to find nearby users. They are never written to disk and are removed from memory within 60 seconds of you disconnecting. Other users never see your exact coordinates — they only see a vague distance hint (e.g. "nearby" or "far away").
local storage — mobile app
The Anyone There iOS and Android apps store exactly three values on your device:
- Your random UUID identifier
- Your nickname (if set)
- Your bio (if set)
All three are stored using platform-native secure storage: the iOS Keychain and Android EncryptedSharedPreferences. No chat messages, location history, or nearby user data is ever written to disk.
data retention — server
- Active presence: removed 60 seconds after you disconnect.
- Ghost (recently seen) presence: removed after 1 hour.
- Chat history: stored in memory for up to 24 hours, then discarded.
- Shouts: cleared when you clear them or when your presence expires.
There is no database. All server state is in-memory only.
analytics — web
The website uses Umami, a privacy-focused, cookieless analytics tool. It collects aggregate event counts (e.g. number of connections) with no cross-site tracking and no personal data. Umami does not use cookies and is compliant with GDPR, CCPA, and PECR. The mobile apps contain no analytics or crash reporting of any kind.
third parties
No data is sold or shared with any third party. The only external service used is Umami Cloud for aggregate web analytics, as described above. All connections between the app and server use encrypted transport (WSS/HTTPS).
your rights
Because we hold no persistent personal data on the server, there is nothing to request deletion of. On mobile, deleting the app removes all locally stored data (UUID, nickname, bio) from your device. On the web, clearing your browser's local storage achieves the same.
contact
Questions? Email apptakk@gmail.com.