Privacy Policy

Last Updated: January 2026

1. Information We Collect

ThiefTag collects the following information to provide our device tracking and recovery services:

• Account Information: Email address, name, phone number (optional), and password
• Device Information: Information about devices you register, including device names, descriptions, and photos
• Location Data: GPS coordinates from your ThiefTag devices and your mobile device when using the app
• Payment Information: Payment details are processed securely through Stripe and are not stored on our servers
• Usage Data: App usage patterns, feature interactions, and performance metrics
• Communications: Messages between users, support requests, and bounty-related communications

2. How We Use Your Information

We use your information to:

• Provide device tracking and theft recovery services
• Facilitate bounty posting and hunter matching
• Process payments for subscriptions and bounties
• Send notifications about your devices and bounties
• Improve our services and develop new features
• Prevent fraud and ensure platform security
• Comply with legal obligations

3. Information Sharing

We share your information only in the following circumstances:

• With Bounty Hunters: When you post a bounty, relevant device information is shared with hunters to facilitate recovery
• Service Providers: We use third-party services for payments (Stripe), notifications (Twilio, Resend), and AI features (OpenAI)
• Legal Requirements: When required by law or to protect our rights and users' safety
• With Your Consent: When you explicitly authorize sharing

4. Location Data

Location data is central to ThiefTag's functionality:

• Device locations are tracked continuously when enabled
• Your location may be shared with hunters when you activate a bounty
• You can enable "Ghost Mode" to hide your location from the network
• Historical location data is retained for 30 days

5. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit and at rest
• Secure password hashing with bcrypt
• Two-factor authentication options
• Regular security audits and monitoring

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and associated data
• Export your data
• Opt out of marketing communications

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, we will delete your personal data within 30 days, except where we are legally required to retain it.

8. Children's Privacy

ThiefTag is not intended for users under 18 years of age. We do not knowingly collect information from children under 18.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes via email or in-app notification.

10. Contact Us

If you have questions about this privacy policy, please contact us at:

Email: privacy@thieftag.com