Legal

Privacy Policy

This policy explains what Amortrav collects when you use the Amortrav app and smart-luggage trackers, why, who it is shared with, and the choices you have. We collect only what the service needs, we don’t sell your data and we don’t show ads.

What we collect

  • Account: when you sign in with Google, your email address, name, profile photo and Google account identifier. When you create an account with your email, your email address, first and last name, the username you choose and your password (stored only as a one-way hash), plus when you accepted these terms and confirmed you are 18 or older. We don’t ask for your date of birth.
  • Profile photo (optional): a photo you choose or take. The app shrinks it on your phone and we remove its metadata, including any location where it was taken, before storing it. Only you and authorised Amortrav staff can see it.
  • Preferences: your appearance, units, map, alert and haptics settings, so your other devices follow them.
  • Security: whether two-step verification is on, your authenticator secret (encrypted), recovery codes (stored only as one-way hashes), your active sign-in sessions (device type and time) and a log of security events such as sign-ins.
  • Your bags: the serial numbers of bags you add, the names you give them, and the positions their trackers report (location, accuracy and time), together with the movement timeline derived from those positions.
  • Your location (optional): with your permission, while the app is open, to show you on the map, measure how far your bags are and recognise when you’re at an airport.
  • Camera (optional): used only to read the QR code on your bag’s packaging. Images never leave your phone.
  • Shop orders: when you buy from our website, your email address, the bags you ordered, the shipping name, address and phone number you give the payment page, and the order’s payment status. Card details go straight to Stripe; we never see or store them.

How we use it

We don’t use your data for advertising, we don’t track you across other apps or websites, and we don’t sell or rent personal data.

  • To sign you in, keep your account secure and let you see and manage your bags.
  • To show where your bags were last seen and what has happened to them, including live updates.
  • To show live aircraft around the airport you’re at. Your position is sent to us only to find the nearest airport; it isn’t stored.
  • To send essential account emails: the code that confirms your email address, password reset codes and a notice when your password changes, a welcome message and a note when a bag is added to your account.
  • So that a small number of authorised Amortrav staff can help you and keep the service safe: they can see your account details, bags, their latest positions and recent activity when needed for support, security or legal reasons. Each time they open an account it is recorded.

Who we share it with

Only the service providers needed to run Amortrav, each limited to what it needs:

  • Google, to sign you in.
  • Cloudflare, which carries traffic between the app and our servers.
  • Mapbox, which supplies map images; it sees the map area being displayed and your network address.
  • OpenSky Network, which supplies live aircraft data; it sees only the area around an airport, never your identity or position.
  • Our email provider (Resend), to deliver account and order emails.
  • Stripe, which takes payment for shop orders and sees what you enter on its payment page.
  • The carrier that delivers your order, which receives the shipping name, address and phone number.

On your phone

Your sign-in is kept in the iOS Keychain. To work without a connection, the app keeps a copy of your bags and their latest positions in its private storage. Signing out, or the session ending, deletes that copy.

On this website

The website uses only the storage it needs to work: sign-in cookies for the console, and a key that stops a checkout being placed twice. It sets no advertising or analytics cookies. Our Cookies page lists each one.

How long we keep it

We keep your account data while your account exists. When you delete your account, we erase your profile (name, username, uploaded photo, preferences and agreements), Google link, password, two-step verification settings and recovery codes, and the location history and timeline of your bags; your bags are released so they can be set up again. A minimal security record of past actions is kept without your personal details.

Your choices and rights

  • Delete your account at any time in the app: Account → Delete account.
  • Turn location or camera access on or off in iOS Settings → Amortrav.
  • Sign out of every device from Account.
  • Ask for a copy of your data, a correction or deletion by writing to compliance@amortrav.com. Depending on where you live, you may also have the right to object to or restrict processing and to complain to your data protection authority.

Security

Data is encrypted in transit, sign-in tokens are short-lived, authenticator secrets are encrypted at rest and you can add two-step verification. No system is perfectly secure, so please keep your Google account and phone protected.

Children

Amortrav accounts are for adults: you must be 18 or older to create one. We don’t knowingly collect data from anyone younger; if you believe a child has an account, write to us and we’ll delete it.

Changes and contact

If we change this policy we’ll update the date above and, for significant changes, tell you in the app.

Questions or requests: compliance@amortrav.com.