1. Who we are

Locary (“the App”) is developed by Gentleflow (“we”, “us”, “our”). Contact gentleflowoverseas@gmail.com with privacy questions.

2. Information the App handles

• Private map content: coordinates, place names, dates, text, notes, favorites, music details, and other metadata you enter or create.
• Media: photos and videos you select or capture, and voice recordings you create. These are copied into the App's private local storage.
• Photo-library footprints: if you choose photo import or Photo Sync, Locary reads asset identifiers, capture dates, and locations from the system photo library to group geotagged photos into visits. The original photos remain in the system library and are not copied or uploaded by this feature.
• Location: when you tap the location control or create a place-based memory, Locary may use your current location after permission. MapKit and Apple's geocoding services may process coordinates to display the map and resolve a place name.
• Optional iCloud sync: when a Pro user enables sync, Locary uploads a versioned snapshot of place and entry data, together with media already copied into Locary, to that user's private CloudKit database. Existing snapshots can be restored without Pro. Gentleflow does not receive or have access to this private database.
• Subscription data: product, transaction, entitlement, country/region, and device/OS-related information handled by Apple and RevenueCat. We do not receive payment-card details or Apple Account credentials.
• Technical data: when RevenueCat is contacted, it may receive ordinary service data such as a pseudonymous App User ID, IP address, device and OS information, request status, and service events.
• Exports: when you choose backup export, Locary creates a ZIP containing your data and media. Apple's share sheet sends it only to the destination you choose.

3. How and why we use information

Locary uses this information to save and display your private memory map, attach content to places, search and review entries, import photo footprints, create backups you request, sync and restore your private iCloud snapshot, verify Pro access, restore purchases, troubleshoot failures, and meet legal obligations. We do not use IDFA, serve ads, sell personal information, or track activity across other companies' apps or websites.

4. Storage and service providers

• On-device storage. Map content and Locary-managed media are stored in the App's private local container by default. Locary has no Gentleflow account or Gentleflow-operated memory server.
• Your private iCloud database. If you enable Pro sync, Locary uses CloudKit container iCloud.tech.gentleflow.locary to store one current, versioned snapshot and its referenced media in your Apple Account's private database. The snapshot is published only after its media uploads complete. Gentleflow cannot browse or retrieve this private content.
• Apple. Apple provides CloudKit/iCloud, MapKit, geocoding, system permissions, media pickers, App Store payments, sharing, and optional App Store diagnostics under Apple's Privacy Policy.
• RevenueCat. RevenueCat verifies and restores purchases and manages entitlements. It may process a pseudonymous App User ID plus transaction, product, country, device, OS, IP, and service-event information. See RevenueCat's Privacy Policy.

5. Permissions and your choices

• Location, camera, microphone, photo selection, and Apple Music access are requested only when relevant to a feature you choose.
• You can deny or later change permissions in iOS Settings. Core browsing and existing local memories remain available when optional permissions are denied.
• The system photo picker limits manual attachment access to the items you choose. Photo-footprint import and Photo Sync request photo-library access so Locary can scan capture dates and locations; imported originals remain in the system library.
• iCloud upload is off by default and requires Pro. Turning sync off stops future uploads but does not itself delete an existing private iCloud snapshot. Restoring an existing snapshot is always available without Pro; when local data is not empty, Locary asks before replacing it.
• You choose every backup destination through Apple's share sheet.

6. Diagnostics

If “Share With App Developers” is enabled on your device, Apple may provide crash and performance reports through App Store Connect. Locary contains no independent analytics SDK and no advertising SDK.

7. Retention and deletion

Local content remains until you delete entries or delete the App. If sync is enabled, later uploads replace the current iCloud snapshot and remove media no longer referenced by that snapshot. Turning sync off or deleting the App does not by itself remove the existing private iCloud snapshot; you control iCloud data through your Apple Account and Apple's system settings. Exported files remain wherever you chose to save or send them. Apple and RevenueCat retain purchase and service records according to their policies and legal obligations. To request deletion of data, if any, that Gentleflow can reasonably associate with you, email us. Some transaction records cannot be deleted where law requires retention.

8. Children

Locary is not directed to children and does not ask users to create an account or provide contact details. If you believe a child provided personal information to us, contact us so we can evaluate the request.

9. Security, rights, and changes

Locary uses Apple's application sandbox, private CloudKit database, and platform protections, but no system is completely secure. Apple and RevenueCat may process service data in other countries under their safeguards. Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing. Locary content is held on your device and, only when sync is enabled, in your private iCloud database; both are controlled through your device and Apple Account. We may update this policy and will revise the effective date above.

10. Contact

Email gentleflowoverseas@gmail.com.