LociPrivacy Policy
Last updated: July 7, 2026
What Loci is
Loci turns your trips into shareable maps. To do that we store the account you sign in with, the trips you build, and the photos you choose to add. This page lists exactly what that means — no more, no less.
Information we collect
Your email address (used to sign you in — Loci is passwordless, so we never store a password). Your profile: a unique handle, display name, and an optional avatar photo and bio. Your trips: titles, dates, stops (place names and their coordinates), and each trip's visibility setting. Photos you explicitly pick to add to a trip. A record of when you export or share a trip, so we understand which share formats matter. If you sign in with Apple or Google, we receive your email address from them; Apple lets you hide it behind a relay address.
Photos and location
Loci reads the location (EXIF GPS) of photos you pick, on your device, to place stops on your map. On Android, that requires the system's photo location permission — the regular photo picker alone strips this data, so Loci reads it directly through your device's media library instead; on iOS it's read directly through the system photo picker. Before a photo is uploaded it is resized and its GPS metadata is stripped — the original coordinates never leave your phone as photo metadata. What we do send to our server are the coordinates of the stops being created, so we can name them (for example, “Barcelona”). Loci does not track your location in the background; location is only ever used for stops you deliberately add.
How we use your information
To run the product: signing you in, rendering your maps, generating share images, and showing public profiles and shared trip pages. That's it. We don't sell your data, we don't show ads, we don't use third-party advertising or analytics SDKs, and we don't use your content to train AI models.
Sharing and visibility
You control each trip's visibility. Private trips are visible only to you. Unlisted trips are visible to anyone who has the link, but listed nowhere. Public trips appear on your profile at joinloci.app and in shared links. Your profile — handle, display name, avatar, bio, follower counts, and your public trips — is publicly visible; that's what makes shared maps work.
Who processes your data
Loci runs on a small set of infrastructure providers, each processing data only to deliver the service: Supabase (database, authentication, and photo storage — hosted on AWS in Ireland), Fly.io (our photo-import API, London), Cloudflare (this website and DNS), Mapbox (map rendering and turning coordinates into place names), Resend (sending sign-in code emails), and Expo (app build and update infrastructure). We have no data brokers and no advertising partners.
Your choices and deletion
You can edit your profile, change any trip's visibility, and remove stops or photos at any time. Deleting your account (Settings → Delete account, inside the app) permanently removes your account, profile, trips, stops, follows, and every photo you uploaded — immediately, as one cascade. If you signed in with Apple, we also revoke Loci's Sign in with Apple access as part of deletion.
Data retention and security
We keep your data only while your account exists. Sessions are stored encrypted on your device. Photos live in private storage buckets served through short-lived signed URLs, and access to trip data is enforced row-by-row in the database — the same rules apply to our own services as to the app.
Changes and contact
If this policy changes materially, we'll update the date at the top and note it in the app or by email. Questions, or a data request you can't do in-app? Email hello@joinloci.app and a human will answer.