WARDEN — PRIVACY POLICY

App: Warden — Family Location & Safety

Last updated: 22 July 2026

1. Who we are

Warden ("Warden", "we", "us") is a family location and safety app operated by Eduard Bruch, Kleinfeld 28c, 21149 Hamburg, Germany. For any privacy question or request, contact support@eduardbruch.com.

2. Who this is for — and children

Warden connects a parent/guardian and a child (or other family members) so they can see each other on a shared map and reach each other in an emergency. The parent/guardian sets up the family and invites members with a one-time code. Every member's device shows a consent screen before any location is shared and states clearly who can see their location. A child can leave the family and stop sharing at any time from their own device.

Because Warden processes a child's location, the parent/guardian is responsible for obtaining any consent required for their child and for using Warden lawfully. In the EU/EEA we rely on the consent of the holder of parental responsibility where required (GDPR Art. 8); the age of digital consent varies by country (e.g. 16 in Germany). Warden is not intended for children to install without a parent/guardian's involvement. Warden is not a substitute for emergency services — in an emergency, always call your local emergency number.

3. What data we collect

We collect only what the app needs to work. We do not use advertising, and we do not embed any third-party analytics, tracking, or ad SDKs.

Precise location — GPS latitude/longitude, accuracy and speed from each member's device (including in the background) — to show family on the map, trigger place arrival/departure alerts, locate-now and SOS. A downsampled location history is kept up to 30 days (a premium feature).

Battery level — the device battery percentage, for low-battery alerts.

Physical activity (motion) — processed on the device only to adjust GPS frequency for battery life; it is never transmitted to our servers.

Profile info — the first name/nickname you enter, your family name, and the invite code.

Messages & events — text/quick messages between family members, and safety events (arrivals, departures, check-ins, SOS, inactivity).

Push token — an Apple (APNs) or Google (FCM) identifier, to send notifications.

Apple identifier (optional) — if you use "Sign in with Apple" to secure/recover your account, we store the stable Apple identifier only. We do not receive or store your email or name from Apple.

Purchase status — subscription/entitlement status and a purchase identifier, via our payment providers.

We do not collect your email address, contacts, photos, browsing history or audio. Warden has no "listen-in"/ambient-audio feature.

4. How we use it

Only to: show family members on a map; send safety alerts and messages; provide SOS and check-in; manage subscriptions; secure and recover accounts; keep the service working and free of abuse; and comply with law. We do not sell your data and do not use it for advertising or profiling. Legal bases (GDPR) are your consent, performance of the service, and our legitimate interest in a safe, working product.

5. Who we share it with

We share data only with the providers needed to run Warden, under contract and only for these purposes:

Cloudflare, Inc. — hosting & database (Cloudflare Workers + D1) that store your family's data.

Apple Inc. — push notifications (APNs), Sign in with Apple, and App Store purchases.

Google LLC — push notifications (Firebase Cloud Messaging), Google Play purchases, and, on Android, the Google Maps SDK (which receives location to render the map).

RevenueCat, Inc. — subscription management (receives a purchase and app-user identifier).

We may disclose data if required by law or to protect users' safety. We do not otherwise share your data. Some providers may process data outside the EU/EEA, including in the United States, under appropriate safeguards (e.g. EU Standard Contractual Clauses).

6. How long we keep it

Live location is continuously overwritten (we keep the latest position). Location history is automatically deleted after 30 days. Account, family, message and profile data are kept until you delete your account or leave the family. You can delete your account and all associated data at any time from Settings → Delete account in the app.

7. Security

Data is encrypted in transit (TLS/HTTPS) and at rest on our providers' infrastructure, and access is authenticated with per-device tokens. Warden is not end-to-end encrypted: to show a member's location to the rest of the family, our servers necessarily process that location. We minimise data by default (history is downsampled, only stored for premium families, and auto-deleted).

8. Your rights

Under the GDPR (and similar laws) you can access, correct, delete, restrict or object to processing of your data, request portability, and withdraw consent at any time. You can do the core of this in the app (delete account, leave family, revoke the location permission in your OS settings) or contact support@eduardbruch.com. You may also complain to your local data-protection authority.

9. Changes & contact

We may update this policy; we will change the "Last updated" date and, for material changes, notify you in the app. Questions: Eduard Bruch, Kleinfeld 28c, 21149 Hamburg, Germany — support@eduardbruch.com.