Your location.
Your choice.

WiTrack is a location-sharing app by Wira Apps. Contact us about privacy, support, or deletion at [email protected]. Our website is wiracode.com.

Location and consent

With your permission, opening the map or tapping Locate reads your position once to show your own dot. This own-device check is kept on your phone; it is not uploaded to the WiTrack service. The map provider receives requests for the area you view.

Background sharing is optional and off by default. If you enable it and approve another person, that person can request a fresh location while WiTrack is closed or not in use. Each accepted request shows a notification and reads one position. Coordinates, accuracy, and capture time are sent through the WiTrack service to the approved person. There is no continuous location stream or route history. Android may provide an approximate position if you choose approximate access. You may decline location access and still use other available features.

Device profiles and other information

No email, phone number, or password is required to connect devices. The service stores a public device ID, an editable device name, a hash of the installation's private credential, an installation identifier, a push token, and connection approvals and requests. These support authentication, delivery, and access control. The IDs are generated by WiTrack; we do not use your IMEI, SIM identifier, or advertising ID. Your device name may contain personal information if you enter it.

Who receives data

Knowing your public ID allows someone to request access, not to see your location. Access requires your approval and is one-directional. You can pause sharing, remove a person's access, or stop an active location request from its notification. Data already delivered to a recipient cannot be recalled; recipients may retain what they have seen.

Cloudflare Pages Functions and D1 process profiles, permissions, and location requests. Google Firebase Cloud Messaging and Firebase Installations process push tokens, installation identifiers, and technical metadata such as app version to deliver notifications. WiTrack's push payload contains a request identifier rather than coordinates. OpenStreetMap tile servers receive the viewed map area and network metadata, including your IP address. Hosting and network providers may also process request metadata to operate and secure their services. Data may be processed in countries where these providers operate.

WiTrack has no advertising or analytics SDK and does not sell your location or use it for advertising. The landing page does not request your GPS location. If you email support, we receive your email address and the information you send to handle your request. See the providers' information: Cloudflare, Firebase, and OpenStreetMap Foundation.

Security and retention

Requests use HTTPS. The phone protects its private credential with Android Keystore, and the service authenticates access to results. This version does not use end-to-end encryption: the service operator can access stored data.

Location requests expire after one minute. Successful results become inaccessible through the API after 24 hours. Expired records are physically deleted during cleanup on service traffic, so physical deletion may occur later while the service is idle. Pausing sharing deletes your stored location requests; removing someone’s access also deletes your stored location requests. Pending connection requests expire after seven days and are removed during cleanup. Profiles and approved relationships remain until you delete them.

Provider backups and operational logs follow the provider's retention settings and terms; deleting from the active database does not instantly erase those copies. Support messages may be retained to resolve your request and meet applicable obligations. Contact us for help with information retained by the service or its providers.

Delete your data

In WiTrack, open Me → Delete device data. This stops sharing and deletes your cloud profile, credential, push registration, approvals, connection requests, and associated locations from the active service. It requires connectivity when cloud data exists. A failed deletion can be retried; the app does not discard the credential needed to retry. After successful deletion, cloud connection stays disabled until you explicitly reconnect. Reconnecting creates a new profile and requires new approvals.

You can also request deletion outside the app using our WiTrack data deletion page. Uninstalling or clearing app data alone does not delete the old cloud profile. Without the original installation, ownership may be harder to verify. Do not send passwords, private device credentials, or coordinates to support. A public ID alone does not authorize access to or deletion of someone else's data.

Your choices and policy changes

Manage sharing and background permissions in Me, remove access in People, or revoke location and notification permissions in Android settings. Background requests are best effort and are not an emergency service. Material changes to these practices will be reflected here; additional consent will be requested in the app where required before using data differently.