This policy explains how LeMoove handles personal data when you use the LeMoove app for iPhone and Android, the trackers and devices connected to it, and this website (lemoove.com). It’s written to be read: when a technical term can’t be avoided, we explain what it means.
Throughout this text, “LeMoove”, “we”, “us” and “our” refer to LeMoove, which is responsible for the app and this website. “You” means anyone who uses the app or visits the website. LeMoove is based in Brazil and follows the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018). If you live elsewhere, your local law may give you similar or additional rights, and you can exercise them through the same channel.
This policy complements the terms of use. The Privacy and security page summarizes the same content.
Who is responsible for your data
LeMoove is operated by NAS SOFTWARE, Brazilian company registration (CNPJ) No. 45.911.457/0001-96, based in São Paulo, Brazil. It is the controller of the personal data processed in the app and on this website: it decides why and how it’s used.
For any privacy matter, including exercising your rights, the channel is [email protected]. This is also the channel for reaching the person in charge of data protection, as required by the LGPD.
The core idea: location with consent, inside a group
LeMoove exists so that people who know each other, like a family, can share their location with one another. Three rules shape everything in this policy:
- Nobody is located without taking part. To appear on the map, a person installs LeMoove on their own phone, joins a group with an invite code and allows location in the system settings. It’s not possible to locate someone by their phone number.
- Only the group sees. Your location is only delivered to people who, at that moment, share at least one group with you. This rule is enforced on the server, not just on the app’s screen.
- We keep less, for less time. Location data has retention periods and is deleted automatically (see How long we keep data).
What data we process
The data below is processed depending on the features you use and the permissions you grant. If you don’t use a feature, its data doesn’t exist.
Account data
- Name and email, received from Apple or Google when you sign in with those accounts, and the name you adjust in your profile. With “Sign in with Apple”, Apple may provide a relay email instead of your real email. Sign-up is only through Apple or Google: LeMoove doesn’t create or store a password for you.
- Profile photo, if you choose one.
- Sign-in identifiers provided by Apple or Google, which link their account to your LeMoove account.
- Plan and subscription status (Free, Basic or Complete, expiry date and scheduled changes).
Location and motion
When you allow it, the app records your phone’s position, including in the background if you choose “Always” (iPhone) or “Allow all the time” (Android). Each record may contain:
- latitude and longitude, with the margin of error estimated by the phone;
- speed and heading;
- date and time;
- activity type detected by the phone’s sensors (still, on foot, on a bicycle or in a vehicle) and the confidence of that detection;
- battery level and whether the phone is charging.
From these records, the server calculates:
- trips, with distance, duration and speeds;
- stays: where you stopped and for how long, which lets the app show stops and recognize places you visit often;
- alert events, such as arriving at or leaving a place, trip start and end, speeding, low battery and proximity;
- the timeline: trips, arrivals at and departures from places, stops, driving events, a tracker’s ignition and SOS requests, each with the time and position where it happened;
- routines: the times you usually arrive at and leave the places of whoever is looking, calculated from your stays over the last 4 weeks. They aren’t stored: they’re recalculated whenever someone looks them up;
- the battery estimate: from the battery readings of the last 8 hours, the server estimates how long the battery will last;
- place suggestions: places where you spend your nights, your workdays or that you visit often, calculated from your stays. Only you see them, and no place is created until you tap “Save”.
Someone in your group can ask for your current position. The request reaches your phone, which sends a fresh position, as it would on its own. This only happens between people who share a group.
Driving report
On vehicle trips, the app records harsh acceleration, braking and cornering, speed and signs of phone use while driving, measured by the driver’s own phone. LeMoove uses them to calculate the driving score shown in the report.
The Safety Score combines driving, the tracking diagnostic (see “Device data”, below), alerts and routine for the period. It’s calculated in the app of whoever opens it and isn’t stored.
Groups, places and alerts
- Groups you create or join: name, type (family, friends, work…), members, who manages the group, invite codes and when each person joined. The join date makes sure nobody sees what happened to you before they started sharing a group with you.
- Moments: groups with an end time. Besides what a group keeps, we record when it ends, the join requests waiting for approval and, when the Moment ends, a recap with the names and photos of who took part, shown to each participant for 2 days.
- Places you create: name, address, center, radius, type (safe zone, restricted zone…), the expiry of a temporary place and the people chosen to receive alerts.
- Alert preferences: which alerts are on for each person, the chosen limits, quiet hours and the time zone used to apply them. Also your Home mode and weekly summary choices.
- Alert history: the alert type, the measurement (for example, the speed), the position and the time.
- Activity inbox: notices about your groups and devices, such as someone joining or leaving a group, a tracker shared with you or a plan change, with the name and photo of whoever did it.
Chats, calls and SOS
- Messages you send in chat: text, photos, videos, audio, files and links.
- Voice and video calls: audio and video travel encrypted between the devices and are not recorded. To set up the connection, the devices exchange technical information, such as network addresses.
- SOS requests: the emergency message and, during the request, your position, its accuracy, the approximate address, your battery and speed, your route over the previous 30 minutes and the positions you send afterwards. We also keep who received it, the request’s status and how it ended (“I’m safe” or cancelled). The request goes to the people in your groups, except the groups you removed in “Who gets my SOS”.
- When you send a link, the app may fetch a page summary (title and image) to show a preview. Your phone fetches it directly from the linked website.
GPS trackers and Bluetooth tags
- Trackers: device identification (IMEI and activation code), the name, type, license plate and photo you enter, positions sent by the tracker, ignition state, vehicle battery voltage, settings and commands sent to the device, and the people you shared the device with.
- Vehicle maintenance and fuel, when you record them: maintenance items, due dates and document expiry, the odometer reading, refuels (liters, amount paid, mileage and station) and your notes.
- Bluetooth tags: tag identification, name, the battery level it reports and the position of the phone that last saw it.
Device data
To deliver notifications and keep the app working on each phone, we record the device model, operating system (iOS or Android), app version, language and notification tokens.
The app also sends a tracking diagnostic: which permissions are granted (location, notifications, motion and others), whether GPS and precise location are on, whether battery saving or another system restriction gets in the way of background operation, and a 0–100 score that sums it up. It’s updated when something changes and replaces the previous one, with no history. The people in your groups see it, to understand why your position may be out of date.
Data kept on your phone
Some features keep information only on your device, without sending it to us:
- Home screen widgets: if you add a widget, the phone keeps what it shows (name, photo, place or address, position and battery of the chosen people and devices) and a key that only allows reading that information. On the server, we keep only a digest of it (a hash), which can’t be turned back into the key. It stops working when you sign out and is deleted after 30 days without use. Some widgets can appear on the lock screen, where anyone holding the phone can see them.
- Parked car: on iPhone, the lock screen notice of where the car was left is built on the device itself.
- “Notify me if I leave without it”: to check whether the Bluetooth tag came along, the phone keeps where and when you stopped and which tags were nearby. This stays on the device only, is discarded within 72 hours and is erased when you sign out.
App usage and diagnostics
- App usage: screens opened and buttons tapped, recorded technically (for example, the screen name), without the content of your messages or your location.
- Crash reports: when the app closes unexpectedly, a technical report with the device state and the point in the code where the crash happened.
- Remote configuration: the app fetches operating parameters, such as texts and settings, that we can change without releasing a new version.
These services are provided by Google Firebase and use app installation identifiers. We don’t use this data for advertising.
Purchases and subscriptions
Subscriptions are paid through the App Store (Apple) or Google Play (Google). We only receive from the stores what we need to unlock your plan: the product purchased, transaction identifiers, status, expiry date and renewal, cancellation or refund notifications. We never receive your card details or other payment information.
Support
When you write to support, we process your email, the content of your message and any attachments you send, to answer and resolve your request.
This website
- Preferences stored in your browser (local storage): the theme you chose (light or dark) and your answer to the measurement notice.
- Audience measurement (Google Analytics 4), only if you allow it in the cookie notice. We record pages viewed and clicks on buttons such as “Download”. Measurement is configured with anonymized IP and without Google advertising signals. Until you answer, or if you decline, none of this is loaded. You can change your choice at any time in “Cookie preferences” in the footer.
- Server technical logs, such as IP address, date, time and requested page, generated automatically on every visit to keep the website running and secure.
Why we use data, and on what legal basis
The LGPD requires every processing activity to have a legal basis. The table shows each purpose and the basis for it.
| Purpose | Data used | Legal basis (LGPD) |
|---|---|---|
| Create and maintain your account, sign in securely | Account data | Performance of a contract (art. 7, V) |
| Show your location to your group, calculate trips, stays and the driving report | Location and motion, driving report | Performance of a contract (art. 7, V), with your location permission in the phone’s system |
| Place alerts, automatic alerts and SOS | Location, groups, places, alert preferences | Performance of a contract (art. 7, V) |
| Timeline, routines, Safety Score, battery estimate, My family and weekly summary | Location and motion, alerts, device diagnostics | Performance of a contract (art. 7, V) |
| Explain to the group why a position is out of date | Tracking diagnostic | Performance of a contract (art. 7, V) |
| Chat and calls | Chats and call technical data | Performance of a contract (art. 7, V) |
| Trackers, tags, vehicle maintenance and fuel | Device data and what you record about the vehicle | Performance of a contract (art. 7, V) |
| Send notifications to the right device | Device data | Performance of a contract (art. 7, V) |
| Unlock and maintain paid plans | Purchases and subscriptions | Performance of a contract (art. 7, V) and legal obligation (art. 7, II) |
| Fix crashes and understand how the app is used in order to improve it | Usage and diagnostics | Legitimate interest (art. 7, IX) |
| Security, fraud and misuse prevention, enforcing the terms | Account data, technical logs and, when necessary, the data involved in the case | Legitimate interest (art. 7, IX) and exercise of rights (art. 7, VI) |
| Handle support and data subject requests | Support | Performance of a contract (art. 7, V) and legal obligation (art. 7, II) |
| Measure website audience | Google Analytics 4 | Consent (art. 7, I) |
| Comply with legal obligations and orders from authorities | Whatever the obligation requires | Legal obligation (art. 7, II) |
When we rely on legitimate interest, we only process what’s necessary and respect your expectations and rights. You can object to this processing through the privacy channel.
We don’t use your data for advertising, we don’t show ads and we don’t sell personal data.
Who can see your data in LeMoove
| Data | Who sees it |
|---|---|
| Your location, trips, stays, timeline and battery | You and the people who share at least one group with you. History appears within the plan window of whoever is looking (1, 7 or 30 days) and never from before the two of you started sharing a group. The exception is your most recent position, which someone who joins the group sees even if it’s from before they joined, so they know where you are now. With “Keep my trips” off, the group only sees your current position. Whoever leaves the group stops seeing. |
| Driving report, Safety Score and routines | You and the people in your groups. Routines are calculated over the places of whoever is looking. |
| Tracking diagnostic | You and the people in your groups. |
| Places you create | Only you. The chosen people receive the alerts but can’t see or edit the place. |
| Alerts | Only whoever turned the alert on. |
| Activity inbox and place suggestions | Only you. |
| Chats | The participants of the chat. In a group chat, the group’s members. |
| SOS request | The people in your groups, except the groups you removed in “Who gets my SOS”. Whoever received a request keeps seeing that request, even if they later leave the group. |
| Trackers, tags, maintenance and fuel | Whoever registered the device and the people it was shared with. |
| Name and profile photo | The people in your groups and chats. |
The LeMoove team only accesses personal data when needed to run the service, handle one of your requests, investigate a bug or misuse, or comply with the law.
Who we share data with
We don’t sell or rent personal data. We only share data in the situations below.
Service providers
Companies that help us run LeMoove and process data according to our instructions and their own rules:
- Hosting: the servers that store the app’s and this website’s data.
- Google (Firebase): notification delivery on Android (Firebase Cloud Messaging), app usage measurement (Google Analytics for Firebase), crash reports (Firebase Crashlytics) and remote configuration (Firebase Remote Config).
- Apple: notification delivery on iPhone (Apple Push Notification service) and “Sign in with Apple”.
- Google: Google sign-in, maps and Street View (Google Maps), and the public server that helps devices find each other during a call (STUN). When showing the map, your phone requests the images directly from Google.
- System address services: to turn a position into an address, or an address into a position, the app uses the phone’s own system service, from Apple on iPhone and Google on Android.
- Google Analytics 4, on this website, only with your consent.
App stores
Apple and Google process subscription payments and tell us their status. Your payment data is handled under each store’s policies.
When required by law or to protect people
We may share data when required by law, by court order or at the request of a competent authority, or when necessary to protect someone’s life or safety and to defend ourselves in legal proceedings. Whenever the law allows, we notify the affected person.
Business reorganization
If LeMoove goes through a merger, acquisition or transfer of the service, data may be transferred to the new owner, who must respect this policy. We’ll let you know beforehand.
International transfers
Some providers, such as Google and Apple, process data on servers outside Brazil, mainly in the United States. These transfers follow what the LGPD allows (arts. 33 to 36), based on the contractual safeguards and certifications adopted by these providers.
How long we keep data
The periods below are applied automatically by the server.
| Data | Period |
|---|---|
| Location points (the map trail) | 30 days |
| Positions sent by trackers | 30 days |
| Battery readings used for the estimate | The last 8 hours |
| Alert history and Activity inbox | 90 days |
| Timeline events, with the position: trips, arrivals at and departures from places, stops, driving events, ignition, low battery, no signal, off routine | 90 days |
| SOS requests and vehicle alarms in the timeline (power cut, vibration with the ignition off, left without you) | 1 year |
| Stays (where and how long you stayed) | 1 year |
| Subscription purchase records | 1 year |
| Requests to join a Moment | Until decided, 8 days at most |
| Recap of an ended Moment | 2 days |
| An unused widget key | 30 days |
| Account, groups, places, preferences, SOS requests, devices, maintenance, fuel and chats | While the account exists, or until you delete them. An account unused for 6 months is deleted, with email notice beforehand (see how) |
| Crash reports and app usage data | Google Firebase retention periods |
| Website measurement (Google Analytics 4) | The configured period, 14 months at most |
| Support emails | As long as needed to handle the request and keep a record of it |
What the app shows depends on the plan of whoever is looking: history is shown for 1, 7 or 30 days, and the server applies that limit to the people in your groups too. Stays are kept longer because they’re what lets the app recognize the places you visit often and your routines. SOS requests and vehicle alarms stay in the timeline for 1 year so they can be looked up months later, for example when filing a police report.
When the law requires it, as with Brazil’s Internet Civil Framework (Law No. 12,965/2014), we keep app access logs (date, time and IP address) for the legal period, and we may keep data for as long as needed to meet legal obligations or defend ourselves in legal proceedings.
How we protect data
- The app only talks to our servers over encrypted connections (HTTPS and WSS).
- Calls use WebRTC, which encrypts audio and video in transit.
- Sign-in is done through Apple or Google, and LeMoove doesn’t store account passwords.
- Server-side access rules make sure each person can only read the data they’re allowed to see, regardless of what the app shows.
- Team access to the systems is limited to those who need it to run the service.
No system is completely immune to failures. If a security incident happens that may bring you relevant risk or harm, we’ll notify you and Brazil’s National Data Protection Authority (ANPD), as the LGPD requires.
Your rights
Under the LGPD (art. 18), you can request, at any time:
- confirmation that we process your data;
- access to the data;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;
- portability of the data to another provider;
- deletion of data processed based on your consent;
- information about who we share your data with;
- information about the possibility of not consenting and the consequences of refusing;
- withdrawal of consent;
- objection to processing based on other legal grounds, when the law isn’t being followed;
- review of decisions made solely by automated processing that affect your interests.
To exercise these rights, write to [email protected] from your account email. We may ask for information to confirm the request is yours, to protect your data from others. We reply within the periods set by the LGPD. You can also file a complaint with the ANPD or your local data protection authority.
Some actions you can take yourself in the app, right away:
- correct your name and photo in your profile;
- leave a group, stopping sharing your location with it;
- delete places and turn off alerts;
- choose who gets your SOS, in Profile, “Who gets my SOS”;
- turn off Home mode and the weekly summary, in Profile, “Family updates”;
- turn off “Keep my trips”, in Profile. With it off, the people in your groups stop seeing your trips, timeline and routines, and you leave their weekly summary; they still see where you are now, and the alerts they asked for about you keep working. You still see your own history;
- delete your account, in Profile, “Delete my account”.
Phone permissions and how to control them
iPhone and Android ask for your permission before LeMoove uses each sensitive feature, and you can change your answer at any time in your phone’s settings.
| Permission | What it’s for | If you deny it |
|---|---|---|
| Location, including in the background | Showing you to your group, arrival and departure alerts, trips | With “While using the app”, the app only gets your position with the screen open. Without permission, you don’t appear on the map. |
| Motion and fitness | Knowing whether you’re still, walking or driving, to save battery and classify trips | The app uses more battery and trips are less accurate. |
| Notifications | Alerts, place notices, SOS and messages | Alerts don’t arrive. |
| Camera, microphone, photos and files | Profile photo, sending photos, videos, audio and files in chat, calls | Those specific features don’t work. |
| Bluetooth | Pairing and finding Bluetooth tags, and checking that a tag came along when you leave a place | Tags don’t work. |
Children and teenagers
LeMoove can be used by children and teenagers within a family group, with the involvement and authorization of at least one parent or legal guardian, who should supervise the use. Children’s and teenagers’ data is processed in their best interest, as required by art. 14 of the LGPD, and limited to what the app needs to work.
Parents and guardians should talk to the child or teenager about location sharing and use the app as a tool for care, not surveillance. If you’re a guardian and believe a child’s data was processed without your authorization, write to [email protected].
Account deletion
You can delete your account in the app, in Profile and Delete my account. Deletion is permanent: the account stops working and can’t be recovered.
When you delete your account, we delete the account and the personal data linked to it, except what we must keep by law or to exercise our rights, such as purchase records, for the periods listed in How long we keep data. The trackers you registered become available to another account again, without the name, plate, photo, maintenance and refuels you recorded.
Your SOS requests are deleted with the account, for those who received them too. The recap of a Moment you took part in stays with the other participants for its period of 2 days.
Deleting your account doesn’t cancel your subscription. It’s billed by the App Store or Google Play and must be cancelled there.
Deletion due to inactivity
So that we don’t keep personal data we no longer need, an account that goes unused for 6 months is deleted. An account is unused when nobody opens the app signed in to it and the app doesn’t send its location during that period.
Before deleting it, we notify you twice by email, at the account’s address:
- when the account reaches 6 months without use, with the deletion date, 30 days later;
- 7 days before that date, in a final notice.
To keep the account, just open the app and sign in with it before the date given: that cancels the deletion. If you sign in with Apple and chose to hide your email, the notices arrive through Apple’s relay address.
Deletion due to inactivity removes the same data as a deletion you make yourself, and we send an email confirming it. We don’t delete for inactivity an account that has a paid plan, that has a GPS tracker registered, or that belongs to a group with other people.
Changes to this policy
We may update this policy to reflect changes in LeMoove or in the law. The date of the last update is shown at the top of the page. When a change is significant, we’ll notify you in the app or by email before it takes effect.
Contact
For questions, requests about your data or to reach the person in charge of data protection, write to [email protected]. You’ll also find other options in the support center.