1. About this policy
This policy describes how Track2Me handles information when you use our website, sign in with Google or Facebook, or connect an Android device to the device dashboard. Contact us about privacy at [email protected].
Use the monitoring features only on a device you own or are authorized to supervise. An employer must inform the device user and obtain the permissions and consent required for that use.
2. Account and social sign-in information
When you choose Google or Facebook, we request basic profile and email information to identify your account. This includes the provider account identifier, name, email address when supplied, and profile picture URL. We also store a local user identifier, registration and sign-in source, account creation time and last sign-in time. A country code may be recorded if our hosting or network infrastructure supplies it; this is not precise GPS location.
We use the authorization code and access token returned by the provider to complete sign-in and retrieve your basic profile. The current sign-in implementation does not save those access tokens in account TXT records. It does not request your Google or Facebook password, Gmail messages, Facebook posts, friends or photo albums.
3. Connected-device information
Connecting a device is separate from social sign-in and requires its pairing code. Depending on the Android app permissions and the features you enable, device information can include the device identifier and name, battery and connection status, location history, contacts, call logs and recordings, SMS and social-app message content, app usage, screenshots, images, audio and command history. These permissions are separate from Google and Facebook profile permissions.
4. How we use information
We use information to create and recognize accounts, maintain sign-in sessions, associate authorized devices with the correct account, display device information in the dashboard, process requested device actions, respond to support requests and investigate misuse or technical faults. Social sign-in does not by itself authorize monitoring another person or device.
6. Storage, access and retention
The current server implementation stores account and device records in private server storage outside the public website directory. Account metadata is also kept in TXT records for account administration. These TXT records contain identifiers, contact and profile information and sign-in dates, not your social-account password. Authenticated dashboard access is checked against the account linked to a device.
Retention depends on the type of information, the configured service features and any deletion request or applicable record-keeping obligation. Signing out or revoking a provider connection does not delete server records. Contact us to request deletion or to ask about the retention applicable to your account. No internet service or storage system can guarantee absolute security.
8. Access, correction and data deletion
To request access to, correction of, or deletion of your Track2Me account and associated data, email [email protected]. For deletion, use the subject “Track2Me data deletion” and identify the email address used to sign in and the provider (Google or Facebook). Identify any linked devices covered by your request. Do not send passwords, access tokens or client secrets.
We may need to verify that you control the account before acting on a request. A deletion request covers the account record, its TXT registration record and associated device data within the scope of the verified request, subject to any data we must retain for a legitimate applicable obligation. Unlinking a device alone should not be treated as a request to delete its stored information.
[email protected]9. Children and authorized supervision
The website account is intended for parents, guardians and other authorized adults. A parent or guardian is responsible for making sure supervision of a minor is appropriate and authorized, and for providing any notices or permissions required for the situation. We do not authorize using the service to monitor an adult without their knowledge and permission. Contact us if you believe a device has been linked without authorization.
10. Updates and contact
We may update this policy as the service changes. The last-updated date appears at the top of this page. Contact [email protected] about this policy, privacy concerns or a data request.
[email protected]11. Contact messages
When you use the contact form, we store your name, email address, subject, message, submission date and account identifier if you are signed in. Authorized administrators can review these messages to handle your request. We also use a hashed network address and recent submission times to limit repeated messages. Do not include passwords or pairing codes. Contact us to request access to or deletion of your support messages, subject to applicable retention requirements.
12. Optional contact sync
If the device user explicitly enables contact sync and grants Contacts permission, Track2Me sends contact names, phone numbers, emails, websites, postal addresses and birthdays to the account linked to the device. The first sync follows activation; later syncs use the dashboard interval of 1–12 hours (default 6), subject to Android background scheduling and connectivity. A dashboard user can request one additional refresh per section every 24 hours. The device user can disable sync in the app at any time. Disabling future sync does not erase the previously uploaded snapshot; contact support to request deletion.
13. Optional SMS sync
If the device user explicitly enables SMS sync and Android grants SMS permission, Track2Me sends a snapshot of the latest 50 inbox and sent SMS to the linked account. Records include the sender or recipient number, message text, direction and date, and a contact name when Contacts permission allows it. This feature excludes MMS, social-app chats and notification content. Sync follows the dashboard interval of 1–12 hours (default 6), subject to Android restrictions and connectivity, with one optional additional refresh every 24 hours. You can disable future sync in the device app; contact support to request deletion of a previously stored snapshot.