Privacy notice

2026-10

Localy shows short-lived reports of situations in public places. This notice explains what personal data we handle, why, and what your rights are.

Who is responsible

The data controller is Fleger Studio. You can reach us at info@localy.com.

What we process

Account: username, email address, a hash of your password, language, when you accepted these documents, and your invite code.
Your activity: reports you create (type, an optional description, the location you pinned, time), confirmations, flags, offers of help, points, badges and notifications.
Location: your device position is used on your device to centre the map and measure distances. It is sent to our server as the centre of the area you look at (to find nearby reports), as the place of a report you create, and - only if you chose to be visible on the live map - as your current position while the app is open. We do not track you in the background.
Technical data: IP address and request logs for security and abuse prevention; a sign-in token and your preferences stored in your browser (local storage).

Why, and on what legal basis

To provide the service you asked for: creating an account, showing nearby reports, letting you report, confirm and help (contract).
To keep the community safe: moderation, rate limiting, preventing abuse and fake accounts (legitimate interest).
To use your location and to send you notifications (your consent, which you can withdraw in your device or browser settings at any time).
To understand how the web app is used, via Google Analytics (your consent, given in the cookie banner, see "Cookies and analytics" below).
To send account e-mails such as verification and password reset (contract).

What reports are, and are not

Reports describe a situation at a place, not a person. Descriptions with contact details, links or social handles are rejected. Reports are anonymous by default: other users see who wrote a report only if the author chooses to sign it with their username, and can undo that later. Reports disappear from the map on their own, and ended reports are deleted after 30 days.

Leaderboards and public profiles

Your username, points, rank and badge statistics can be shown to other users. You can hide yourself in Settings → Show me on leaderboards; your public profile is then hidden too.

Seeing each other on the live map

Only if you choose it (on first start or in Settings → Visible on the live map), other users who chose the same can see where you are while the app is open: as an anonymous dot, or with your username. It is mutual: while hidden, you do not see anyone either.

Your position is rounded to about 10 metres, sent only to users looking at the same area, held in the server memory only while you are active (at most 2 minutes after your last update), and never written to a database or log. Anonymous dots carry a random identifier that changes every time you appear. The legal basis is your consent; choose Hidden in Settings to withdraw it at any time.

Cookies and analytics

On the web app we use Google Analytics (GA4) to understand how Localy is used, but only after you accept it in the cookie banner. It sets cookies and records page views; we have turned off Google Signals and ad personalisation, and IP addresses are anonymised. Declining, or clearing your browser's site data, stops it.

The native mobile app does not use Google Analytics. We do not yet show ads; if that changes, this notice will be updated and you will be asked to accept it again.

Who receives data

Hosting and database providers that run the service for us.
An e-mail provider that delivers account e-mails.
A map tile provider (CARTO / OpenStreetMap contributors by default) sees your IP address and the map area you view. Place search sends your search text to OpenStreetMap Nominatim.
If you accept analytics cookies, Google (Google Analytics) receives anonymised usage data from the web app.

We do not sell your data and do not use it for advertising.

How long we keep it

Account data: until you delete your account.
Reports: they end within hours; ended reports are deleted after 30 days.
Point history: 90 days (your totals stay on your account).
Verification and reset links: they expire automatically.

Your rights

You can access, export, correct or delete your data, and object to processing. In the app: Profile → Settings → Privacy & data lets you download all your data and delete your account with your password. For anything else write to info@localy.com.

You can also lodge a complaint with your data protection authority: in Hungary, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, naih.hu).

Age

Localy is for people aged 16 or older.

Security

Passwords are stored only as salted hashes, traffic is encrypted (HTTPS), and access to the database is restricted. No system is perfectly secure; tell us at info@localy.com if you notice a problem.

Changes

If this notice changes materially we will ask you to review it again.