NYSD Enterprise
NYSD Track privacy policy
Updated:
NYSD Track is operated by NYSD Enterprise, based in Yaounde, Cameroon. Contact support@nysdenterprise.com about personal data. This policy covers the NYSD Track app and tracking service; the website's separate privacy policy covers website forms and optional website analytics.
Account data includes your username, email address, password hash, language, plan and recorded acceptance of terms. Your name, telephone number and profile photo are optional. If you choose Google sign-in, we receive a Google account identifier, verified email and available name, not your Google password.
Location: paired trackers send latitude, longitude, time, accuracy, speed and direction to our service for maps, location history, safe zones and alerts. Phone tracker mode collects location in the background, including when the app is closed or not in use, after disclosure and permission. The paired account holder and people they authorize can view the shared tracker information. A persistent notification identifies active phone tracking. You can stop sharing; a parent-configured child-mode PIN may be required.
Share my location for Safe Zone is a separate optional feature. It sends your phone's location in the background, including while the app is closed, to avoid a false alarm when a tracker leaves a zone while accompanying you. We keep the latest position rather than a history for this feature. Sharing displays a notification and can be stopped in Settings. You can also manage location permissions in Android settings.
Other service data includes tracker names and optional photos; battery and charging status; whether location services are enabled; phone make, model and Android version; installation identifiers; app version; IP address and sign-in records; push-notification tokens; activity dates; safe zones, alerts, pairing and access codes, referral and reward records. Emergency contacts' names, email addresses and optional phone numbers are supplied by you with their agreement. We do not read your address book, messages or call history.
An optional compatible wearable can report pulse readings and wearer-presence information when pulse monitoring is enabled. This is used for tracker-wearing alerts, not medical diagnosis. Profile and tracker photos are optional. Choosing a photo uploads it for display to the relevant account and authorized viewers.
We use these data to operate the requested tracking and account features, deliver notifications and service emails, manage plans and rewards, understand service use, prevent abuse and secure accounts. We do not sell personal data or use it for advertising. Account creation is for adults. A parent or legal representative must authorize tracking a child; an adult being tracked must know and agree. Do not use the service for covert tracking.
Recipients include the account holder, people explicitly authorized with access codes, and emergency contacts notified about unanswered urgent alerts. Service providers include our server host Contabo, Cloudinary for photos, Resend for email, and Expo and Google Firebase Cloud Messaging for push notifications. They receive the information needed for those services. Optional Google authentication communicates with Google. Data may be processed outside Cameroon, including by providers in Europe and the United States.
Maps and directions contact OpenFreeMap, OpenStreetMap Nominatim and FOSSGIS routing.openstreetmap.de. Those services receive your IP address and relevant map-area, place-search or route-coordinate requests under their own policies. Optional spoken guidance uses the phone's text-to-speech engine, which may process text online depending on your voice settings. These features do not record your microphone.
Retention: location-history cleanup uses the account's plan window of 24 hours, 30 days or one year, while retaining a tracker's latest position until the tracker or account is deleted. Shared Safe Zone phone positions are replaced on update and cleared after one day without an update. Acknowledged alerts and manual SOS records are retained for one year; expired or revoked access codes for 90 days; used or expired pairing codes for seven days; signed-out or long-idle login records for 90 days; and daily activity records for approximately 13 months. Unacknowledged alerts, zones and active account information remain until removed. Cleanup is periodic rather than instantaneous at each cutoff.
Completed financial and reconciliation records are not automatically expired by the current service. Account deletion clears the account link and payer details, but retains transaction and audit records. Some live payment attempts are retained for reconciliation. Routine database backups rotate after approximately 14 days; restricted deployment or incident-recovery copies can have separate retention. Previous operational email delivery records and suppression records are not automatically erased by in-app deletion. Contact us to request deletion of retained personal information; legal, security and accounting obligations may limit what can be removed.
You can correct profile details, withdraw optional permissions, stop sharing, request an export through Settings > Download my data, or delete your account through Settings > Delete account. Without the app, email support@nysdenterprise.com from the account address to request access, correction or deletion, including retained records. We may verify your identity, but never ask you to email a password or authentication token. See the account-deletion page for the process and exceptions.
The app uses HTTPS for service connections, hashed passwords and tracker credentials, account authorization and revocable sign-in sessions. No system can guarantee absolute security. Changes to this policy will be dated here; material changes to consent-based processing require the appropriate notice and consent.
Request account and data deletion
All policies