Linker Privacy Policy

Effective date: July 16, 2026

Linker is developed by Linker Studios ("we", "us"). This privacy notice explains the data used for safety, check-in, Care Circle, SOS, Safety Timer, notification health, public response links, and Linker Plus purchases.

Information We Collect

• Account and profile data such as display name, email, Firebase account identifier, selected language, optional phone number, and subscription entitlement.
• Emergency contact details you configure, including names, email addresses, phone numbers, preferred channel, and delivery summaries.
• Safety records such as check-ins, reminder settings, Guardian stage, SOS state, Safety Timer state, notification channel test records, public response acknowledgements, and notification health.
• Location and device data only when you trigger SOS, enable temporary Safety Timer location sharing, configure Safe Zones, or opt in to Care Circle sharing.
• Device tokens and diagnostics used for push delivery, notification health, retry requests, and support troubleshooting.
• Purchase data such as store, product identifier, transaction or purchase-token fingerprint, pseudonymous app account token, renewal state, expiry date, and verification timestamps. Linker does not receive or store full payment-card details.

How We Use Information

We use this information to provide safety features, send selected notifications, create token-protected public response links, show notification health, verify purchases with the applicable store provider, activate Linker Plus, process subscription lifecycle events, prevent cross-account transaction claims, support account deletion, and operate Linker securely.

Sharing

We share required data only with contacts or Care Circle members you configure, service providers required to run Linker such as Firebase, email, SMS, and push notification providers, the applicable store provider for purchase verification and subscription management, and authorities only where required by law. We do not sell personal data.

Retention And Deletion

SOS precise location is capped to the active emergency window and removed after the retention window. Completed, cancelled, and expired Safety Timer records are purged after 30 days. Temporary Safety Timer precise location is removed when the response link expires. Store transaction fingerprints and minimal lifecycle records may be retained after account deletion where reasonably required for fraud prevention, accounting, disputes, refunds, or legal compliance; they are not used for advertising. Other account-linked data can be deleted in Settings.

Your Choices

Location, battery, Safe Zone, SMS contact, and Care Circle sharing are opt-in. You can disable sharing, edit contacts, pause reminders, manage or cancel subscriptions through your store account, unregister the device on sign-out, or delete your account.

Contact

For privacy, support, or deletion questions, contact connect@linkerstudios.com.