◎ Your ETA

Privacy Policy

Effective July 5, 2026

Your ETA lets you set a shared destination and let the people you invite watch each other converge on it in real time — each person's ETA and, if they choose, their live location. This policy explains exactly what we collect, who can see it, how long we keep it, and the choices you have. We keep it plain because the whole app is built around location, and you deserve to understand it.

What we collect

  • Your email address — used to sign you in (via a magic link or, if you choose, Google or Apple sign-in). A display name shown to other participants is derived from your email.
  • Destinations you create — the name, address, and map coordinates of a place you set as a destination.
  • ETAs — the estimated arrival time you set or that we compute for a destination.
  • Precise location pings — collected only while you have location sharing turned on for a destination, so the group can see you on the live map on your way there.

How location sharing works

  • Your shared location is visible only to the participants of the same destination — no one else.
  • Location pings are automatically deleted after 24 hours (a daily database job removes old pings, and the app also prunes your own stale pings each time it posts a new one). The live map only ever uses the last 15 minutes.
  • Sharing stops on its own based on the duration you pick — 15 minutes, 1 hour, or until you arrive — and you can turn it off at any time.
  • In the iOS app, background location runs only while sharing is on, and the system location indicator shows whenever it's active.

What we don't do

  • No advertising.
  • No analytics or third-party tracking SDKs.
  • We do not sell your personal data.
  • We do not share your data with data brokers.

Sharing between users

A destination is shared by its invite link — the link is the invite. When you join a destination via its link, your name, your ETA, and your live location (if you're sharing) become visible to that destination's participants. That's the whole point of the app, and it only ever happens for destinations you've joined.

Service providers

We rely on a small set of processors to run the app. We share only what each needs to do its job:

  • Supabase — authentication and database hosting (your account, destinations, ETAs, and pings live here).
  • Vercel — web hosting and content delivery.
  • Resend — sends the transactional sign-in emails.
  • Google — only if you choose to sign in with Google.
  • Map and geo services that receive limited technical data: OpenStreetMap / CARTO serve the map tiles (a tile request exposes your IP address), Photon / Komoot handles place-search text queries, and OSRM computes travel-time ETAs from a start and destination coordinate. These map requests are not tied to your identity.

Data retention & deletion

  • Location pings are deleted after 24 hours.
  • Destinations and ETAs are kept until the host deletes the destination or the account is deleted.
  • You can delete your account at any time from the Account page. Deleting your account permanently removes your profile, the destinations you host, your participations, and your location pings.

Children

Your ETA is not directed at children under 13, and we don't knowingly collect personal information from them.

Contact

Questions about this policy or your data? Email us at hello@youreta.app.