mLite - GPS Location Tracker

"We start collecting data from a target device associated with the account, which may include personal data relating to you, to a target device user(s) or to third parties ("Target Device Data", including information about a target device, phone number, contacts, messages and SMS, geolocation, sound around the child's device). Sound around the child's device. You as a parent can choose to listen live to your child's device's surroundings or choose to record these surroundings for 15 seconds."

The app collects extraordinarily invasive data from target devices including contacts, SMS messages, geolocation, and can even record ambient sound from the device's microphone — essentially functioning as surveillance software.

"Device and Location data. We collect data from your mobile device. Examples of such data include: language settings, IP address, time zone, country and address, type and model of a device, device settings, operating system, Internet service provider, mobile carrier, hardware ID. We start collecting data from a target device associated with the account, which may include personal data relating to you, to a target device user(s) or to third parties ("Target Device Data", including information about a target device, phone number, contacts, messages and SMS, geolocation, sound around the child's device)."

The app collects location data from both the user's device and any target device, including GPS geolocation and IP-based location, and shares location data with multiple third parties including AppsFlyer and MaxMind.

"Advertising IDs. We collect your Apple Identifier for Advertising ("IDFA") or Google Advertising ID ("AAID") (depending on the operating system of your device). Categories of personal information transferred: ATT, WIFI, Operator, Carrier, Language. Android ID, IMEI, IDFA, Advertising ID, IDFV, Amazon Fire ID, Device Model, Device Type, Device Category, Platform, OS Version, User Agent, Device Download Time, Is LAT, OAID, Device Location, Region, Country Code, State, City, Postal Code, DMA."

The app collects advertising IDs (IDFA/AAID), Android ID, IMEI, and IDFV and shares these with AppsFlyer, enabling cross-app and cross-device tracking and user profiling across services.

"We use Hotjar of Hotjar Ltd., which visually represents where you as a user click, move, and scroll on our App, including, but not limited to: full recordings of each visit, including the clicks, mouse movements, u-turns, and rage clicks. To analyze how visitors use the Service and to measure the effectiveness of some ads we use Google Analytics (Firebase)... we use Amplitude Analytics... we use MaxMind... we use Qonversion."

User data is shared with at least seven third-party services (AppsFlyer, Google Analytics, Amplitude, MaxMind, Qonversion, Hotjar, Stripe) — notably Hotjar records full session replays of every user interaction including clicks, mouse movements, and scrolling behavior.

"We will store your personal data for as long as it is reasonably necessary for achieving the purposes set forth in this Privacy Policy (including providing the Service to you), which includes (but is not limited to) the period during which you have an account with the App. We will also retain and use your personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements."

No specific retention timeline is provided — data is kept indefinitely as long as deemed 'reasonably necessary.' Multiple third parties like MaxMind and Qonversion also retain data indefinitely for their own 'legitimate interests' even after a data subject request.

"We may modify this Privacy Policy from time to time. If we decide to make material changes to this Privacy Policy, you will be notified through our Service or by other available means and will have an opportunity to review the revised Privacy Policy. By continuing to access or use the Service after those changes become effective, you agree to be bound by the revised Privacy Policy."

The company can change the privacy policy at any time and treats continued use as acceptance of the new terms, with no requirement for explicit consent to material changes.

"If you do not agree, or are unable to make this promise, you must not use the Service. In such case, you must (a) delete your account and contact us and request deletion of your data; (b) cancel any subscriptions using the functionality provided by Apple (if you are using iOS) or Google (if you are using Android), any other app stores that may be available from time to time, or by us if you purchased it directly from our Site; and (c) delete the App from your devices."

Deleting your data requires both deleting your account and separately contacting the company to request data deletion — a multi-step process that also requires independently canceling subscriptions through different channels.

"If you do not agree, or are unable to make this promise, you must not use the Service. In such case, you must (a) delete your account and contact us and request deletion of your data; (b) cancel any subscriptions using the functionality provided by Apple (if you are using iOS) or Google (if you are using Android), any other app stores that may be available from time to time, or by us if you purchased it directly from our Site."

The policy references paid subscriptions but provides no clear cancellation instructions within the app itself, instead directing users to external platform-specific processes across multiple possible channels.