Privacy Policy — Find Friends (איפה כולם?)

Last updated: 2026-10-25

Find Friends (איפה כולם?) is made by Magmanet. This policy explains what the app does with your information. The short version: your location is shared only while you turn sharing on, only with the members of the circles you joined, and it is end-to-end encrypted: our server stores it in a form it cannot read, keeps only the latest update and no history. You need no account, e-mail or phone number. The app also sends anonymous usage statistics (never your location or anything about your circles), which you can turn off.

End-to-end encryption, precisely

• Every circle has a random 256-bit key made on the phone of the person who created it. The key travels only inside the invite: in the part of the link after "#" (which browsers never send to a web server) or in the QR code. The app sends our server only the circle's id and invite code from it, never the key.
• Each location update is encrypted on your phone with AES-256-GCM under the circle key, with a fresh random nonce, and tied to the circle and to your member number so it cannot be altered or passed off as someone else's. Only phones that hold the circle key can read it.
• Each phone has its own key pair (X25519). When a member leaves or is removed, the owner's phone makes a new circle key and sends it to each remaining member wrapped with that member's public key (the server only passes the sealed envelopes along). A removed member cannot read later updates. Each phone also proves to the others that it holds the circle key, so the server cannot slip in a fake member, and every member has a "safety code" you can compare in person.

What is sent to the server, precisely

• Your nickname (2–16 characters; no real name needed), shown to the members of your circles.
• Circles: the circle's name (visible to the server), its invite code, the member list (nickname, a member number, your phone's public key and the proof described above), who owns it, and the encrypted circle keys for each member after a key change.
• Your location, only while you share: one encrypted blob per circle (at most 1 KB) containing your latitude, longitude, accuracy, speed, heading, battery percentage and the time of the fix. The server cannot read it. Alongside it the server sees only the time it received the update and your member number in that circle. Each new update replaces the previous one: the server never keeps a history of where you were.
• Signals: that you have a circle's map open right now (for 90 seconds, so the others' phones update more often and so the members can see who is looking) and "locate now" requests (the time of the latest request). These never turn anybody's sharing on.
• Anonymous usage statistics (see below), which never contain locations, circle names, nicknames or keys.

The app does not send your contacts, e-mail address or phone number. There is no advertising and no tracking. We never sell or share your data.

Who sees what

• Members of a circle see its name, the members' nicknames, who shares, who is looking at the map, and — decrypted on their phones — the positions of the members who share (with accuracy, battery level, speed and time). Your position is visible to them only while you share in that circle.
• You see who sees you: the circle's member list is the complete list of people who can see your location in it.
• Our server sees circle names, nicknames, member numbers, public keys and ciphertext with receive times — never a location or a circle key.
• Nobody outside a circle can see it.

You are in control

• Sharing starts only when you tap "Share my location" and choose how long: 1 hour, until tonight (23:59) or always. Timed sharing ends by itself. Pause, Resume and Stop are one tap away in the app and the notification is always visible while you share.
• Stop (and timed sharing running out) deletes your last location from the server. Pause sends one last encrypted update marked "paused" so your circle knows why updates stopped.
• You can turn sharing off for one circle only ("Share my location in this circle"); this deletes your location from that circle.
• Nobody can turn sharing on for you, remotely or otherwise.

Where your data is stored

• On your phone: your nickname and settings, your circles with their keys, your phone's private key, and the sharing state, in the app's private storage. Other members' positions are kept in memory only, not saved. Everything is removed when you uninstall the app. The Copy backup feature (Settings → Your data) copies the app's storage, including your circle keys, to your clipboard as text: keep such a backup private.
• On the Magmanet server: the data listed above, run by Magmanet on a server hosted in the European Union (by Contabo). It is not sent to Google or any other third party and is not used for advertising or profiling. Data is encrypted in transit (HTTPS) and the locations are additionally end-to-end encrypted. The server keeps no access log with your IP address for these requests; the address is used in memory only, to limit abuse.

The account is anonymous: the server creates a random user id and access tokens, stored on your phone. The app also stores a random number made at install time (not a device identifier), which it sends once when the account is created so the server can limit abuse. Other users never see these ids; inside a circle members are numbered 1, 2, 3…

How long, and how to delete

• Latest only: the server keeps only your most recent encrypted location per circle; each update overwrites it. A latest location older than 30 days is deleted automatically.
• Leave a circle: your last location and your keys in it are deleted from the server at once, and the circle gets a new key. The owner can remove a member with the same effect, and can delete the circle for everyone.
• Delete everything (Settings): you leave every circle, and your locations, keys, nickname and anonymous account are deleted from the server.
• A circle with no activity for 90 days is deleted automatically with everything in it.
• Uninstalling the app does not reach the server (the anonymous account can't be reached any more), so use "Delete everything" first, or contact us (below); your circle will be deleted after 90 days without activity anyway.

Location permission and the notification

• The app asks for location "while using the app" the first time you choose to share (or to show yourself on the map). It asks for "Allow all the time" only if you choose Always sharing, after a screen that explains why. If you refuse, sharing still works while the app is open or its notification is showing.
• On Android, while you share, a foreground service shows an ongoing notification ("Sharing your location – with …"); on iPhone the system shows its location indicator. Notification permission is asked so this notification is visible.
• The location provider of your phone (Google Play services' fused location on Android, Core Location on iPhone) computes your position on the phone.

Maps and other internet use

Map images come from OpenFreeMap (tiles.openfreemap.org; map data © OpenStreetMap contributors). To draw the map your phone downloads map tiles for the area on screen, so OpenFreeMap's servers see your IP address and which map area is requested (not who or where your circle members are). Once a day the app checks for a newer version by asking the Magmanet server (EU, Contabo) — the request contains only the app name, its version and how it was installed; if the server is unavailable the app downloads the public version file from GitHub Pages instead (GitHub may see your IP address). You can turn this off in Settings.

When you tap "Navigate", the app opens Google Maps, Waze or another map app with the member's position; from then on that app's own privacy policy applies. When you share an invite, the text is made on your phone and only goes where you send it — anyone with the invite can join and read the circle, so send it only to people you trust.

Anonymous usage statistics

Find Friends sends anonymous usage statistics over HTTPS (a short ping once a day; usage events a few times a day at most, batched) to Magmanet's own server, hosted in the EU (Contabo). It sends the app name and version, your Android version, your phone's manufacturer and model, your language, how the app was installed, a random install ID, and anonymous usage events (which screens are used and for how long). It never includes locations, circle names, nicknames, keys or anything about your circles. On the server the ID is hashed and no IP address is stored. Raw data is deleted after 400 days. You can turn it off in Settings ("Share anonymous usage statistics"); this also deletes the random ID from your phone.

Permissions

• Location (precise and approximate; "all the time" only for Always sharing): to share your position with your circles while you share, and to show yourself on the map.
• Foreground service (location) and Notifications: the ongoing "Sharing your location" notification while you share.
• Internet: your circles, map tiles, the update check and the anonymous statistics.
• Camera (optional): only when you tap "Scan a QR code" to join a circle; images are not saved or sent.

Children

Find Friends is a general-audience app and is not directed at children.

Changes

If this policy changes, we'll update the date above and publish the new version at the same address.

Contact

Questions, or a request to delete your data? Open an issue at https://github.com/Shauls/magmanet-apps/issues