Privacy Policy

Last updated: March 30, 2026

1. Introduction

Instant ID ("we," "our," or "us"), operating under the brand name NumTracker, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our consent-based phone location tracking service ("Service"). Please read this policy carefully. By using the Service, you consent to the data practices described in this policy.

2. Information We Collect

We collect the following types of information:

2.1 Account Information

When you create an account or make a payment, we collect your name, email address, and payment information. Payment details are processed and stored securely by Stripe; we do not store your full credit card number or CVV.

2.2 Phone Numbers

When you use the Service, you provide phone numbers to which tracking links are sent via SMS. We store these phone numbers to deliver the Service and maintain session history.

2.3 Location Data

When a tracking link recipient voluntarily consents to share their location, we collect GPS coordinates (latitude, longitude), location accuracy, altitude (when available), and the timestamp of the location capture. This data is collected only with the recipient's explicit, informed consent.

2.4 Technical Data

We automatically collect certain technical information including IP addresses, browser type and version (user agent), and device information. This data is used for security, fraud prevention, and service improvement.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process your payment and deliver login credentials
  • Send SMS tracking links to specified phone numbers
  • Display location data to authorized account holders
  • Send you service-related communications and notifications
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations

4. Consent and Location Tracking

Our Service is built on a strict consent-based model. When a tracking link is sent to a recipient, the recipient is clearly informed about what data will be collected and must actively grant permission before any location data is captured. The recipient can decline to share their location at any time. We do not collect location data without the recipient's explicit, voluntary consent. The consent page clearly explains what information will be shared and who will receive it.

5. Data Retention

Tracking session data, including location information, is retained for the duration of the session's configured expiration period (default 24 hours, configurable up to 7 days). After expiration, session data remains in the system for account history purposes but tracking links become inactive. Account information is retained as long as your account is active. You may request deletion of your account and associated data by contacting us.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. All data is transmitted over encrypted connections (SSL/TLS). Login passwords are hashed using bcrypt before storage. We use secure, industry-standard infrastructure for data storage. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Third-Party Services

We use the following third-party services:

  • Stripe — for secure payment processing
  • Twilio — for SMS delivery
  • Google Maps — for location visualization

Each of these services has its own privacy policy governing the use of your information. We encourage you to review their respective privacy policies.

8. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • With service providers who assist in operating the Service (Stripe, Twilio, Google Maps)
  • When required by law, regulation, or legal process
  • To protect the rights, property, or safety of Instant ID, our users, or the public
  • In connection with a merger, acquisition, or sale of assets (with prior notice)

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • The right to access your personal data
  • The right to correct inaccurate personal data
  • The right to request deletion of your personal data
  • The right to restrict or object to processing of your personal data
  • The right to data portability

To exercise any of these rights, please contact us at [email protected].

10. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at [email protected].