Skip to content
Locins
Get the appCreate account

Privacy Policy

As of: August 2026

Notice

Locins is a private hobby project. This privacy policy was compiled to the best of our knowledge and does not constitute legal advice. For questions contact hello@locins.com.

Controller

Jonas Degener · Charalampos Papadakis

Von-Rost-Straße 18

78259 Mühlhausen-Ehingen

Email: hello@locins.com

At a glance

General information

The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

How is data collected?

Data is collected partly by you providing it (e.g. via a contact form). Other data is collected automatically or with your consent when you visit the site by our IT systems. This is primarily technical data (e.g. internet browser, operating system, time of page view). This data is collected automatically as soon as you enter this website.

What rights do you have regarding your data?

You have the right at any time and free of charge to obtain information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you can revoke this consent at any time for the future. You also have the right to request restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. You can contact me at any time regarding this and other questions on data protection.

Hosting

Microsoft Azure Static Web Apps

This website is hosted on Microsoft Azure (Static Web Apps). The hosting provider processes technical access data (IP address, timestamps, pages visited, browser type) in server logs. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website). The hosting region is the EU. For more information on data protection at Microsoft Azure see: https://azure.microsoft.com/en-us/explore/trusted-cloud/privacy/

Authentication (Locins application)

The landing page locins.com itself does not perform any user authentication. When you sign in to Locins, this happens via a separate application (apps/id). There, WorkOS is used as the authentication service provider. WorkOS processes login data, passwords, and sessions. This landing page stores no authentication data. WorkOS privacy policy: https://workos.com/privacy-policy

Enquiries via the contact form

If you write to us using the form on /contact or /accessibility, we process your name, your email address, the details on organisation, role and phone where you provide them, and your message, in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at a contract, otherwise Art. 6(1)(f) GDPR (our interest in answering enquiries). The enquiry is stored in the EU. So that our team learns of your enquiry, we send an email to ourselves via the service Resend. We delete your enquiry twelve months after your last message if no collaboration results from it, and detected spam after 30 days. We do not store IP addresses.

AI assistants and data sharing

What happens

Locins is a data store for your own data, not an AI provider. Locins does not run any artificial intelligence itself and does not analyse your data with AI. You can verify this in the source code: the Locins API never calls an AI provider. You can voluntarily connect your own AI assistant, for example Claude, ChatGPT, or Gemini, to your Locins account. Only once you set up that connection yourself and give explicit consent does Locins send the data you have shared to the company that operates that assistant, and it does so every time your assistant retrieves it to answer you.

What data

Only the areas you choose to share are transmitted. In plain terms these are: identity (name, email address, profile picture, always included), profile (about me, interests, vehicles, social links, life moments, nutrition, gear, body data), health (blood type, allergies, medications, emergency contacts), family and household, travel, connections, regions and routes, adventures, and your own custom data tiles. You entered all of this data into Locins yourself.

How it is collected

This data comes exclusively from what you enter into Locins yourself. There is no collection from third-party sources. There is also no HealthKit integration: the iOS app does not request HealthKit permission, so your health data likewise comes only from you.

Recipients

Locins names each recipient individually, with a link to their privacy policy:

  • Claude: Anthropic PBC, USA. Privacy policy: https://www.anthropic.com/legal/privacy
  • ChatGPT: OpenAI. Privacy policy: https://openai.com/policies/privacy-policy
  • Gemini: Google. Privacy policy: https://policies.google.com/privacy
  • Any further AI app you connect to Locins yourself: the company behind that app, chosen by you.

Purpose

Locins sends your shared data only to answer the question you ask in your assistant's chat. Locins does not analyse this data itself, does not use it for advertising, and does not sell it.

Legal basis

The legal basis for this transfer is your consent, Art. 6(1)(a) GDPR. Health data additionally and explicitly relies on Art. 9(2)(a) GDPR. Transfers to providers outside the EU rely on Art. 49(1)(a) GDPR.

What applies after the transfer

Once your data arrives at the respective provider, that provider's own terms apply. How long it is stored there and whether it is used for training is governed by your own contract with that provider, not by Locins. Locins cannot delete data already transferred to a provider. Providers have their own deletion and history settings, for example in your account or chat settings with them.

Equivalent protection

Locins only enables connections to providers whose published privacy terms promise comparable protection. Their policies are linked above. Locins does not claim that these providers guarantee the same protection as Locins itself. It refers to their own published commitments.

Consent and withdrawal

Without your explicit consent in your account, Locins does not send any data to an AI assistant. Your consent is stored with a timestamp and version. You can withdraw it at any time, in Locins settings under Legal or on the Apps page. Withdrawing it ends the sharing immediately, after that no connected assistant reaches your data. Allow it again and the very same assistants carry on.

Local storage (localStorage)

This website stores a single entry in your browser's localStorage: the key 'locins.locale' with the value 'de' or 'en' to remember your language preference. This entry is not a cookie, is not transmitted to any server, and does not require consent. No further data is stored locally, and no cookie banner is necessary since no consent-requiring cookies are set.

External services and content

OpenFreeMap / OpenStreetMap (map tiles)

The landing and Locins pages load map tiles from OpenFreeMap (tiles.openfreemap.org), which are based on OpenStreetMap data. When the tiles load, your IP address is transmitted to the tile server. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing map visualisation). OpenStreetMap privacy notice: https://osmfoundation.org/wiki/Privacy_Policy

ShaderGradient / WebGL (backgrounds)

This website uses WebGL-based background gradients (ShaderGradient). Processing is done entirely locally in your browser, no data is transmitted to external servers.

Your rights as a data subject

Under the GDPR you have the following rights against the controller:

  • Right of access (Art. 15 GDPR): You can request information about the data I hold about you.
  • Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data.
  • Right to erasure (Art. 17 GDPR): You can request deletion of your personal data.
  • Right to restriction (Art. 18 GDPR): You can request restriction of processing.
  • Right to data portability (Art. 20 GDPR): You can receive your data in a structured format.
  • Right to object (Art. 21 GDPR): You can object to processing based on legitimate interest.
  • Right to complain: You have the right to lodge a complaint with a data protection supervisory authority.
  • Withdrawal of AI consent: If you have allowed an AI assistant to access your data, you can withdraw this consent at any time in Locins settings under Legal or on the Apps page. Withdrawal ends the sharing immediately.

For data protection enquiries contact: hello@locins.com