Privacy policy

This version covers early access. Last updated 13 November 2026.

Early-access version. This policy describes what the app does today. It will be reviewed by a lawyer and updated before Avana is offered to the public.

What Avana is

Avana shows the people in your nest where you are, and tells them when you arrive at or leave places you have set up. It is a location-sharing app for families.

Avana is operated by Wrkflo Tech Private Limited, Pune, Maharashtra, India, which is responsible for the data described here.

What we collect

Your phone number or email address, whichever you sign in with. It is used to sign you in and to let your family find you when they invite you.

Your name. Whatever you type. We do not verify it, and you can use any name your nest will recognise.

Your location, while sharing is on: latitude and longitude, how accurate the reading was, whether you were moving, your battery level, and whether Android reported that a fake-location app produced the position. Roughly every four minutes, and only while you have turned sharing on. This includes when Avana is closed or not on screen: it keeps running in the background, with a notification on your phone saying so, so that your nest can still see where you are.

Places that you or your nest set up, such as home or school.

Emergency contacts you add: a name, a phone number and, if you type one, how they are related to you.

A profile photo, if you choose to add one.

Which device you are using, as an identifier we generate. It is not your IMEI or your advertising ID, and it does not identify you outside Avana.

We do not collect your contacts, your messages, your browsing, your other apps or your microphone.

Who can see your location

Only the people in your nests. Nobody else: not other Avana users, not advertisers, and not anyone who buys data from us, because we do not sell it.

You can pause sharing at any time. When you do, your nest is told that you have paused. They see "sharing paused" and not a position that has quietly stopped being true.

How long we keep it

  • What your nest sees: the last 7 days of location history, and the last 90 days of arrivals, departures and SOS alerts. Nothing older is shown in the app, to anyone.
  • What we keep: location history and alerts for up to one year from when they were recorded, and then they are deleted. India's Digital Personal Data Protection Rules, 2025 (rule 8(3)) require records of processing to be kept for at least a year. We use them only to run Avana and to answer lawful requests from Indian authorities.
  • Your account: until you delete it.

You can delete all of your location history at any time from Settings, and it is removed immediately.

Deleting your account

Go to Settings and choose Delete my account. Everything that says where you have been is deleted immediately, along with your emergency contacts, your photo and your sharing hours. There is no grace period. Copies in our backups are overwritten within 14 days.

We keep a record that an account existed and what it consented to. That record does not contain your name, your phone number or any location. It is the evidence that your family's location sharing was consented to.

If you own a nest, it passes to another adult in it. If there is no other adult, the nest closes.

Notifications

When something happens, we send your phone a notification through Google's Firebase Cloud Messaging. That message contains no names, no places and no coordinates, only an identifier. Your phone then fetches the detail from us directly and writes the notification itself.

This means Google can see that something happened in your nest, but not what happened or to whom.

Who else is involved

Google (Firebase)Delivering notificationsIdentifiers only, never location
Google (Workspace, Gmail)Emailing your sign-in codeYour email address and the code
MSG91Sending your sign-in code by SMS, once SMS sign-in opensYour phone number
Meta (WhatsApp)Sending your sign-in code on WhatsApp, once WhatsApp sign-in opensYour phone number and the code
DigitalOceanRunning the servers and storing the dataEverything above, stored on our behalf
OpenStreetMapMap imagesThe area of the map your app is showing, and your phone's internet address

We do not use advertising networks or analytics services.

Where your data is stored

On servers run by DigitalOcean in Bangalore, India. Backups are kept on the same servers for 14 days.

Avana works outside India too. If you use it from another country, your data is still sent to and stored in India. If you live in the European Union or the United Kingdom, data protection law there gives you the rights below as well: to see, correct, delete and take a copy of your data, to object to how it is used, and to complain to your national data protection authority.

Children

You must be 18 or older to use Avana on your own. Someone under 18 can join only with an invite from their parent or legal guardian. Before inviting a teen, the parent or guardian confirms in the app that they are the teen's parent or guardian and agree to Avana processing the teen's location, and we record that confirmation. The parent or guardian is responsible for that decision and for telling the teen that their location is shared.

Anyone in a nest, including a teenager, can pause their own sharing and leave the nest, and their nest is told when they do. Avana shows no advertising, to anyone.

Security

Sign-in uses a one-time code, so there is no password to steal. Each device holds its own credential, so one compromised phone cannot report locations for anyone else. Location history is withheld for 24 hours after signing in on a new device, so that someone who picks up your phone cannot immediately read where you have been.

We cannot promise that no system is ever breached. Your data is kept on servers in India, reached only over encrypted connections, and only the people who run Avana can get to it. If a breach ever affects you, we will tell you and the Data Protection Board of India without delay.

Your rights

In the app you can see what your nest sees about you, delete your history, delete your account, and pause sharing at any time.

To get a summary of the data we hold about you, or to correct it, write to us and we will send it or fix it. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

For anything else, write to [email protected].

Changes

If this policy changes, we will tell you in the app before the change takes effect.