Privacy Policy

Last updated: July 2026

Who we are

Loci Earth is operated by the Spirit of the Place Foundation (registration number: [pending]), the data controller for personal data collected through this service. Registered office: [pending]. When this policy refers to "we", "us", or "our", it means the Spirit of the Place Foundation. You can contact us at support@loci.earth.

What data we collect

When you create an account we collect your email address and a password (stored as a secure hash). We do not collect your name.

When you keep a place we store the coordinates you provide and any description or image you attach. Places are private by default and only visible to you until you choose to publicize them.

We store standard server logs (IP address, browser type, pages visited) for security and diagnostic purposes. These are retained for 30 days. Account data is retained for as long as your account is active.

Lawful basis for processing

We process your account data (email address, password hash) on the basis of contract performance: it is necessary to provide the service you have signed up for. We process server logs on the basis of our legitimate interests in operating a secure service. Location data you choose to publicize is processed on the basis of your explicit consent, given at the point you publicize it.

How we use your data

Your email address is used to sign you in and to send you account-related messages (such as password reset emails). We do not send marketing emails and do not share your email with third parties.

Location data you submit is used to position your places on the map. If you choose to publicize a place, that location data becomes part of our open data record.

Data sharing and open data

Places you explicitly publicize are made available under open data licences via our data portal. Publicizing is always an opt-in action; private places are never shared.

We do not sell personal data. We do not share personal data with advertisers.

Your rights

Under UK GDPR you have the right to access, correct, restrict, or delete your personal data at any time. To make a request, email support@loci.earth. We will respond within 30 days.

You may delete your account from within the app. Deleting your account removes your personal data. Publicized places may be retained in anonymised form as part of the open data record.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data lawfully. Details at ico.org.uk.

Cookies

We use a single authentication cookie to keep you signed in. It persists until you sign out or it expires. We do not use tracking or advertising cookies.

Changes to this policy

We may update this policy from time to time. Significant changes will be communicated via the app or by email.