← Back to AirTag History

Legal

Data privacy policy

Draft — last updated

  1. Introduction

    AirTag History turns your AirTags' location pings into a timestamped history. This policy explains what data we collect to do that, why, and what rights you have over it. AirTag History is a small, early-stage product — this policy reflects exactly what the service does today, not aspirational claims about a future version.

  2. Information we collect

    • Apple ID authentication tokens. When you sign in, we use your Apple ID credentials once to obtain short-lived session, CloudKit, and search-party tokens. Your password itself is never stored — it is discarded immediately after sign-in, by design.
    • AirTag location data. Encrypted location reports for AirTags registered to your signed-in Apple ID, decrypted into timestamped coordinates so we can build your history, routes, and stop/dwell detection.
    • Basic website request data. This page and the AirTag History homepage load fonts from Google Fonts' servers, which — like any font CDN — sees the requesting device's IP address. We don't run analytics or advertising trackers on this site today.

  3. How we use your information

    • To build and display your AirTag location timeline, routes, and stop/dwell detection
    • To generate exports (e.g. timestamped reports) that you request
    • To maintain and secure the service, including detecting abuse
    • To comply with legal obligations where applicable

  4. Legal basis for processing (GDPR)

    Where GDPR applies, we rely on:

    • Consent — you choose to sign in with your Apple ID and connect AirTags
    • Legitimate interest — processing location pings is necessary to deliver the core history feature you're using the service for
    • Legal obligation — where we're required to retain or disclose data by law

  5. Information sharing and disclosure

    We do not sell your data, and we do not share it for advertising purposes. We disclose data only to:

    • Infrastructure providers that host the service on our behalf, under agreements limiting their use of the data to providing that infrastructure
    • Google Fonts, as a standard part of loading this website (see above) — no location or account data is sent to Google
    • Authorities, if legally required to respond to a valid request

  6. Cookies and tracking technologies

    AirTag History does not currently use analytics or advertising cookies. The only third-party request this site makes is loading typefaces from Google Fonts. If that changes, we'll update this section.

  7. Your rights and choices

    If you're in the EU/EEA or UK, you have the right to access, correct, or erase your data, restrict or object to processing, and request data portability. Contact us (below) and we'll respond within 30 days.

    If you're a US resident, you have the right to know what data we hold about you and to request its deletion. We do not sell personal information, so there is nothing to opt out of in that respect.

  8. Data security

    We never store your Apple ID password — only short-lived session tokens. Data is encrypted in transit and held with reputable infrastructure providers. No method of transmission or storage is 100% secure, and we can't guarantee absolute security, but we design the system to minimize what's stored and for how long.

    Your data is kept separate from other users'. Every AirTag, location record, and session is tied to exactly one account. We do not pool, cross-reference, or aggregate one user's location history with another's, and no user can access another user's data.

  9. Data retention

    We retain your AirTag location history for as long as you're actively using the service. You can request deletion of your data at any time, and we will delete it.

  10. International data transfers

    Depending on where our infrastructure providers operate, your data may be processed in a country other than your own. Where this happens, we take reasonable steps to ensure it receives an appropriate level of protection.

  11. Children's privacy

    AirTag History is not directed at, and should not be used by, children under 16.

  12. Anti-stalking and acceptable use

    AirTag History can only build history for AirTags registered to the Apple ID you sign in with — the underlying cryptography doesn't allow tracking anyone else's tag, and neither do we. We support Apple's and Google's unknown-tracker alerts, and AirTag History's acceptable-use policy prohibits using it to track people rather than belongings.

  13. Changes to this policy

    We may update this policy as the service changes. Material changes will be reflected by updating the date at the top of this page.

  14. Contact us

    Questions about this policy or your data: [email protected].

    No legal entity is registered for AirTag History yet. Add the controller's name and registered address here before any public launch.