Privacy Policy

• Account and profile data, such as name, email, password hash, locale, authentication status, OAuth provider identifiers, and legal consent records.
• User-entered address, ZIP, city, approximate relocation context, moving, service, custom-provider, provider recommendation, task, checklist, document metadata, note, and budget or expense records you enter. LocateFlow does not use device GPS location in the mobile app.
• Derived location-context records attached to an address you save, such as flood zone, hazard index, radon zone, school district, broadband availability, electric utility, water system, air quality, and weather data returned by the public-data lookups described below, plus vehicle details and recall status when you choose to enter a VIN.
• Support tickets, support messages, billing or revenue-support requests, privacy requests, security reports, and related communications.
• Historical billing or revenue-support data, such as legacy plan records, invoice or receipt metadata, refund status, affiliate or provider revenue records, and support notes needed for tax, accounting, audit, legal, or fraud-prevention purposes.
• Device, app, mobile, push notification, IP address, user-agent, session, cookie consent, CCPA opt-out, consent-gated analytics events such as screen views, taps, and search length, crash/error, rate-limit, admin, audit, and security log data.
• Optional sensitive profile information only when the product asks for explicit consent and you choose to provide it.

LocateFlow uses data to provide account access, organize relocation workflows, store records, generate local checklists, support provider research, maintain free-access entitlements, disclose partner-supported revenue, send notices and reminders, answer support requests, maintain security, prevent abuse, debug errors, satisfy legal obligations, and improve product reliability.

Recommendations, reminders, and checklist suggestions are informational and depend on the data you enter, location context, seed data, public sources, and product rules.

LocateFlow does not sell user-entered relocation data for commercial advertising or broker-style resale. We transfer limited data to service providers and processors acting on LocateFlow's instructions when needed to operate the product.

Processors may include payment or payout processors for legacy charge review, refunds, tax, accounting, audit, fraud-prevention, or affiliate/provider revenue support; email providers such as Resend; hosting/database providers; Cloudflare R2 or other object storage; Google Analytics or Google Tag Manager when consented and configured; Google Maps/address autocomplete when configured; push notification providers such as Expo; and error-monitoring providers such as Sentry or GlitchTip when configured.

When the related features are enabled, limited location data is also sent to the public and government data services described in the next section, and coarse de-identified signals are sent to the AI provider described below.

Third-party providers operate under their own terms and privacy policies. LocateFlow may also disclose data when required by law, to protect rights or security, to investigate abuse, or in connection with a business transaction.

When you save an address, LocateFlow may enrich it with public, government-published context about that location. To do this, the address coordinates — or, where a service needs them, city/state or other area identifiers — are sent to public and government data services. If you typed the address by hand instead of picking it from autocomplete, the street, city, state, and ZIP you entered may first be sent to the U.S. Census Bureau geocoder to convert it into coordinates. Only that location data (or the VIN described below) is sent. Your name, email, and account identifiers are never sent to these services.

• FEMA — flood zone and National Risk Index hazard information.
• EPA — radon zone, public drinking-water system records, and AirNow air quality data.
• NCES — school district information.
• NWS — weather forecasts and alerts.
• FCC — broadband availability.
• DOE/OpenEI — electric utility information.
• NHTSA — vehicle details and open recalls, only when you choose to enter a VIN; the VIN is the only value sent.

Results are stored with your address record and shown for information only. They are not professional advice and are not insurance, lending, legal, or safety determinations. Accuracy and currency follow the public source, which can be incomplete, outdated, or temporarily unavailable; when a lookup fails or is not configured, the product simply shows less information for that address.

When the briefing feature is enabled, move-briefing text may be generated by a third-party AI provider (Anthropic). Only coarse, de-identified signals are sent to the AI provider: state-level location (a two-letter state code), household shape (for example whether the household includes kids, pets, or a senior), an approximate vehicle count, and a rough days-until-move range. Your name, email, street address, and account identifiers are never sent to the AI provider.

The generated text is display-only guidance to help organize a move. It is not legal, tax, financial, insurance, or other professional advice, and it does not make decisions about your account. When AI generation is disabled or unavailable, the product falls back to rule-based suggestions built from the same coarse signals.

Web analytics is consent-gated. If Google Analytics or Google Tag Manager is configured, it should not load until analytics consent is accepted. Internal signed-in usage tracking also respects analytics consent. See the Cookie Policy.

Mobile apps may collect device, app version, push token, consent, crash/error, and analytics event data when enabled. Push notifications can be controlled through app settings, device settings, and notification preferences.

Data is generally retained while your account is active, while needed to provide the service, or while required for security, billing, tax, legal, audit, dispute, backup, or fraud-prevention purposes.

Export and deletion tools are available in account settings. A deletion request may remove active account records, but some data may remain in backups, audit logs, legal records, billing records, security logs, processor records, or records we must retain to comply with law or protect the service.

Depending on where you live, you may have rights to access, correct, delete, export, or object to certain processing of personal information. California residents should also review the California Privacy Notice.

EEA/UK rights may apply if LocateFlow offers the service to users in those regions or otherwise processes personal data subject to applicable law. LocateFlow does not claim a privacy certification or legal compliance approval on this page.

LocateFlow is not intended for children under 13, and users must satisfy the age and authority requirements in the Terms. Do not submit information about children unless you have the authority and lawful basis to manage it.

For privacy requests, email [email protected] or use the account settings tools when available.