Privacy Policy — Legal Locate

Legal Locate ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use the Legal Locate mobile application and related services (the "Service").

1. Information We Collect

We collect the following categories of information:

Account information: Your name, email address, and account credentials when you register, plus an optional phone number and the city where you are located, which you can add on your profile.
Case information: Details about your legal matter that you submit through the app, including the nature of your case, jurisdiction, the city where the matter took place, and any narrative you provide.
Attorney information: For attorneys, your BAR identification number, firm name, years of experience, licensed jurisdictions, and professional biography.
Communications: Messages and offers exchanged through the platform between clients and attorneys.
Usage data: App activity, device type, operating system, and crash/diagnostic reports provided by Apple's TestFlight and App Store services and by our error-reporting provider (Sentry), used to improve the Service. Error reports are technical in nature and are configured not to include personally identifying information.
Push notification token: If you allow notifications, the app registers a device push token with us so we can alert you to case activity. The token identifies your device for push delivery only and is never used for analytics or attribution.
Analytics data: The iOS app sends product-analytics events to PostHog Inc. (hosted on PostHog's US cloud), covering app lifecycle (app installed, opened, and backgrounded) and key funnel steps (account signup and verification, case-wizard start, steps, and submission, attorney applications, offer acceptance, and hire confirmation). These events include a randomly generated device identifier (never the advertising identifier — no IDFA or IDFV), your account's user ID and role, the U.S. state involved, case IDs, and device metadata collected by the PostHog SDK (device model, OS version, app version, locale, and timezone). They never include names, email addresses, case narratives, demographic information, the legal practice area you selected, or any free text.
Attribution data: The iOS app also includes the AppsFlyer SDK (AppsFlyer Ltd., hosted in the United States) to measure which of our own app-install advertising campaigns result in installs. It runs in AppsFlyer's strict configuration: it never accesses the advertising identifier (IDFA), never shows a tracking-permission prompt, and is never given your account identity. It receives the same funnel events described above (with the same exclusions, including the legal practice area), a device-level install identifier and the identifier for vendor (IDFV), technical device and network information, and your IP address, which AppsFlyer maps to an approximate (city-level) location. Attribution data stays at the device level and is never joined to your name, email address, or account.
Demographic information: When you submit a case we ask for your age range and how you plan to pay for representation (both required), and optionally your race/ethnicity and gender (each with a "Prefer not to say" choice). Attorneys browsing cases never see any of this information; it is shared only with the attorney you select for your case (see Section 3), and is also used for aggregate diversity reporting.

2. How We Use Your Information

To make client case postings available to licensed attorneys in the appropriate jurisdiction, who decide for themselves whether to apply.
To verify attorney BAR credentials and licensing status.
To facilitate communication and offers between clients and attorneys.
To send notifications about case activity, offers, and selections.
To improve, maintain, and secure the Service.
To produce aggregate, anonymized diversity reporting from the demographic information collected at case submission.
To comply with applicable laws and regulations.

3. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

With attorneys in your jurisdiction: When you submit a case, limited case details are shared with licensed attorneys in your jurisdiction who are active on the platform, including your intake answers (such as the city where the matter took place) and, if you added it to your profile, the city where you are located. Your demographic information and contact details are never included in what browsing attorneys see.
With your selected attorney: When you accept an attorney's offer, that attorney receives your name and contact details along with your case information, including the demographic details from your intake, so they can evaluate your case and reach out to schedule your consultation.
With clients: When an attorney submits an offer or accepts a case, their professional profile information is shared with the client.
Service providers: We use trusted third-party providers (including cloud hosting, Apple's App Store/TestFlight diagnostics, Sentry for error and crash reporting, PostHog Inc. for product analytics, hosted on PostHog's US cloud, AppsFlyer Ltd. for app-install attribution, and Expo's push notification service, operated by Exponent Inc. and hosted in the United States, to deliver push notifications) that process data on our behalf under strict confidentiality agreements. Analytics data is used only for product analytics such as funnel and drop-off analysis, and attribution data only to measure the performance of our own app-install campaigns — the app itself shows no advertising — and neither is sold or shared for cross-app tracking. Our attribution SDK runs in a configuration that removes the advertising identifier entirely and performs no tracking as Apple defines it. Push notifications are handed to Expo's service with your device push token and the notification's title and text, which Expo passes to Apple for delivery; that text is generic (for example, “An attorney has applied for your case”) and never includes your name, the legal practice area you selected, your case details, or an attorney's name.
Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of our users.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you confirm that you have located an attorney, every other application and offer on that case is permanently deleted from our systems; the case itself, your intake details, and your located attorney's application and offer are kept so that both you and your attorney retain a record of the engagement. You can delete your account and all associated data at any time directly in the app (Profile → Delete Account); deletion takes effect immediately. When you delete your account, we also delete your product-analytics identity and its events from PostHog, along with the push tokens registered for your devices. AppsFlyer attribution data holds no account identity to delete — it stays at the device level and expires automatically under AppsFlyer's retention schedule. We keep a minimal record of the deletion request itself (the deleted account's email address and role, and the time and technical origin of the request) for security and audit purposes, and certain other information may be retained as required by law.

5. Data Security

We use industry-standard security measures including HTTPS encryption for data in transit and secure credential storage on your device. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you.
Request correction of inaccurate information.
Request deletion of your personal information — available directly in the app via Profile → Delete Account.
Object to or restrict certain processing of your data.

To exercise any of these rights, please contact us at admin@legallocate.app.

7. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy in the app and updating the "Last updated" date above. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Legal Locate
admin@legallocate.app
legallocate.app