Seidr Beacon privacy

Seidr Beacon is a visible, opt-in location service. A company enrols its own phones and decides who may read their location. Each company publishes its own notice at https://seidrlabs.online/beacon/api/privacy/<company>, and the app shows that link when you enrol.

Who runs it

Operator: Seidr Labs
Contact: https://seidrlabs.online/contact.html

For tracking done on behalf of a company, that company is the responsible party and the operator processes the data on its instructions.

What the app does

Starts only after you read the disclosure and agree. If you leave tracking on, it starts again by itself after the phone restarts, until tracking is stopped in the app.
If tracking stops unexpectedly during the company's tracking hours, the company (and its assistants) is told when the phone stopped reporting.
Shows a permanent notification while tracking, with a Stop button.
Records location, speed, direction, altitude, battery level and charging state. It does not read your contacts or your phone's own messages; it uses the microphone and camera only when you record a voice note or take a photo to send to your company.
Has an optional emergency (SOS) button. Only if you set it up does the app ask for permission to send text messages and make phone calls, and it uses them only to alert the contacts you chose when you raise an alert. If the phone is enrolled, the alert also goes to the company, and the email addresses you chose receive an email (delivered by Resend, an email service based in the United States) with a private live-location link that stops working an hour after the alert ends.

How it is protected

Data travels only over HTTPS. The service is not directly reachable from the internet; it sits behind the web server.
The phone's and each assistant's credentials are stored on the server only as keyed fingerprints, never in readable form.
Each assistant can read only the phones it was explicitly linked to, inside one company. No company can see another company's phones.
Every read by an assistant or an administrator is written to an audit log.
An encrypted backup copy is kept for up to 30 days in Germany (a Hetzner data centre in the European Union). It can only be read with a key held by the operator, and its integrity is checked before it is ever restored.

Your rights

See your data. Ask https://seidrlabs.online/contact.html for a copy of everything stored about your phone: every location point, when you agreed to this notice, and every time an assistant read it. The service can also hand this copy straight to your enrolled phone.
Delete your data. Ask https://seidrlabs.online/contact.html to erase it. Erasure removes every location point and the phone's last known position at once, and switches off the phone's access. The service also accepts this request straight from your enrolled phone. Encrypted backup copies taken before the erasure are not edited; they expire on their own within 30 days.
Stop tracking. Tracking is always visible as a notification, and you can stop it from the app or the notification at any time.
Object or correct. You may object to the processing or ask for a correction by contacting https://seidrlabs.online/contact.html.
Complain. If you are not satisfied, you can complain to the Information Regulator (South Africa): https://inforegulator.org.za/, POPIAComplaints@inforegulator.org.za, 010 023 5200.