Last updated 10 August 2026
Who we are. Sotera is operated by Unifiltered LLC, 8 The Green, Suite R, Dover, DE 19901, United States. Unifiltered LLC is the data controller for everything described in this policy. For any privacy question or to exercise your rights, email support@unifiltered.app.
Sotera is a personal-safety app that lets you share a journey home with people you trust. Unifiltered LLC ("we") is the data controller for the information described below. Sotera is offered to people in the European Union, and the supervisory authority we work with is the CNPD in Portugal.
| Data | When |
|---|---|
| Phone number | At sign-up — it is your account identifier |
| Name and profile photo | Optional, only if you add them |
| Precise location | Only while a journey is active, including in the background |
| Journey details | Destination, estimated arrival, travel type, route, timeline |
| Ride details | Read from a ride screenshot, if you share one |
| Arrival photo | Only if you turned the feature on. Checked by Anthropic's Claude AI (transient, no training, not retained); never face recognition |
| Trusted contacts | The name and number of each person you choose |
| Push token, diagnostics | To deliver notifications and keep the service working |
We never read your address book. We use your phone's built-in contact picker, so we only ever receive the specific person you tap. We take no payment data, sell nothing, and run no advertising or profiling.
| Purpose | Basis |
|---|---|
| Verify your number and run your account | Contract, Art. 6(1)(b) |
| Track location during an active journey | Contract, Art. 6(1)(b) — location is the service itself |
| Message your trusted contacts | Legitimate interests, Art. 6(1)(f); vital interests, Art. 6(1)(d), in a genuine emergency |
| Keep 90 days of journey history | Legitimate interests, Art. 6(1)(f). You can delete any journey at any time |
| Arrival photos | Consent, Art. 6(1)(a) — optional, withdraw in Settings |
We collect your location only while a journey is active. When you arrive, cancel, or the journey ends, collection stops. We never track you at other times and we do not build a continuous picture of your movements. There is no always-on sharing mode.
We only ask for "While Using the App" permission. Because every journey starts with you tapping a button in the app, tracking can continue while your phone is locked — and whenever that's happening, your phone shows it (the blue status indicator on iPhone, a visible notification on Android). Tracking is never invisible. Starting a journey authorises Sotera to read location from your device and send it to our servers so your trusted contacts can see it. Withdraw at any time by ending the journey or turning off the permission.
Your trusted contacts receive your name, destination and a link to your live location. The link stops working when the journey ends.
Service providers acting on our instructions: Supabase (database, authentication and file storage, hosted in the EU); Twilio (WhatsApp and SMS delivery and phone verification, United States — WhatsApp delivery involves Meta); Google (routing, arrival estimates and place lookup — our use of Google Maps Platform is subject to the Google Privacy Policy); Apple, Google and Expo (push notification delivery). Where these process data outside the EEA we rely on Standard Contractual Clauses or an adequacy decision. We may also disclose data where the law requires it, or to protect someone's life in an emergency.
We hold your name and number because a Sotera user gave them to us. We use them only to send messages about that person's journeys, on the basis of our legitimate interest — and theirs — in them getting home safely. We never use your number for marketing, never build a social graph from it, and never suggest connections. Stop the messages at any time by replying STOP. When the user removes you or deletes their account, we delete your number within 30 days.
Journeys, routes and timeline events: 90 days, then deleted automatically — you can delete any journey sooner. Arrival photos: private storage, with sharing links that expire after 7 days. Account data: until you delete your account. Trusted contact numbers: until removed, then 30 days.
You may request access, correction, deletion, restriction or portability of your data, and you may object to processing based on legitimate interests — including, if you are a trusted contact, objecting to receiving messages. You can delete your account and all its data from inside the app. You may complain to the CNPD (cnpd.pt) or the authority where you live.
Sotera is for people aged 13 and over, and you must meet the minimum age where you live — in some countries it is higher. We do not knowingly collect data from anyone under 13; if we learn we have, we delete it.
If you are under 18: we only share your location while you have a journey running, only with people you picked yourself, and it always switches off when the journey ends. Nobody can turn it on for you.
Data is encrypted in transit and at rest. Row-level security means your journeys are readable only by you and the contacts you chose. Journey links are unguessable and expire. Arrival photos sit in private storage reachable only through short-lived links. If a breach affects your rights we will notify the CNPD within 72 hours and tell you where required.
Journey notifications are delivered by WhatsApp or SMS to the trusted contacts a user personally chooses. Message frequency varies with journey activity. Message and data rates may apply. Recipients can opt out at any time by replying STOP, or reply HELP for help. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are never sold, rented, or shared with any third party.
We will notify you in the app before any material change takes effect.
← Sotera