Privacy Policy

Effective September 7, 2026

Dorazim shares location only after the user explicitly starts sharing. Sharing continues for the selected duration while the phone is locked or the app is not on screen, and the user can stop it at any time.

Controller and contact

Dorazim is operated by Dan Drahy. Privacy questions and deletion requests can be sent to dorazim@dorazim.app.

Data processed

Dorazim processes precise device location, a current locality name derived on the phone from those coordinates, timestamps, optionally shared speed, bearing, accuracy and optional altitude; a selected destination, address, travel mode, planned route, distance and arrival estimate; optional pickup or drop-off places, manually entered names or nicknames, each stop's purpose, and its current progress status (waiting, approaching, delayed, picked up, dropped off or skipped); random tokens required to operate a sharing link; and ordinary connection and security log data such as IP address, browser and device type. For a private Find each other meeting, it also processes both participants' names or nicknames, selected travel modes, latest precise locations, the meeting point and short-lived invitation tokens. Dorazim does not require an account, phone number or access to contacts.

Purpose and disclosure

Data is used only to provide live journey sharing or a mutually confirmed private meeting, display the route and location to authorized recipients, calculate remaining time, and keep the service secure and reliable. It is not sold or used for advertising, profiling or user analytics. Anyone who receives a public journey link can view that journey and may forward its link. A private meeting has no public viewer: precise locations become visible only to the two app users who explicitly confirmed the connection. The short code or invitation alone never reveals a location, expires quickly and cannot be reused after joining.

Service providers

Data is technically processed by the server hosting provider. The Android app uses Google Maps Platform for maps, place search and route calculation. The public viewer uses Leaflet, the unpkg CDN and OpenStreetMap tiles. These providers may receive IP address, device metadata and requests necessary to provide their services.

Optional Google Play purchase

Dorazim offers an optional one-time Dorazim Supporter purchase. Google Play processes the payment and payment details directly under Google's terms and privacy policy. Dorazim does not receive or store a card number, bank account or other payment credential. The app checks the entitlement with Google Play and keeps only an active-supporter flag in the phone's private storage; it does not send a purchase token, order ID or payment history to the Dorazim server.

Location during active sharing

Dorazim normally requests precise location while the app is in use. After the user explicitly starts sharing, an Android foreground service with a persistent visible notification keeps collecting and transmitting location when the screen is off or locked or another app is visible. If a phone still suspends updates, Sharing reliability lets the user optionally allow location all the time and unrestricted battery use. “Allow all the time” is used only during a sharing session started by the user, never for hidden or automatic tracking. Collection stops when the selected time expires or the user stops sharing, and both optional settings can be revoked at any time in Android settings.

Importing a destination from Waze

When the user chooses to share a Waze journey with Dorazim, the temporary Waze link is sent to the Dorazim server and Waze only to retrieve its destination. Dorazim does not store the Waze link or token. The resulting destination may be stored with a Dorazim sharing session after the user starts sharing.

Optional detection of leaving the car

After enabling the separate option and granting physical activity permission, Dorazim uses Google Play services transitions between driving, walking and stillness together with GPS during active sharing. This changes the car symbol to a walker near a stop or destination. Sensor events are processed only in phone memory and are not sent to the server. The derived current walking flag is sent with public location to the server and is visible to link recipients. It is not sent while public location is paused. During a connection outage it may be temporarily stored with pending points on the phone; the server stores it only with the session's latest location, not as an activity history, until the session is deleted under the rules below. The option is off by default, can be disabled at any time and does not change manual place handling. It does not read health records, step counts or Health Connect.

Security, retention and deletion

Data is encrypted in transit using HTTPS. Write access is protected by a private random token stored in the app's private storage. Detailed sessions and route points are automatically deleted no later than 30 days after their last activity. Operational security logs are kept for no more than 30 days unless a security incident or legal obligation requires longer retention.

A private meeting stores only each participant's latest location, not a movement trail. Its session, latest positions and nicknames are removed no later than 24 hours after ending or expiry and are not added to the phone's journey history.

Dorazim also keeps a private on-device history of up to 100 recent journeys, including selected route details and recorded map points, so the user can reopen or repeat them. The standard free version displays the newest 50 entries; the supporter purchase makes up to 100 available. Each journey may be associated with its own sharing link. Deleting that history entry in the app invalidates the link and removes the corresponding session and location points from the server.

The private on-device storage also keeps up to 100 most recently confirmed searched places so they can be selected again. The standard version displays the newest 50 and the supporter purchase makes up to 100 available. This history is not stored on Dorazim's server.

Android may include a safe copy of journey history without private control tokens and the place-search history in an encrypted Google system backup or a direct device-to-device transfer. This is used only for possible restoration after a new installation. Backup creation and restoration are controlled by Android, the user's backup settings and Google Account, so Dorazim cannot guarantee or force them. Active sharing, private control tokens, pending upload points and reminders are not backed up. Clearing app data or uninstalling removes the local copy; an earlier encrypted system backup may be restored during a later installation and can be managed in Google backup settings.

Earlier server deletion can be requested at dorazim@dorazim.app; the relevant sharing link may be needed to identify the session.

User choices and children

The user chooses whether to start sharing, who receives the link or invitation, the duration, whether speed is included on the public link, whether viewers see exact start and destination addresses or street names without house numbers, and when to stop. A private meeting starts only after confirmation on both phones, and either participant can stop it immediately for both. After speed sharing is disabled, new speed values are not sent to the server and the public link identifies speed as hidden. When exact endpoint addresses are hidden, the server keeps them for the journey but removes their house and building numbers from the public journey data and link preview. Android permissions can be revoked at any time. Dorazim is not designed for children and must not be used for covert tracking of another person.

Third-party terms and changes

See the Google Privacy Policy, Google Play Terms, Google Maps Terms and OpenStreetMap Foundation Privacy Policy. Material changes to this policy will be reflected on this page with a new effective date and, where required, a new notice or consent.