How Welkin treats your family’s location.
Plain language, no fine print. Nothing on this page is a settings default — these are facts about how Welkin is built.
Never sold, never advertised against.
Welkin collects your family’s location for one purpose: to show it to your family. There are no ads in Welkin, no brokers behind it, and no “aggregated insights” business on the side. This is structural, not a promise in a policy: the system that stores location has no path that hands it to a third party, so there is nothing to switch on later.
Everyone always knows who can see them.
Every person in the family — parent, teen, grandparent — has the same screen, one tap from home: “Who can see me.” And once a month, Welkin sends every person a note listing exactly who can see their location. That note cannot be switched off — not by the person who set up the phone, not by the family’s owner, not by us. It arrives outside the app, so it reaches a person even if someone else manages their device.
Pausing is honest, and so is not knowing.
Anyone can pause sharing — precise location only, or fully. A pause always shows as a pause, that person’s visible choice, never disguised as a stale reading. The reverse holds too: when a reading is old, Welkin says so — “as of 4:12” — and when it can’t reach a phone, it says that, instead of pretending.
History is bounded, and it leaves with you.
Welkin keeps a short window of history — measured in days on the free tier — so a family can answer “when did she get home,” and no more. It is a window, not an archive. And if you leave a family, your history leaves with you: it disappears from that family’s view.
What Welkin never sees.
Your messages, your apps, your browsing, who you’re with. Not collected, not stored, not sold — that’s how it’s built.
Help is never merchandise.
Welkin’s pricing isn’t final; this floor is. Asking for help and being heard is never behind a paywall, and the free way to use Welkin will never be one that feels unsafe to rely on. Anything we charge for will be depth and convenience — never rescue.
No passwords to lose.
Signing in works by a one-time code sent to you — there is no Welkin password to reuse, guess, or leak. Sign in with Apple is an optional convenience on top, never the mechanism itself.
Questions get answers.
Write to support@lucubrastudio.com — a person reads it. The legal versions of these commitments live in our studio’s terms and privacy policy.