Privacy Policy

Last updated: October 16, 2026

What we collect

Lindol Alert requests your device's GPS coordinates to calculate distances to nearby earthquakes and determine whether an alert should be triggered. This location data is processed entirely in your browser — it is never sent to our servers, never stored, and never shared with third parties.

If you deny location permission, the app defaults to Manila, Philippines as a reference point.

The Android app

The app uses your location the same way, on your phone. To show your town's name it asks Android's built-in place-name lookup, which may contact Google.

To show earthquake alerts after you swipe the app away, the app uses Firebase Cloud Messaging (a Google service). When alerts are on, the app subscribes your phone to one shared "quakes" topic, and every new quake is sent to everyone on that topic. Your phone then decides, using your own settings and your last known location stored on the phone, whether to show a notification. Our server does not receive or store your location, your settings or a list of devices. Firebase gives your installation a random ID so it can deliver messages, and Google may process it under its own policies. Turn alerts off in the app to unsubscribe.

If you answer "Did you feel it?" for a quake, the app sends your answer, a rough location (rounded to about 5 km) and a random ID created by the app, so each phone counts once. We store these to draw the felt map, which shows only totals per area of about 10 km. The ID is not linked to your name, account or device. Answering is optional.

You may use the app without an account. If you choose to sign in with Google, the app sends a Google ID token to our server for verification. We store the unique identifier Google assigns to your account, but not your Google password, name, or email address. Your name and email are kept in encrypted storage on your phone so the app can show which account is signed in.

Accounts, sessions, and subscriptions

  • Server sessions: After Google sign-in, our server creates a session. Access tokens expire after 15 minutes. Refresh sessions expire after 30 days and are rotated when renewed. The server stores the session ID and a one-way hash of the refresh token, not the token itself.
  • Google Play subscriptions: If you buy or restore Lindol Plus, the app sends the product ID and Play purchase token to our server. The server verifies the purchase with Google Play and stores a one-way hash for duplicate detection plus an encrypted copy for later verification, along with subscription status, expiry time, and latest order ID. This links the entitlement to your Lindol Alert account. Purchase tokens are never stored as readable text.

We do not sell your data.

Analytics and ads on the website

The website uses Google Analytics to count visits and Google AdSense to show ads. Both may set cookies and receive your IP address and browser details from Google's servers. See how Google uses information from sites that use its services. The Android app does not use Google Analytics; its advertising is described below.

Ads and consent in the Android app

The free Android app uses Google AdMob to show banner ads. Lindol Plus removes ads and the app does not request ads while Plus is active. Google may receive device identifiers, IP address, app interactions, and diagnostic information to provide, measure, and protect ads. Google's User Messaging Platform (UMP) asks for consent where required and passes your choice to Google's advertising services. You can review available privacy choices in the app's settings.

How long we keep data

  • Account and subscription records are kept while your Lindol Alert account exists, then deleted with the account.
  • Session records are kept until they expire, are revoked, or the account is deleted.
  • Felt reports are not linked to your account. They remain with the earthquake record so aggregate felt maps and totals remain useful.
  • Google controls retention for information it receives through Analytics, AdSense, Google Sign-In, Google Play, AdMob, and UMP.

Delete your account

You can delete your Lindol Alert account from the Android app or request deletion by email. See the account deletion instructions for the steps, what is deleted, and what remains.

Deleting your Lindol Alert account does not cancel a Google Play subscription. Cancel it separately in Google Play to stop future charges.

Earthquake data storage

Earthquake records (magnitude, location, depth, time) from PHIVOLCS, USGS and EMSC are stored in our database to power the history view and analytics. These are public seismic records and contain no personal information.

Your browser also caches the last 7 days of earthquake records inlocalStorage for faster loading. This data stays on your device and is automatically cleared after 7 days.

Third-party services

  • USGS Earthquake Hazards Program — earthquake data feed. See USGS Privacy Policy.
  • EMSC (European-Mediterranean Seismological Centre) — real-time earthquake WebSocket feed.
  • PHIVOLCS (Philippine Institute of Volcanology and Seismology) — official Philippine earthquake bulletins, read from their public Latest Earthquake Information page.
  • OpenStreetMap / Nominatim — used to turn earthquake coordinates into city and municipality names. Our server looks these names up and keeps them; only the coordinates of the earthquake are sent to Nominatim, never your location or your IP address. See OSM Privacy Policy.
  • CARTO / OpenTopoMap — map tile providers. Your IP address is visible to tile servers when the map loads, as is standard for any web map.
  • Google Sign-In — optional Android account sign-in and identity verification.
  • Google Play Billing and Google Play Developer API — purchase processing, subscription verification, and entitlement updates.
  • Firebase Cloud Messaging — delivers earthquake alerts to the Android app after you swipe it away.
  • Google Mobile Ads (AdMob) and User Messaging Platform (UMP) — Android banner ads and privacy consent choices. See Google's partner services policy.

Disclaimer

Lindol Alert is not an official emergency warning system. Data is sourced from publicly available seismic networks and may be delayed, incomplete, or inaccurate. Do not use this application as your sole source of information during an earthquake or disaster. Always follow guidance from your local civil defense authority.

Contact

For privacy-related questions, contact us at [email protected].

← Back to Lindol Alert