Location data privacy

This page describes how the platform handles location data: what is collected, what is stored and what is not, and under which controls. It is meant for anyone who needs to assess the technology from a privacy point of view.

What is collected

On each operation, the device measures the signals of the radio environment: the visible mobile (2G to 5G) and Wi-Fi networks, network latencies, the Internet service provider (ISP), the SIM in use and the IP address. GPS is used only as a contrast signal. None of these signals identifies the user on its own. See the full list in Location technology.

What is stored

Only an anonymous signature of the radio environment is stored, bound to the device key. It is a mathematical model that results from learning the set of signals of the place: a specific location cannot be deduced from it.

What is not stored

• The captured signals: once they have been learned, they are erased.
• GPS coordinates and the user’s movement history.
• Addresses: a street or a house number cannot be deduced from the signature.
• The user’s access credentials.

Authentication does not need the signals or the credentials to be stored, and not storing them is more secure: it prevents large-scale credential theft and, unlike biometrics, it does not leave users with a stolen trait they cannot change.

Compliance

Ironchip complies with GDPR when processing location data: the electromagnetic analysis generates a technical signature (a hash of the environment), not personal geolocation data, and no GPS position or identifiable geolocation data is stored. Ironchip’s ISO 27701 certification validates its privacy management system. Learn more in Security and compliance and in the frequently asked questions.