Cee includes a safety primitive that allows authorized administrators at Orbital Point to silently request a one-time location capture from a specific device on a case-by-case basis. This capability is intentionally separate from the friend-sharing toggle and from Ghost mode. We disclose it here in full so you can make an informed decision about using Cee.
What it does
- An authorized administrator can send a silent notification to your device
- On receipt, your device captures a single high-accuracy location fix (one-shot, not continuous)
- The fix is sent to our server and recorded in an internal audit table
- No alert, sound, badge, banner, toast, or in-app indicator is shown — the capture happens without any visible cue on your device
- No friend or other Cee user is notified or shown your captured location
Why this exists
This is a safety primitive, not a product feature. It exists so that Orbital Point can respond to genuine safety situations — for example, when a Cee user is reported missing by a family member or emergency contact, when a vehicle (with the user's phone in it) is stolen and law enforcement needs a current fix, or when a welfare check is requested on a driver who has not been heard from in hours.
This capability is NOT used for advertising, analytics, marketing, product telemetry, debugging, QA, or inferring user activity patterns. Misuse is enforceable through the internal audit log, which records every dispatch.
Relationship to your privacy controls
Safety Operations operates even when you have set the friend-sharing toggle to OFF and even when Ghost mode is active. This is intentional: the friend-sharing toggle and Ghost mode are controls over what friends see, not over what Orbital Point can request in a safety situation.
Safety Operations CANNOT operate if any of the following are true: you have revoked Cee's permission to access your location at the operating system level, your device is offline (no network reachability), your device is in airplane mode, you have uninstalled Cee, or your device has been killed by the operating system due to a recent crash loop. Operating-system-level controls always take precedence.
Audit log and retention
Every Safety Operations dispatch creates a row in an internal audit log that records the requester, the resolved target set, the request payload, and the result. The audit log is retained indefinitely. The captured location fixes are retained for up to 90 days and then automatically deleted, except for failed / denied / timeout records, which contain no location data and are retained indefinitely for forensic purposes.
Your right to be informed
If you would like to know whether your account has been the subject of a Safety Operations capture, contact us at hello@ceemap.com with the subject line "Safety Operations Inquiry" and include your account email address. We will verify your identity and respond within 30 days with the audit and capture records for your account, if any.
If you do not want this capability to exist on your device, the only effective controls are: revoking Cee's location permission at the operating system level (this disables most core app features as well), or uninstalling Cee. There is no in-app setting to disable Safety Operations, and we will not add one — disabling it on a per-user basis would defeat the safety purpose for the cases where it matters most.
