A live map only your people can open
Everyone in your group on one map, with their battery and last update. Each location is locked on the phone it comes from, so only the people in your group can open it. Not us.
Even we can't see where you are
Know they got home safe. Nobody else needs to.
Privacy respecting location sharing for families, friends, organisations. Oomoyo seals each location on the phone it comes from, so only the people you share with can open it.
She's home!
Can see
- Family
- Friends
- Organisations
- Carers
We can't see a thing.
Locked out
- Data brokers
- Advertisers
- Leaks and hacks
- Bad actors
Who it's for
For every group that looks out for each other.
Families, friends, organisations, carers and tinkerers. Each group gets its own map, places and alerts, and you can be in as many groups as you like.
Tuesday · 15:10
Kids going places on their own
Emma walks home from school by herself. You hear when she gets there, without asking.
15:12Emma left schoolWalking home
15:31Emma is home ✓Arrived at Home
15:31Home by 15:45 ✓ActionHome by a time. You're told only if she's late.
ArrivalsCheck-insManaged members
Saturday · 21:30
Festivals, trips and nights out
Find each other at the main stage, and know everyone got home after the last train.
21:40Everyone is at the Main stageSam, Jo and Lou
02:58Everyone is home ✓After the last trainActionA webhook tells the group chat
Watch me get homePick me upShare links
Sunday · 09:30
A day in the mountains
See who reached the hut, and hear when someone stops sending. Radio trackers for stretches without phone signal, picked up by your phone.
14:05Joris is at the hut ✓Reached the Hut
14:20No update from Lies for 30 minLast seen on the trailActionNo update for a while. The leader is told.
SOSNo update for a whileLoRa radio trackers
Thursday · 09:00
Looking after someone who lives alone
A morning check-in, and a quiet alert if their phone goes silent. A screen in the hallway shows it all.
09:02Mum checked in ✓Morning check-inActionCheck in at a place. Her carers are told.
10:40Mum is at the marketWalked from her flat
Check-insGroup health alertsHallway display
Friday · 08:00
Your home knows who's in
Home Assistant sees who's home, and a webhook tells your own server. Run Oomoyo on your own hardware if you like.
08:12Everyone has left homeHome Assistant: lights off, alarm on
17:42Sam left the officeWebhook: heating on
Home AssistantWebhooksSelf-hosting
Main stageCampingFoodS
J
L
HutCar parkJ
L
Mum's flatMarket
OfficeHomeS
Tue 15:10![]()
Is she home yet?
Is she home yet?Look around
Meet the Bennetts.
This is Oomoyo in a browser, with the Bennetts in Vienna. Open someone, step through their day, look at their places. Changes are turned off.
Everyone here is made up. Nothing you do is saved or sent.
How it works
Sealed on their phone. Opened only by friends or family.
Every location is locked on the phone it comes from, with keys only the phones in your group hold. Our servers carry sealed locations they cannot open.
On the phoneMLS
Sealed where it starts
Emma's phone locks each location with keys only the phones in your group hold. It uses MLS, the open standard for encrypted group messaging.
Fog onlySame size
Carried, not read
Our servers in the EU pass it on and see only fog. Everything is padded to the same size, so even its length gives nothing away.
Group keysNew phones join
Opened by your group
Only phones in your group can open it. A new phone gets its own keys when someone in the group adds it.
sealed · same size · 15:12:07We can't see
- ✕Where anyone is, or was
- ✕Place names, like “Home” or “School”
- ✕Names, photos and messages
- ✕What an alert was about
- ✕Your IP address: a relay hides it from us
We see live, and never keep
- ●When an account is online
- ●Which groups an account updates and reads
- ●That an SOS started, not where
- ●The time a check-in is due, so we can wake you on time
An app that can read locations stores
{
"user": "Emma Bennett",
"age": 9,
"lat": 51.4545,
"lon": -2.5879,
"place": "St Mary's school",
"at": "2026-10-13T08:12:07Z"
}Anyone with access to this table knows where a nine-year-old is, by name.
Oomoyo stores
{
"group": "4f2a91c0…",
"seq": 18233,
"size": 402,
"sealed": "9f3ac1e077b204de51aae9c3…"
}No name, no place, no coordinates, no sender. Everything is padded to the same size. check: padded size
Sealed before it leaves. Opened only at home.
The difference
If an app can read your locations, so can everyone it answers to.
Staff, partners, hackers, and whoever sends the company a letter. Oomoyo is built so there's nothing readable to give them.
| Apps that can read locations | Oomoyo | |
|---|---|---|
| Who can see where you are | The company, its staff and whoever it shares with | Only the phones in your group |
| If the company is hacked | Locations can leak | Sealed data nobody can open |
| If someone demands the data | A readable history can be handed over | Only sealed data and the metadata we list |
| How it pays for itself | Often ads or data partnerships | Subscriptions. No ads, ever. |
| Where it runs | Often US clouds | EU servers. A relay hides your IP address from us. |
| History | Kept as long as they like | As long as you choose. Delete any hour. |
Apps that read locations
Family trailreadable
Ads shownyes
Staff who could looksome
Passed to partnerssome
Readable historykept
Read byanyone they let
Data sold to the highest bidder
Oomoyo
Family trailsealed
Ads shownnone
Staff who could looknobody
Passed to partnersnone
Readable historynone
Read byyour group
We keep data we can't open
Nothing readable. Nothing to sell.
Devices
Not everyone has a phone. That's fine.
Some kids are too young, some grandparents won't carry one. Oomoyo works with more than phones, and tells you exactly how protected each device is.
At the Bennett house: Emma and Dan on their phones, and a screen by the front door that shows who's home.
Strongest
PhonesAndroidiPhone
End-to-end encrypted
The location is sealed on the device itself. Only the phones in your group can open it. We can't, and neither can anyone who asks us.
Linked
Web and hallway screenToday
Linked browser
A browser or a hallway screen you link with your phone. It shows your group's map, and only phones start and manage groups. Whoever can use that screen sees the map too.
Connected
Home AssistantComing
Integration
Home Assistant sees only what each member says yes to, and each member can take it back at any time.
On arrival
Kids' watchesComingOwn server, Family Plus
Encrypted on arrival
An ordinary kids' 4G watch can't seal its own reports. The watch receiver on your own paid server seals each one the moment it arrives and keeps no readable copy. Never on Oomoyo's own service.
And much more
OwnTracksComing
The open-source location app, on a spare phone or a tablet.
Encrypted on the deviceYour own GPS trackersComing
A tiny tracker program for small GPS boards, in a car or a camper.
Encrypted on the deviceLoRa radio trackersComing
For hikes and places without phone signal. Your phone picks them up.
Radio tracker via your phonePython SDKComing
Link your own app or script to one group and get what each member says yes to.
IntegrationIn the EU
Europe is moving its data home. Start with your location.
Governments and companies across Europe are leaving US cloud providers. Oomoyo stores everything in the EU, sealed so only your group can read it.
- Jun 2025Copenhagen moves to phase out Microsoft as a main IT supplier
- Jun 2025Microsoft France tells the French Senate it can't guarantee data stays out of US hands
- Oct 2025Schleswig-Holstein moves 40,000 mailboxes off Exchange
- Oct 2025The International Criminal Court moves to openDesk
84%
of people in Germany, France, Spain, Belgium, Italy and Poland say they don't trust US tech companies with their data.
POLITICO European Pulse · 6,698 adults · March 2026Servers in the EU
Oomoyo's servers, and everything stored on them, are in the EU. It is sealed, so only the devices in your group can read it.
Run from the Netherlands
Oomoyo is run by a company in the Netherlands, with no US parent.
GDPR, built in
Your data is yours: export it, delete it, and see what we keep.
No ads, no data sales
We earn from subscriptions, so there's no reason to look.
Features
Everything in Oomoyo.
Satellite view
Switch the map to satellite imagery, anywhere in the world.
Family and Family Plus
Share links, no app needed
Send your live location to anyone with a link. One-time, or live for up to 1 hour on Free, 24 hours on Family and 7 days on Family Plus. End it whenever you like.
Shared by link
Places with their real outline
Mark home, school or the sports hall using its real outline from the map, or draw your own. Hear when someone arrives or leaves.
Free: limited
Actions
Tell the right people when something happens, or doesn't.
Free: limited
SOS
Hold the button for 3 seconds and everyone in your groups gets an alarm with your live location, even if you had paused sharing. I'm safe ends it.
Guardians and Managed members
Guardians decide how a child, or anyone who needs a hand, shares. Managed members can always send an SOS and leave a group. Kids can share themselves by link, and every guardian is told.
Your own GPS trackers
A tiny tracker program for small GPS boards, for example in a car or a camper. It encrypts its own reports before they leave.
Encrypted on the deviceFamily and Family Plus
LoRa radio trackers
For hikes and places without phone signal. Your phone picks them up.
Radio tracker via your phoneFamily Plus
Kids' 4G watches
Works through the watch receiver on your own paid server, never on Oomoyo's own service.
Encrypted on arrivalFamily Plus with self-hosting
Home Assistant
Members who say yes show up as people in Home Assistant, ready to use in your own setup. Each person can take it back at any time.
IntegrationFamily Plus
Webhooks
Send arrivals, SOS and check-ins to your own services to build your own automations and integrations. They stay encrypted until they reach your receiver. Up to 3 per group.
Family Plus
On your computer
Sign in with your account code on any computer to see your groups' map, places, actions and history.
Linked browser
Run it on your own server
The Oomoyo server is open source. Run it yourself for free, with no limits, or connect your own server to Family Plus for enhanced functionality.
Free, no plan neededFamily Plus
Android and iPhone
Apps for Android and iPhone, in English, Dutch, German, French, Spanish and Portuguese.
Pricing
Free to start. Safety is never behind a paywall.
SOS, arrivals and check-ins are on every plan. You pay for more devices, never for safety.
On every planSOSArrivalsCheck-insPick me upUnlimited groups
Free
€0 forever
- 3 devices
- Unlimited groups
- No extra devices
Family
75% off first year€4 a month
Founders' deal, yearlywas €48 now €12 for your first year
- 6 devices
- Unlimited groups
- Satellite view
- €1 a month per extra device
Family Plus
75% off first year€10 a month
Founders' deal, yearlywas €120 now €30 for your first year
- 12 devices
- Unlimited groups
- Satellite view
- €1 a month per extra device
Founders' deal
Join the launch list 75% off the first year of a yearly Family or Family Plus plan, for everyone on the launch list. We email it to you on launch day.
Prices include VAT and sales tax.
Plans side by side
| Feature | Free€0 | Family€4 a month75% off | Family Plus€10 a month75% off |
|---|---|---|---|
| Groups | Unlimited | Unlimited | Unlimited |
| Devices includedThe total number of different devices across all your groups. A phone in three groups counts once. | 3 | 6 | 12 |
| Extra devices | Cannot be bought | €1 a month each | €1 a month each |
| SOS, arrive and leave alerts, check-ins, Pick me up | Yes | Yes | Yes |
| End-to-end encryption on phones | Yes | Yes | Yes |
| History | 7 days | Unlimited | Unlimited |
| Places and actions | Limited | Unlimited | Unlimited |
| Satellite view | No | Yes | Yes |
| Browser and hallway screen | Yes | Yes | Yes |
| One-time share link | Yes | Yes | Yes |
| Live share link, longest | 1 hour | 24 hours | 7 days |
| Active share links at once | 1 | As many as you like | As many as you like |
| Home Assistant | No | No | Yes |
| Webhooks (up to 3 per group) | No | No | Yes |
| LoRa radio trackers | No | No | Yes |
| Self-hosting on one server (paid) | No | No | Yes |
Pay for more devices. Never for safety.
Try it
Go on. Sell your family's location.
Somewhere, a family's routine is up for sale right now. Press the button and see what yours fetches with us.
Lot 447130 days of locations
The Bennett family
- People
- sealed ▒▒▒▒▒▒
- Home
- sealed ▒▒▒▒▒▒
- School run
- sealed ▒▒▒▒▒▒
- Lives alone
- sealed ▒▒▒▒▒▒
- Ad segment
- sealed ▒▒▒▒▒▒
Simulation with made-up bidders. Nothing leaves this page.
Live bidsLot unopened
![]()
A data broker€0.50walked away![]()
A people-search site€9walked away![]()
An ad network€24walked away![]()
A data reseller€60walked away![]()
Someone with no name€120walked away
Sold: nothing. The lot was opened and held only sealed data. Every bidder walked away.
Your routine isn't for sale. Not even by you.
Honestly
Oomoyo might not be right for you if…
We'd rather tell you now than after you've set it up.
- ✕
You want to follow someone who hasn't agreed.Everyone in an Oomoyo group can see who sees them. There is no hidden mode, and we won't build one. Oomoyo is sharing that each person chose.
- ✕
You want to track staff or a fleet.Oomoyo is made for families and friends who choose to share with each other, not for keeping an eye on employees.
- ✕
You want us to rescue your history if every phone in the group is lost.We can't. If one family phone still holds the keys, it can hand your history to your new phone. If every phone is lost, nobody can open it, including us.
- ✕
You want a 24/7 emergency centre.Oomoyo alerts your group, not the emergency services, and nobody watches the alerts around the clock. In an emergency, call 112 first, then press SOS so your group knows.
Better you hear it from us.
Questions
Questions parents ask us.
Straight answers. If something isn't built yet, we say so.
Can you see where my child is?
No. Locations are sealed on your child's phone with keys only the phones in your group hold. Our servers pass on sealed data and can't open it.
What happens if Oomoyo is hacked?
An attacker would get sealed data nobody can open. We never see what is inside or anyone's IP address. We keep as little as we can for exactly this reason.
What if the police ask for my group's locations?
We can only hand over what we have: sealed data we can't open, and very little else. We'll publish how many requests we get.
Will it drain my phone's battery?
Sharing your location always costs some battery. We're measuring Oomoyo on real phones and will publish the numbers before launch.
What are actions?
Actions are what you choose Oomoyo to tell you about: an SOS, a check-in that did not happen, an arrival or a leave, a low battery, no update from a phone. You pick who is told, and the person an action is about sees it.
Can I set up a group in a browser?
No. Only phones start and manage groups. A browser you link with your phone shows your group's map and history. Letting people in, adding devices and Recovery Kits stay on your phone.
Can my teenager switch it off?
They can leave a group, and the rest of the group sees that they did. Oomoyo is built on trust, not on hiding.
Do I need to give you my email address?
Not to use Oomoyo. The app needs no email address and no phone number: you sign in with an account code. This page asks for your email only to tell you when Oomoyo launches.
Where is my data stored?
On Oomoyo's servers in the EU, sealed so only the devices in your group can read it. Every app connection goes through an independent relay run by Oblivious Network, a US company, so Oomoyo never sees your IP address; the relay sees the address and that Oomoyo is used, never what is inside. The map comes from Cloudflare's network (US) through the same relay, so Cloudflare sees which map tiles load, never who loads them. Apple and Google run the app stores and deliver wake-ups whose content is sealed.
Why a red panda?
Small, shy, and worth protecting.
Pip is a red panda because red pandas need looking after too. So do the open projects Oomoyo stands on.
Endangered
< 10,000
red pandas left in the wild
They live in the mountain forests of the eastern Himalayas and southwest China. Those forests are cleared for firewood, timber and farmland, and poachers and the illegal pet trade take the animals themselves.
Eastern Himalayas
Nepal · Bhutan · northeast India · northern Myanmar · southwest China
Our pledge
5%
of our gross revenue, every year
Revenue, not profit, so it starts with our first euro. It goes to red panda conservation and to the open projects Oomoyo is built on.
- Red panda conservationProtecting the forests they live in
- ProtomapsThe map tiles and style we build on
- MapLibreDraws the map on your screen
- VersaTilesThe satellite view
- PhotonFinds the places you search for
We stand on the shoulders of giants. This is how we give back.
Rare things are worth protecting. Your routine too.
Keep it in the family
Ready when you are.
Get notified when Oomoyo opens, and get the founders' deal. One email to confirm your address, one when we launch.
