GeoPassport — Privacy Policy
This policy explains how Atlas Peak (“we”, “us”), Jeremy's independent app studio, handles information when you use GeoPassport. Questions and privacy requests go to atlaspeak@atlaspeakapp.com.
1. Information you provide
Your account can include an Apple sign-in identifier, email address provided by Apple (including a private relay address), display name, username, profile image, home country, and preferences. You can add photos, videos, dates, locations, notes, memories, trip details, passport layouts, stickers, and stamps. Friendship, invitation, story, postcard, and sharing records support the social features you use.
2. Location and photo access
With your permission, GeoPassport processes precise or approximate device location to map explored areas, identify places, record activity routes, and associate memories with places. Background exploration can process location while the app is not on screen when you grant the necessary permission. Photo-library access can process the photos you authorize and their dates and embedded location metadata to find previous visits and create memories. Camera access supports photos you choose to capture. You can change these permissions in iPhone Settings.
3. Local storage, backup, and sharing
Memories, photos, exploration history, passport content, activity records, and settings are stored on your device. Signed-in cloud features also store account-linked backups and relevant content using Firebase Authentication, Cloud Firestore, Cloud Storage, and Cloud Functions. Shared memories, stories, postcards, passport pages, group trips, and live locations are made available according to the sharing and visibility settings for the feature. Your profile information is used for friend discovery and social interactions.
Live location sharing is separate from exploration tracking. Review each feature's audience before sharing sensitive places or photos. Recipients may save screenshots or copies; removing access cannot recall copies already obtained. Signing out or uninstalling the app does not by itself delete server-side data.
4. Optional contacts, health, and notifications
If you use contact-based friend discovery, GeoPassport reads the authorized email addresses and phone numbers on your device, normalizes them, and sends SHA-256 hashes to the matching service. Raw address-book names and raw contact details are not uploaded by this feature. Your account's email or phone hashes can be stored for matching. Hashes are identifiers, not a guarantee of anonymity.
With Apple Health permission, GeoPassport reads step-count and sleep information for activity and daily summaries. Activity-derived summaries can be included in features you choose to back up or share. We do not use Health information for advertising. With notification permission, device notification tokens and settings support reminders, invitations, and social updates. Widgets and companion features display the content needed for the features you enable.
5. Usage, purchases, and security
Release versions use Firebase Analytics to record app interactions, feature usage, purchase events, app/device information, and account-linked identifiers where configured. This is not necessarily anonymous. Custom analytics filters exclude fields such as exact coordinates, email, memory titles, notes, and photo URLs; this does not prevent those fields from being processed by the app features described above. Operational logs and diagnostics help investigate errors and protect services.
Apple processes purchases. RevenueCat helps manage subscription status, entitlements, and purchase-related identifiers, and can associate them with your app account. We do not receive your payment-card details. Firebase App Check, App Attest, and DeviceCheck process app/device attestation to reduce unauthorized access. These protections cannot guarantee that all misuse or disclosure will be prevented.
6. Why we use and disclose information
We use information to operate and restore your account, map exploration, save and display memories, provide the sharing features you select, manage purchases, improve features, answer support requests, and protect the app. We do not sell your personal information. Information is processed by the service providers needed to deliver these features, shared with people according to your choices, or disclosed where necessary to comply with law or protect safety and legal rights.
7. Service providers and international processing
- Google Firebase: account authentication, databases, storage, server functions, analytics, notifications, and app attestation.
- RevenueCat: subscription and entitlement management.
- Apple: sign-in, maps, Photos, Health, notifications, widgets, device attestation, and App Store purchases.
Information may be processed outside your country by us or these providers. Their policies describe their processing and safeguards. When you export or share through another app, that destination's privacy practices apply.
8. Retention and deletion
We retain account-linked content while needed to provide your account, backups, and the features you use. You can remove supported content in the app and change sharing permissions. Delete Account in Profile settings deletes the sign-in identity; it should not be assumed to remove every local file or associated cloud record. For associated cloud content removal, contact atlaspeak@atlaspeakapp.com. We verify ownership before processing requests. Limited records may be retained where needed for legal obligations, payment records, fraud prevention, or resolving disputes; backups and service logs may take additional time to expire. Apple subscription cancellation is separate.
9. Your choices and rights
Use device permissions and in-app sharing controls to limit access. Depending on your location, you may have rights to access, export, correct, delete, or restrict processing of your information, withdraw consent for optional permissions, or complain to your local privacy authority. Visit Privacy Choices & Data Requests or email us to make a request. We may need to verify ownership, but never ask for your password or one-time sign-in code.
10. Children's privacy and changes
GeoPassport is not directed at children under 13. If you believe a child has provided personal information, contact us so we can investigate and handle removal. Policy updates will appear here with a revised effective date.
11. Contact
Atlas Peak · atlaspeak@atlaspeakapp.com · GeoPassport Support