Privacy Policy

1. Introduction

GeoPocket is a travel-memory service: you save the places that mattered to you, together with photos, voice notes, and text. That makes the data we hold about you unusually personal — it describes where you have been, where you live, and what you did there. This policy explains, in plain terms, exactly what we collect, who we send it to, how long we keep it, and how you can get it back or have it deleted. It applies to the GeoPocket website, the GeoPocket mobile app, and the waitlist.

2. Data Controller

The controller responsible for processing your personal data within the meaning of Art. 4 (7) GDPR is:

3. What We Collect

3.1 Account information

When you create an account, we process:

• Email address
• Name and profile picture, if you sign in with Google and Google provides them
• The authentication provider you used (email/password or Google)
• Session data required to keep you signed in

3.2 Location data

This is the core of the service, and it is the most sensitive category of data we hold. We process:

• Places you save — name, address, city, country, and geographic coordinates (latitude/longitude)
• Whether you have visited a place or added it to your wishlist, and the date you visited
• Pockets (collections) you group places into, and any notes or descriptions you add
• Your travel timeline — the sequence and dates of the places you visited, which taken together reveals your movement history
• Anchors — the places you designate as your Home, Work, or Hometown, plus any custom anchors you create

Please be aware: an anchor of the type “Home” or “Work” is, in practice, your home or work address. We store it because the feature cannot work otherwise, but you are never required to set one — GeoPocket is fully usable without any anchors, and you can delete an anchor at any time.

3.3 Memories and media

When you capture a memory, we process the content you provide:

• Photos you upload (stored in our “memories” storage bucket)
• Voice notes you record (stored in our “voice-notes” bucket) and the text transcript generated from them
• Documents and screenshots you upload for extraction — for example a restaurant receipt, a booking confirmation, or a screenshot of a map
• Text notes, titles, captions, and categories you write
• Technical metadata contained in your files, including EXIF data such as the GPS coordinates and the capture time embedded by your camera
• Avatar images you upload (stored in our “avatars” bucket)

3.4 Chat messages

GeoPocket includes an AI assistant you can chat with about your places. We store your chat threads and messages so the conversation persists between sessions, along with token-usage counters we use for rate limiting and cost control. The assistant can read your saved places and, on your instruction, create or modify them.

3.5 Imported data

If you import a Google Maps saved list, our servers fetch that list from Google using the public URL you provide, and store the resulting places in your account. We do not connect to your Google account for this and we do not receive your Google credentials.

3.6 Waitlist and newsletter

If you join the waitlist or subscribe to updates, we store your email address, the date you signed up, your confirmation status, and your unsubscribe token. You can unsubscribe at any time via the link in every email; doing so removes you from the mailing list.

3.7 Visitors to our website (Cloudflare Turnstile)

The early-access sign-up form on our home page is protected by Cloudflare Turnstile, an anti-bot widget. It is worth stating plainly what this means: the Turnstile script is loaded from Cloudflare's servers (challenges.cloudflare.com) as soon as the page renders, so your browser contacts Cloudflare before you have clicked anything. In doing so, Cloudflare receives your IP address, your user agent, and signals about your browser environment, and sets a token to distinguish humans from bots. It does not track you across other websites and is not used for advertising. We rely on it because the sign-up form is otherwise trivially abused by automated spam. The legal basis is our legitimate interest in preventing abuse of the form (Art. 6 (1)(f) GDPR); Cloudflare's privacy policy is linked in the table below.

3.8 Technical and usage information

Processed automatically when you use the service:

• IP address, browser type, and device information contained in server request logs
• Error reports and diagnostic stack traces (via Sentry) when something goes wrong
• Rate-limiting counters keyed to your account or IP address
• Gamification data derived from your own activity: XP, quests, achievements, and streaks
• Product analytics in the mobile app only (via PostHog) — the website does not run analytics tracking

4. How We Use Your Data

We process your data only for the following purposes:

• Providing the service: storing, displaying, organising, and searching your places, pockets, and memories
• Running the AI features you invoke — transcription, photo and document analysis, and the chat assistant (see section 5)
• Authenticating you and keeping your session secure
• Sending you transactional email (sign-up confirmation, password reset, invitations) and — if you asked for them — product updates
• Sharing pockets with the companions you explicitly invite
• Keeping the service running and secure: error monitoring, abuse and bot prevention, rate limiting
• Complying with our legal obligations

5. AI Processing — What Leaves Our Servers

GeoPocket's AI features work by sending your content to third-party AI providers outside our infrastructure. We want to be completely explicit about this, because it is the single most consequential thing to understand about the service.

5.1 What content is transmitted

When you use an AI feature, the following content is transmitted to a third-party AI provider for processing:

• Photo capture: the photo you upload is sent to an AI vision provider to identify the place, extract text, and suggest a title and category.
• Document capture: the document or screenshot you upload — for example a receipt showing what you ordered and what you paid, or a booking confirmation showing your reservation — is sent in full to Anthropic (Claude) for text extraction. We do not redact it first.
• Voice notes: your audio recording is sent to a speech-to-text provider (by default OpenAI) to produce a transcript.
• Chat assistant: your messages are sent to Anthropic (Claude), along with the saved places, pockets, and anchors relevant to your question, so the assistant can answer it. This can include your Home or Work anchor.
• Generated descriptions: the place details you provide are sent to a text model to draft a description.

5.2 Which providers receive it

Depending on the feature and our configuration, one of the following providers receives the content:

• Anthropic (Claude) — the chat assistant, document and receipt extraction, and optionally photo and text analysis
• OpenAI — voice-note transcription (the current default), and optionally photo and text analysis
• Google (Gemini and Cloud Vision) — the current default for photo and text analysis
• Deepgram or AssemblyAI — alternative speech-to-text providers we may select instead of OpenAI

5.3 Retention by AI providers

We send your content through these providers' commercial APIs, under terms that do not permit them to use it to train their models. Providers may retain it briefly for abuse monitoring — typically up to 30 days — before deleting it. We cannot control or audit their internal handling beyond the commitments in their terms, which are linked in the table below. Once processing is complete, we store only the result (the transcript, the extracted fields, the assistant's reply) in your account.

5.4 Your control

AI features are optional and only run when you actively invoke them. You can use GeoPocket entirely without them by entering places, titles, and notes yourself. If you never upload a photo, never record a voice note, and never open the chat, no content of yours is sent to any AI provider.

6. Sub-Processors

We use the following providers to run GeoPocket. Each one is contractually bound to process your data only on our instructions.

This list reflects the providers actually wired into GeoPocket today. We will update it — and this page — before adding any new provider that receives your personal data.

7. Legal Basis for Processing

We process your personal data on the following legal bases under Art. 6 (1) GDPR:

• Performance of a contract, Art. 6 (1)(b): providing the service — storing your places, memories, and pockets; managing your account; sharing pockets with the companions you invite; running the AI features you invoke.
• Consent, Art. 6 (1)(a): sending you the newsletter and product updates you subscribed to. You can withdraw this at any time via the unsubscribe link, without affecting the lawfulness of prior processing.
• Legitimate interests, Art. 6 (1)(f): keeping the service secure and available — error monitoring, rate limiting, and bot prevention. Our interest is in operating a functioning, non-abused service; we have weighed this against your interests and limit the data used to what security requires.
• Legal obligation, Art. 6 (1)(c): retaining data where statutory retention duties apply.

8. Storage and Retention

8.1 Where your data is stored

Your account data, places, coordinates, anchors, pockets, chat history, photos, and voice notes are stored on Supabase infrastructure in the EU (Frankfurt, eu-central-1). Data transmitted to the AI providers, and to the other sub-processors marked as such in the table above, is processed outside the EU — see section 13.

8.2 How long we keep it

• Account data, places, memories, and chat history: for as long as your account exists. When your account is deleted, this data is deleted with it.
• Photos, voice notes, and avatars: until you delete the memory they belong to, or until your account is deleted.
• Waitlist and newsletter email addresses: until you unsubscribe, after which we remove you from the mailing list.
• Server and error logs: retained for a short diagnostic window (typically up to 90 days) and then deleted.
• Data we are required to retain under statutory duties: kept for the legally mandated period, and then deleted.

9. Security

We apply the following technical and organisational measures:

• TLS encryption for all data in transit
• Encryption at rest for the database and the storage buckets holding your photos and voice notes
• Access to your files gated by signed, expiring URLs rather than public links
• Authentication and session management via Better Auth
• Rate limiting and bot protection against abuse
• Access to production data restricted to the operator

No method of transmission over the internet or of electronic storage is completely secure, and we cannot guarantee absolute security.

10. Data Breach Notification

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware of it, in accordance with Art. 33 GDPR, and inform affected users without undue delay where the risk is high (Art. 34 GDPR).

11. Your Rights

Under the GDPR you have the right to:

• Access (Art. 15): obtain confirmation of whether we process your data, and a copy of it
• Rectification (Art. 16): have inaccurate data corrected
• Erasure (Art. 17): have your data deleted — the “right to be forgotten”
• Restriction (Art. 18): have processing restricted in certain circumstances
• Data portability (Art. 20): receive your data in a structured, machine-readable format
• Object (Art. 21): object to processing based on our legitimate interests
• Withdraw consent (Art. 7 (3)): withdraw consent to the newsletter at any time

11.1 How to exercise them

GeoPocket does not yet offer a self-service data export or an in-app “delete my account” button. We are not going to pretend otherwise. Until those features ship, you exercise every right listed above by writing to us, and we will carry it out manually — including a full export of your places, memories, and files, and complete deletion of your account. Email: privacy@geopocketapp.com

We will respond within one month of receiving your request, as required by Art. 12 (3) GDPR. There is no charge for this, and you do not have to give a reason for a deletion or export request.

11.2 Right to complain

You also have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is the Hamburg Commissioner for Data Protection and Freedom of Information: datenschutz-hamburg.de

12. Cookies and Similar Technologies

The GeoPocket website uses only cookies and storage that are strictly necessary to operate the service:

• Session and authentication cookies — required to keep you signed in
• The Cloudflare Turnstile token — set on our home page to protect the early-access form from bots (see section 3.7)
• A cookie storing your language and theme preference

The website sets no advertising cookies and runs no third-party analytics or tracking scripts, so there is nothing here for you to opt out of and no consent banner to click away: we treat all of the above as strictly necessary under § 25 (2) TDDDG (formerly TTDSG). Product analytics (PostHog) run in the GeoPocket mobile app only, never on the website.

13. International Data Transfers

Your stored data lives in the EU. However, several of our sub-processors — in particular the AI providers Anthropic, OpenAI, and Google, as well as Trigger.dev, Mapbox, and parts of Sentry and Resend — process data in the United States. When you use an AI feature, your content is therefore transferred to the USA. These transfers are safeguarded by the EU Standard Contractual Clauses and, where the provider is certified, the EU-U.S. Data Privacy Framework. Despite these safeguards, US authorities may in principle be able to access data held by US providers, and you should factor that into what you choose to upload.

14. Children

GeoPocket is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

15. Changes to This Policy

We may update this policy — for example when we add a feature or a new sub-processor. The “last updated” date at the top always reflects the current version. If a change materially affects how we process your data, we will notify you by email before it takes effect.

16. Contact

For any question about this policy, or to exercise any of your rights, write to:

privacy@geopocketapp.com