Last updated: 26 April 2026
Account information (name, email address, profile photo) — collected when you sign in via Google or Apple.
Location and GPS track — collected during an active trip to record your route and show you nearby content.
Messages and photos — collected when you drop a message on the map.
Territory polygons — collected when you claim a territory by walking its boundary.
Animal interactions — collected when you feed or engage with a virtual animal.
Activity data (achievements, streaks, check-ins) — collected as you use the app.
Push notification token — collected when you grant notification permission.
Under the General Data Protection Regulation (GDPR), we process your data on the following legal bases:
Performance of contract (Art. 6(1)(b)) — providing the core service: recording trips, placing and discovering messages, managing territories and animals.
Legitimate interest (Art. 6(1)(f)) — preventing abuse and maintaining the security and integrity of the platform.
Consent (Art. 6(1)(a)) — sending push notifications. You can withdraw consent at any time in your device settings.
Account data — retained until you delete your account.
Trip routes and messages — retained until you delete them individually or delete your account.
Territory and animal data — retained until you delete your account.
Push notification token — cleared on logout.
Server logs — retained for 30 days, then automatically deleted.
Mapbox — used to render map tiles. Your location is not sent to Mapbox; only map tile requests (bounding boxes) are made.
Google / Apple — used for authentication only. We receive your name, email, and profile photo from the authentication provider on first sign-in.
Push notification infrastructure — Apple Push Notification Service (APNs) or Firebase Cloud Messaging (FCM) may be used to deliver notifications. Only your push token is shared — never personal data.
We do not sell your data. We do not share it with advertisers.
If you are in the European Economic Area, you have the following rights:
Access — request a copy of the data we hold about you.
Rectification — ask us to correct inaccurate data.
Erasure — ask us to delete your account and all associated data.
Portability — request your data in a machine-readable format.
Restriction — ask us to stop processing your data while a dispute is resolved.
Objection — object to processing based on legitimate interest.
To exercise any of these rights, email support@geomessage.drev.land. We will respond within 30 days.