GeoTraders App — Privacy Policy

Last updated: April 12, 2026

Adam Sawicki ("we", "us", or "our") operates the GeoTraders mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the App.

By using the App, you agree to the collection and use of information as described in this policy.

1. Data Controller

The data controller responsible for your personal data is:

Adam Sawicki
Email: [email protected]

We have not appointed a Data Protection Officer, as we are a small-scale operator not required to do so under Article 37 of the GDPR. For any data protection inquiries, please contact us at the email address above.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

2.2 Profile Information

You may optionally provide:

2.3 Location Data

The App collects your precise GPS location while the App is in use. Location data is essential to the core gameplay and is used to:

Your last known location is stored on our servers to provide relevant content when you reopen the App.

2.4 Photos and Images

You may upload photos from your camera or photo library when:

Photos are uploaded to our servers and may be visible to other users.

2.5 User-Generated Content

We collect content you create within the App, including:

2.6 Device and Technical Information

We automatically collect:

2.7 Usage Data

We collect records of your in-app activity, including items created, hidden, claimed, and commented on. This data is used to provide gameplay features such as the activity feed, statistics, and level progression.

3. How We Use Your Information

We use the information we collect to:

4. Legal Basis for Processing (GDPR Article 6)

Under the General Data Protection Regulation, we process your personal data on the following legal bases:

Data Legal Basis Explanation
Account information (email, display name) Contract performance (Art. 6(1)(b)) Necessary to create and maintain your account and provide the service
Location data Contract performance (Art. 6(1)(b)) Essential for core gameplay features — the App cannot function without it
Photos and user-generated content Contract performance (Art. 6(1)(b)) Necessary to provide gameplay features (hiding/claiming items, comments)
Profile information (bio, avatar) Consent (Art. 6(1)(a)) Optional — you choose to provide this information
Device token (push notifications) Consent (Art. 6(1)(a)) Only collected if you enable push notifications
Device platform, timezone, language Legitimate interest (Art. 6(1)(f)) To display the App in your language and local time — minimal data with clear user benefit
Usage data (activity, statistics) Contract performance (Art. 6(1)(b)) Necessary to provide gameplay features (feed, levels, statistics)
Moderation and reporting data Legitimate interest (Art. 6(1)(f)) To maintain a safe environment and enforce our Terms of Use

Where we rely on consent, you may withdraw it at any time by adjusting your settings in the App or contacting us. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Where we rely on legitimate interest, we have assessed that our interests do not override your fundamental rights and freedoms, considering the minimal nature of the data involved and the direct benefit to your experience.

5. How We Share Your Information

We do not sell your personal data to third parties.

Your information is shared in the following limited circumstances:

5.1 With Other Users

As part of normal gameplay, the following is visible to other users:

Your precise location and email address are not directly visible to other users.

5.2 With Service Providers

We use the following third-party services to operate the App:

Service Provider Purpose Data Processed
Authentication Google Firebase (Google LLC) User sign-in and account management Email, authentication tokens
Push Notifications Firebase Cloud Messaging (Google LLC) Delivering notifications Device tokens
Database Neon (Neon Inc.) Storing user and gameplay data All account and gameplay data
Application Hosting Railway (Railway Corp.) Running our backend server All data transmitted via API
Image Storage Cloudflare R2 (Cloudflare Inc.) Storing uploaded images Photos uploaded by users
Map Tiles OpenStreetMap Foundation Displaying map tiles Your IP address (via tile requests)

These providers process data on our behalf and are subject to their own privacy policies.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests by public authorities.

6. Data Storage and Security

While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure.

7. International Data Transfers

Our database and application server are located in the European Union. However, some of our third-party service providers process data outside the EU/EEA:

Where personal data is transferred outside the EU/EEA, we ensure that appropriate safeguards are in place as required by GDPR Chapter V, including Standard Contractual Clauses approved by the European Commission.

8. Data Retention

We retain your personal data for the following periods:

Data Retention Period
Account information (email, display name) Until account deletion
Profile information (bio, avatar) Until account deletion or removal by you
Location data (last known position) Overwritten on each update; deleted on account deletion
Photos (items, hides, claims, comments) Until account deletion
User-generated content (descriptions, comments) Until account deletion
Device token Until you disable notifications or delete your account
Usage data (activity, statistics) Until account deletion; may be retained in anonymized form

If you request account deletion (see Section 10.2), we will delete your personal data within 30 days, except where we are required by law to retain it.

Gameplay data (such as items you hid or claimed) may be retained in anonymized form after account deletion to preserve the integrity of the game for other players.

8.1 Is Providing Data Required?

Providing account information (email) and location data is required to use the App — without it, we cannot create your account or provide gameplay features. Profile information (bio, avatar) and push notification consent are optional and do not affect your ability to use the App's core features.

9. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the email below, and we will take steps to delete that information.

10. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days, free of charge. If your request is complex or we receive a high volume of requests, we may extend this period by up to two additional months, and will inform you of the extension within the initial 30-day period.

10.1 Right to Lodge a Complaint

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. In Poland, the competent authority is:

Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warszawa
Website: uodo.gov.pl

You may also lodge a complaint with the supervisory authority in your EU/EEA country of residence.

10.2 Account Deletion

You can request deletion of your account by contacting us at [email protected]. Upon deletion:

11. Push Notifications

We use Firebase Cloud Messaging to send push notifications. You can control which notifications you receive in the App's settings, or disable them entirely through your device settings.

12. Map and Location Services

The App uses map tiles provided by the OpenStreetMap Foundation. When map tiles are loaded, your device's IP address is transmitted to OpenStreetMap's tile servers. This is governed by the OpenStreetMap Privacy Policy.

You can revoke location permissions at any time through your device settings. Note that the App requires location access for core gameplay features, and disabling location will limit functionality.

13. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. Content moderation decisions are made by a human.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the App or by other appropriate means. The "Last updated" date at the top of this policy indicates when it was last revised.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact:

Adam Sawicki
Email: [email protected]