Geolingo is a geography game made by Lowside Labs, Inc., a Delaware C Corporation in the United States. This policy covers the Geolingo iOS app and the geolingo.app website. It describes what we collect, why we collect it, who else sees it, and how to get rid of it. Lowside Labs is the data controller.
The short version: you can play without an account, we do not run ads, we have no analytics or tracking SDKs in the app, and we do not sell your data.
Playing Without an Account
Geolingo does not ask you to sign in to play. If you never create an account, your progress — answers, scores, streak, and which countries you have learned — is stored only on your device and is not sent to us. Deleting the app deletes that data.
Information We Collect
Account information. If you create an account, we store your email address and display name. How we get them depends on how you sign in:
- Sign in with Apple. Apple sends us your name and email address. If you choose "Hide My Email", we only ever receive Apple's private relay address, and that is fine — the app works exactly the same.
- Sign in with Google. We request only the basic profile scopes (
email,profile, andopenid), which give us your name, email address, and profile picture. We do not request or receive access to your Gmail, Drive, contacts, or any other Google data. - Email and password. We store your email address and a hashed password. We never store your password in readable form.
Gameplay progress. Once you have an account, we sync your progress so it survives a lost or replaced phone. That is your XP total, daily streak, per-game best scores, which journey stops you have completed, and a per-country strength score used to schedule reviews. These are numbers and country codes attached to your account. We do not record anything you type.
Your starting country. During onboarding you pick a country to start from. That is a choice you make, not a location reading.
Approximate location from your IP address. To suggest a starting country, the app makes one request to ipapi.co, which reads the IP address of that request and returns the country it maps to. We never ask for the iOS location permission, we do not read GPS, and neither we nor ipapi.co receive anything more precise than a country. If the request fails, the app just suggests a default. You can pick any country you like regardless.
Purchase status. If you subscribe to Geolingo Pro, Apple processes the payment and tells our billing provider whether your subscription is active. We receive that status. We never receive your card number, billing address, or any other payment details.
Sign-in sessions. When you are signed in, we keep a session record containing the IP address and device or browser type the session started from. This is how we keep you logged in and how we spot suspicious sign-ins. Sessions expire on their own and are deleted with your account.
Server logs. Our backend and web host keep standard request logs, which include IP addresses, for security and debugging.
What We Do Not Collect
- No advertising identifiers. The app does not use the IDFA and never shows the App Tracking Transparency prompt, because we do not track you across other companies' apps or websites.
- No analytics or crash-reporting SDKs. There is no PostHog, Firebase, Sentry, Amplitude, or similar library in the app.
- No advertising. We do not sell ad space and we do not share data with ad networks.
- No contacts, photos, camera, microphone, or precise location access. The app requests none of these permissions.
How We Use Information
We use what we collect only to:
- Save your progress and sync it across your devices;
- Decide which questions to show you next and when to review them;
- Sign you in and keep your account secure;
- Unlock Geolingo Pro features if you subscribe;
- Send you account and support messages you have asked for; and
- Fix bugs, prevent abuse, and keep the service running.
We do not use your data to build advertising profiles, and we do not make automated decisions about you that have legal effects.
Who We Share It With
We do not sell your personal information. We share it only with the providers that run the service on our behalf. Each is bound by contract to protect it at least as well as this policy requires, and to use it only to provide their service to us:
- Convex — hosts our database and backend, so it stores your account record and progress.
- Cloudflare — serves the website and routes traffic.
- RevenueCat — manages subscription status on our behalf, receiving your account identifier and whether your subscription is active.
- Apple and Google — process sign-in when you choose those options, and Apple processes subscription payments.
- ipapi.co — receives the IP address of the one country-suggestion request described above and returns a country code.
We may also disclose information if the law requires it or in response to valid legal process, and if Geolingo is ever part of a merger or sale, in which case we will say so here before your information moves.
How Long We Keep It
We keep your account and progress for as long as your account exists. When you delete your account, we delete your account record and the progress attached to it. Server logs roll off on their providers' normal retention schedules. Backups are overwritten in the ordinary course, so deleted data can persist in a backup for a short period before it is gone.
Deleting Your Account and Data
You can delete your account from inside the app: open the Passport tab, scroll to the account section, and choose Delete account. This removes your account and its synced progress from our servers, and clears the copy cached on your device. It cannot be undone.
Deleting your account does not cancel an active subscription — Apple manages that. Cancel it in iOS Settings → your name → Subscriptions.
If you would rather we did it, or you have lost access to the app, email info@lowsidelabs.com from the address on your account and we will delete it.
Your Rights
Depending on where you live — including under the GDPR in the UK and EEA and the CCPA in California — you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. Californians also have the right not to be discriminated against for exercising these rights; since we do not sell or share personal information for cross-context behavioural advertising, there is nothing to opt out of.
To exercise any of these, email info@lowsidelabs.com. We respond within 30 days. If you are in the EEA or UK and think we have got it wrong, you can complain to your local data protection authority.
Where the GDPR applies, we rely on these legal bases: performing our contract with you (running your account and saving your progress); your consent (optional things you switch on); and our legitimate interests in keeping the service secure and working.
Where Your Data Is Stored
Our providers operate in the United States, so your information is processed there. If you are in the EEA or UK, we rely on the European Commission's Standard Contractual Clauses with those providers to cover the transfer.
Security
Traffic is encrypted in transit with TLS. Passwords are hashed. Access to production data is limited to those who need it. No system is perfectly secure, so we cannot promise absolute security, but if a breach affects your data we will notify you and the relevant regulators as the law requires.
Children
Geolingo is safe for children to play: there is no chat, no user-generated content, no ads, and nothing another player can send you. Children can play the whole game without an account, and in that case no personal information reaches us at all.
Creating an account requires an email address, so we ask that accounts be created by someone 13 or older, or by a parent or guardian. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe a child under 13 has created an account, email info@lowsidelabs.com and we will delete it promptly.
Changes to This Policy
If we change this policy we will update the "Last updated" date above. If the change materially affects how we handle your information, we will tell you in the app or by email before it takes effect.
Contact Us
For questions about this policy or your data, email info@lowsidelabs.com. See also our Terms of Service and Support page.
Lowside Labs, Inc.
Registered office: c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States