Privacy Policy

1. Who we are and scope

This policy explains how GeoClick (geoclick.app) collects, uses, shares and protects personal data of visitors, signed-in users and content creators. GeoClick is the controller of the data processed on the platform.

2. Data we collect

Account: name, email, profile picture (when you sign in with Google), language, distance unit and your declared year of birth (only to confirm the minimum age).
Creator profile: @handle, display name, bio, photo, niches, languages, type of work and the privacy settings you choose.
Creator location: only the city of each stop (or just the region/country, if the creator prefers) and a low-resolution H3 geographic cell (about 250 km² or larger). We never store GPS coordinates: when a creator uses assisted check-in, the position is converted to a cell inside the browser and discarded before anything is sent.
Content: blog posts, uploaded images (with EXIF/GPS metadata removed and checked on the server) and public places (businesses) linked to stops.
User activity: creators you follow, email alert preferences, saved places, notes and visited marks, blocks and reports.
Founding program sign-ups: name, email, type, @handle, platform link, city entered, where we met, notes, language and consent date.
Product analytics: usage events (for example, opening a city or saving a place) tied to a random session identifier kept in the browser's sessionStorage. We do not collect visitors' location or use advertising cookies.

3. Purposes and legal bases

Providing the service (account, profile, globe, following, saving places): performance of a contract (GDPR art. 6(1)(b); LGPD art. 7, V).
Showing the creator's location at the level and with the delay they chose: explicit, granular consent that can be withdrawn at any time in the Studio (GDPR art. 6(1)(a); LGPD art. 7, I).
Email alerts about followed creators: consent (opt-in, off by default).
Founding program: consent given in the form.
Security, fraud prevention, moderation and aggregated analytics to improve the product: legitimate interests, with data minimisation (GDPR art. 6(1)(f); LGPD art. 7, IX).
Complying with legal obligations and requests from authorities: legal obligation.

4. Location minimisation

Creator safety is a core product principle. By default, location is shown only at city level and with a 24-hour delay; creators can increase the delay, reduce precision to region or country, hide periods, turn on invisible mode and show places only after leaving a city. These filters run on the server, so not even our own website receives data before the delay ends. Private accommodation is never shown. Learn more in the Location safety guide.

5. YouTube data

When a creator connects or enters a YouTube channel, GeoClick uses the YouTube API Services (or the channel's public feed) to show public videos and channel information on the public profile, respecting the chosen privacy delay. We do not access private account data.

By using this feature, creators agree to the YouTube Terms of Service, and data is also handled under the Google Privacy Policy. Access can be revoked at any time in the Google Account security settings or by disconnecting the channel in the Studio; when disconnected, we delete the data imported from YouTube. API data is refreshed periodically and is not kept for more than 30 days without being refreshed.

6. Instagram data

When a creator connects a professional Instagram account, we use the official API only to show the account's recent posts (image, short caption, link and date) on the public GeoClick profile, with the privacy delay set by the creator. We do not import stories or post locations, and we never publish on the creator's behalf. The access token is stored encrypted and is never exported.

When you disconnect the account in the Studio or remove the app in Instagram's settings, we delete the token, the account and the imported content. You can also request deletion on the data deletion page. Use of Instagram follows the Meta Platform Terms.

7. Who we share data with

We do not sell personal data. We share it only with processors needed to run the service, under contract: Convex (database, functions and file storage), Cloudflare (hosting and delivery), Google (Google sign-in and YouTube API), Meta (Instagram API, when connected) and our own email server (login codes, confirmations and alerts). Maps use OpenFreeMap with OpenStreetMap data, without sending your location. GeoClick's own ads (sponsored pins, cards and banners) are contextual, by city or region: advertisers only get aggregate numbers (impressions, clicks and saves), never data about who saw them. On creator profile pages, when there is no own ad, a Google AdSense block (Google Ireland Limited / Google LLC) may appear, which follows Google's privacy policy.

Information on a creator's public profile (name, bio, city at the chosen level, posts and public places) is visible to anyone by design.

8. International transfers

Some processors handle data outside your country (for example, in the United States). In those cases we rely on appropriate safeguards such as the European Commission's standard contractual clauses and the mechanisms in art. 33 of the LGPD.

9. How long we keep data

Account and profile data: for as long as the account exists. When you delete it, we cascade-delete your profile, stops, posts, images, connected networks, tokens, follows, saved places, sign-ups, pending emails and login sessions.
Content imported from YouTube/Instagram: while the account stays connected; deleted on disconnect.
Email login codes: expire after 15 minutes.
Analytics events: used in aggregate; no longer linked to your account after deletion.
Reports you filed: kept for moderation purposes but unlinked from your account when it is deleted.

10. Your rights

At any time you can confirm and access your data, correct it, request portability, withdraw consent, object to processing based on legitimate interests and request erasure. Export (JSON file) and permanent account deletion are self-service in Settings. For other requests, write to privacy@geoclick.app; we reply within 30 days (GDPR) or 15 days (LGPD).

You may also lodge a complaint with a data protection authority: your national supervisory authority in the EU or the ANPD in Brazil.

11. Minimum age

GeoClick is intended for people aged 16 or over; creators must be 18 or over. We ask for your year of birth on first sign-in and end the session of anyone who declares being under 16. Profiles suspected of belonging to minors can be reported and are removed.

12. Security

We use encrypted connections (HTTPS), encrypted integration tokens, session-based access control on every server function and image metadata removal. No system is fully immune; in the event of a relevant incident we will notify affected people and authorities as required by law.

13. Cookies and local storage

We use essential storage (language, login session and analytics session identifier). On creator profile pages, the Google AdSense block, when shown, may use Google cookies, subject to the consent Google requests in its own message where the law requires it. Details in the Cookie Policy.

14. Changes

We may update this policy. Significant changes will be announced on the site or by email before they take effect. See also the Terms of Use.