Privacy Policy

1. Who is responsible

The controller within the meaning of the EU General Data Protection Regulation (GDPR) for the GeoStamp app and this website is:

2. In short

• The app collects no data. No account, no analytics, no advertising, no tracking. In the App Store this is declared as “Data Not Collected”, and on Google Play as “No data collected”.
• Your photos are processed on your device and are never uploaded to us.
• To show a place name and a mini map, the app sends a photo’s GPS coordinates to a map service: Apple Maps on iPhone, iPad and Mac, Google’s geocoder and Esri map tiles on Android.
• This website uses no cookies, no analytics and no third-party content. Fonts are served from this server.

3. The GeoStamp app

3.1 Photos

You choose which photos GeoStamp may open, using Apple’s system photo picker or by dragging files in on the Mac. GeoStamp reads the image and the metadata stored in it (such as capture date and time, GPS coordinates, altitude, direction, camera, lens and exposure) solely to draw the stamp. All of this happens on your device. When you save to the Photos library, the app asks for permission to add photos only; it cannot read your library through that permission. Exported copies keep the original metadata of the photo, including its location, so you decide where they go.

3.2 Location

GeoStamp does not access your device’s current location. Location information comes only from the photos you choose.

3.3 Place names and map images (Apple Maps)

If a photo contains GPS coordinates and the stamp shows a place name or a map, the app sends those coordinates to Apple’s map service (MapKit) to look up the place name and to render a small map image. The request is made directly from your device to Apple; we receive nothing. Apple processes these requests under its own responsibility and privacy policy (apple.com/legal/privacy). Legal basis: Art. 6(1)(b) GDPR, because you request the feature, and Art. 6(1)(f) GDPR (our legitimate interest in providing it). If you are offline, or you switch place name and map off, no such request is made.

3.4 In-app purchase

The optional purchase that removes the “Created with GeoStamp” badge is processed entirely by Apple through the App Store. We do not receive your name, payment details or Apple Account. The app only checks on the device whether the purchase exists. Apple provides us with aggregated, non-personal sales reports.

3.5 Templates and settings

Your templates and preferences are stored only on your device. They may be included in your device backups, which Apple handles according to your iCloud settings.

3.6 Crash reports

The app contains no analytics or crash reporting tools. If you have chosen in your device settings to share analytics with app developers, Apple may provide us with anonymised crash reports and usage statistics. You can change this at any time under Settings › Privacy & Security › Analytics & Improvements.

3.7 GeoStamp for Android

The Android app works the same way, with these differences:

• Photos: you pick photos with the system file picker. To keep the location stored in a photo, Android requires the permission “Access media location” (ACCESS_MEDIA_LOCATION), which the app asks for once. It is used only to read the GPS data of the photos you pick. Stamped copies are saved to Pictures/GeoStamp.
• Place names: the app uses Android’s built-in geocoding service. On most devices this is provided by Google, so the photo’s coordinates are sent to Google (for users in the EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) under Google’s privacy policy (policies.google.com/privacy).
• Map images: map tiles are loaded from Esri’s ArcGIS servers (Esri Inc., 380 New York Street, Redlands, CA 92373, USA). Each request contains the tile position, which reveals the approximate area of the photo, and like any web request your IP address. Esri’s privacy statement: esri.com/privacy.
• In-app purchase: processed entirely by Google Play. We do not receive your name, payment details or Google account.
• Crash reports: the app contains no analytics or crash reporting tools. If you have allowed your device to share usage and diagnostics, Google may provide us with anonymised crash and performance statistics through the Google Play Console.

The legal bases are the same as in section 3.3. If you are offline, or you switch place name and map off, no such requests are made.

4. This website

4.1 Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin (privacy policy). When you open a page, the server automatically records technical data your browser sends: IP address, date and time of the request, the page requested, the referring page, the browser and operating system. This is necessary to deliver the website and to keep it secure (Art. 6(1)(f) GDPR). The data is not merged with other sources and is deleted by the host after a short period, as described in its privacy policy. We have a data processing agreement with the host under Art. 28 GDPR.

4.2 No cookies, no tracking

This website sets no cookies, uses no analytics or tracking tools and loads no content from third parties. Fonts are stored on this server, so no connection to external font services is made.

4.3 Links to the App Store and Google Play

Download links lead to Apple’s App Store and to Google Play. Only when you follow them do Apple or Google receive data from your browser, under their own privacy policies.

5. Contacting us

If you e-mail us, we process your e-mail address, your message and any details you include (for example device and system version) to answer your request (Art. 6(1)(b) GDPR for questions about the app, otherwise Art. 6(1)(f) GDPR). We delete this correspondence when it is no longer needed, unless statutory retention periods apply.

6. Recipients and transfers

We do not sell or share personal data. Apart from our hosting provider, the only recipients are the map and store providers described above: Apple for the Apple apps, Google and Esri for the Android app. For users in the EU, the App Store is operated by Apple Distribution International Ltd., Ireland, and Google Play by Google Ireland Limited. Apple, Google and Esri may process data in the United States; Apple Inc. and Google LLC are certified under the EU-U.S. Data Privacy Framework. We do not use automated decision-making or profiling. GeoStamp is suitable for all ages and does not knowingly collect data from anyone, including children.

7. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise them, write to geostamp@applikhations.com. Since the app collects no data, we usually hold nothing about you beyond any e-mails you sent us.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the one responsible for us: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.

8. Changes

We update this policy when the app or the website changes. The current version is always available at this address. Last updated: 21 October 2026.