Privacy

In short: GeoLicious has no servers of its own and no account. Your places and stays live on your device and in your private iCloud – the developer never gets to see them.

Last updated: October 2026. The German version is the legally binding one.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) for the GeoLicious app and this website is:

Daniel Bleisteiner
c/o POSTFLEX PFX-463-783
Emsdettener Straße 10
48268 Greven
Germany
Email: support@geolicious.app

There is no data protection officer; none is required by law.

The app

No data with the developer

GeoLicious runs no servers of its own, requires no sign-up, and contains no advertising, no analytics or crash-reporting libraries and no trackers. Nothing you record in the app is sent to the developer or to any other third party. That is why its App Store privacy label reads “Data Not Collected”.

Whatever leaves the device, as described below, goes to Apple only – through services built into iOS that you already use with your Apple Account.

Location

Your location is evaluated on your device only: to suggest places nearby, to show the map, and – if you turn it on – to notice when you enter or leave one of your places. Automatic check-in needs “Always” location access, because iOS will not deliver those events in the background otherwise. You can change location access at any time in the iOS Settings under “Privacy & Security” → “Location Services”.

Only the places you create or import and your stays there are stored – there is no continuous record of where you go.

Syncing through iCloud

So that iPhone and iPad show the same data, GeoLicious stores places, stays and notes in the private CloudKit database of your own iCloud account. That data is accessible only with your Apple Account; the developer has no access to it. With iCloud turned off for GeoLicious, the data stays on the device alone.

When you move over from GeoLicious 1, the app also reads the old database that the first version kept on the device or in iCloud Drive and carries it over into the new one.

Processing in iCloud is governed by Apple’s terms and Privacy Policy; for users in the EU, the responsible entity is Apple Distribution International Ltd., Ireland.

Maps, search and addresses

The map, place search and address lookup use Apple Maps (MapKit). For that, the map area being shown, your search terms and – when you create a place – its coordinates are sent to Apple so that Apple can return map data, search results and addresses. Apple states that it does not associate these requests with your Apple Account. Your saved places are not transmitted in the process.

Buying Unlimited

The purchase is handled entirely by the App Store. Apple processes payment and account details; the developer receives only aggregated sales figures from Apple, nothing that identifies you personally. Through StoreKit, the app merely checks whether the purchase belongs to your Apple Account.

Notifications and widgets

Check-in and check-out alerts are local notifications created on the device itself; there is no push service run by the developer. Widgets read their data from a storage area shared only by GeoLicious and its widgets on the same device.

Export and import

GPX and JSON backups are created on your device. Where they go from there – the Files app, AirDrop, email – is up to you. Imported files, including an Arc Timeline export, are likewise read on the device only.

This website

Hosting and server logs

This website is hosted by [name and address of the hosting provider]. With every request, the web server processes technically necessary information: your IP address, date and time, the address requested, the amount of data transferred, the page you came from, and the browser, operating system and preferred language your browser sends.

This serves to deliver the site, keep it secure and detect misuse (legitimate interest under Art. 6(1)(f) GDPR). The logs are not combined with other data and are deleted after [number] days.

A data processing agreement under Art. 28 GDPR is in place with the hosting provider.

No cookies, no trackers

This site sets no cookies, stores nothing in your browser and embeds no third-party services – no analytics, no fonts, scripts or videos from other servers. Your browser’s preferred language is only used to send you to the German or English version.

Links to other services

Links to the App Store or to Mastodon lead to services run by others. Data is sent to them only once you follow such a link; their privacy policies apply there.

Contact by email

When you write, I process your email address, your name if you give it, and the content of your message in order to reply (Art. 6(1)(b) GDPR, otherwise (f)). If you write from within the app via “Contact by Email”, the message comes pre-filled with the device model, iOS version and app version, because that almost always helps with questions about automatic check-in. You can see these details before sending and remove them.

Messages are deleted once the matter is settled, unless statutory retention obligations apply.

Your rights

You have the right to

• access the data stored about you (Art. 15 GDPR),
• rectification (Art. 16) and erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interest (Art. 21).

An email to support@geolicious.app is all it takes. You can manage the data in your iCloud yourself: in the app under “Settings” → “Database” → “Import and Export” → “Delete All Data”, or in the iOS Settings under your name → “iCloud”.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for the controller is the Berlin Commissioner for Data Protection and Freedom of Information.

Changes

If anything changes about how the app or the website handles data, this page will be updated. The version published here applies.