GeoLens Privacy Policy

• Camera — to capture the photos you take with the back or front camera (a selfie showing you on site). Photos, including any faces in them, are processed entirely on your device and never uploaded.
• Precise location — to stamp coordinates, altitude, heading, and address onto your photos and into their EXIF metadata. Location is read only while GeoLens is open on screen, never in the background, and is never transmitted to us.
• Photo library (add-only) — to save your stamped photos. GeoLens can't see your photo library. It only gets a photo you pick as your logo.
• Weather (Apple Weather) — your capture coordinates are sent to Apple's WeatherKit service to fetch current conditions, subject to Apple's privacy policy.
• Maps (Apple Maps) — capture coordinates are used with Apple's MapKit to render the map tile on your stamp and reverse-geocode the address, subject to Apple's privacy policy.
• Sign in with Apple (optional) — used solely to fill in your name for the "By:" line on stamps; you can type it yourself instead. GeoLens reads only your name, never your email or Apple ID, and stores it on your device only.

Nothing. GeoLens has no servers, no analytics, no advertising, and no trackers. Your photos, location history, site labels, and name are stored on your device — and, for the free-tier capture counter, in your personal iCloud under your Apple ID, which is inaccessible to us.

• Stamped photos are written with iOS Complete Protection, meaning they are encrypted and unreadable while your device is locked.
• The gallery's metadata database uses iOS Complete Unless Open protection: it is encrypted at rest, and stays readable while locked only if GeoLens already has it open.
• Your name and your attested site (its label and coordinates) are kept in the iOS Keychain, restricted to this device. They are also stamped onto each photo you take and written into its metadata, so they travel with your photos, including in backups.

If you use iCloud Backup or back your device up to a computer, GeoLens's on-device data — your in-app capture gallery and its metadata — is included in that backup, like any other app's data. Those backups belong to you and are protected by your Apple ID and your backup encryption settings. We have no access to them.

If you prefer GeoLens data not to be backed up at all, go to Settings → [your name] → iCloud → Storage (or Manage Account Storage) → Backups, choose this iPhone, and turn GeoLens off.

Stamped photos you save to your photo library are covered by your Photos backup settings, not by GeoLens.

Purchases are processed by Apple. We never see your payment details. Subscription entitlements are verified on-device through StoreKit.

Settings → Delete All Data erases every capture and its metadata, your name, your attested site, your stamp design and logo, and your gallery names from the device. On iOS 18 and later the capture database is destroyed rather than emptied, so deleted captures can't be recovered from it or from later backups; on iOS 17 it is emptied instead. Photos you saved to your photo library, the free-tier capture counter, and your subscription are not affected.

Uninstalling GeoLens removes your captures and settings, but iOS keeps Keychain items — your name and attested site — on the device after an uninstall. Use Delete All Data first if you want those gone too.

Questions about this policy: preet2020@icloud.com