How it works Try a lens The library Explore Get started FAQ Download on the App Store →

LEGAL

Privacy.

What the app and this website collect, who we share it with, and the choices you have. Last updated 2026-10-19.

Summary

Geography is a single-purpose iOS app made by SupportU LLC. Your progress (which lenses you've read, your practice history, your starting region) lives in a local database on your device. To run the subscription and improve the app, we keep a random account ID on our servers, along with records of how the app is used, such as finishing a practice session. To measure which of our marketing brings people to the app, we use an attribution service, Singular, which can share a few milestones with the ad networks we advertise on. We never sell your data, and ad networks never receive what you read or your answers.

What we collect

In the app, we collect:

  • A random account ID. Created automatically the first time you set up the app, before you choose a plan, so your subscription can be restored. It is not tied to your name or email unless you sign in with Apple.
  • Sign in with Apple (optional). If you sign in, we receive your name and the email or private relay address Apple shares, and we store the token Apple issues so you can revoke access later.
  • Subscription state. Via RevenueCat and the App Store: which plan you are on, trials, renewals and cancellations.
  • Usage events. Records of what happens in the app, linked to your account ID: for example, that you opened the app, moved through setup, viewed the subscription screen, started or finished a practice session (with counts and duration), or answered a map question (the country asked, whether the answer was right, and how far off it was). We use these to understand what works and to fix what doesn't.
  • Crash and performance reports. Through Sentry and Expo, with your account ID and device details such as model and OS version, so we can find and fix bugs. Apple's own diagnostics apply too if you share them in iOS Settings.
  • Notification settings. If you allow notifications, we store your device's push token, its model and name, your time zone, your reminder time and quiet hours, and which kinds of notifications you want. Offers (occasional discounts) are on by default and can be turned off in Settings at any time.
  • Things you type to us. Feedback, feature suggestions, and the optional comment in the cancellation survey.
  • School name and country, if you claim the student plan. Entered by you on the student page and stored with your subscription record, so we can confirm eligibility if we ever need to.
  • Content updates. When new lenses are published, the app fetches them from our content server (hosted on Supabase).

What we don't

This list is about the app. The marketing website is a separate matter and is covered under Cookies and this website.

  • No selling or renting of personal data, ever.
  • No advertising inside the app, and no advertising SDKs from Meta, TikTok or Google running in it.
  • No sharing of your reading or your answers with advertisers.
  • No location data. The app never asks for location permission.
  • No contacts, camera or microphone access. Photos access is add-only, used only when you save a share card.
  • No push notifications unless you allow them in iOS.

Advertising and attribution

We advertise Geography on networks such as Meta (Facebook and Instagram), TikTok, Reddit, Google and Apple Search Ads. To know which ads and links bring people to the app, the app includes Singular, an attribution service.

  • What Singular receives. Your account ID, a device identifier Apple gives each app maker (IDFV), basic device details, your IP address, and the usage events described above.
  • The advertising identifier (IDFA). Shared only if you tap Allow when iOS asks whether Geography may track you. If you choose not to allow it, Singular measures through Apple's privacy-preserving SKAdNetwork instead, which reports campaign results without identifying you.
  • What ad networks receive. Through Singular, a few milestones: that the app was installed and opened, that the subscription screen was viewed, that a checkout or a free trial started, and that a subscription began, with its price. These are sent with the device identifiers above, and the IDFA only if you allowed tracking. They help the networks report on and improve our ads. Ad networks never receive your usage events beyond those milestones, what you read, or your answers.
  • Apple Search Ads. Apple tells RevenueCat whether you came from a Search Ads campaign, through Apple's own attribution system.
  • Links to the app. If you arrive through one of our links (for example from our website or a social post), Singular passes the link's channel and campaign, plus a random visit ID from our website, to the app, so we can tell which channels work.

You can change your tracking choice at any time in iOS Settings, Privacy and Security, Tracking.

Third parties we rely on

Each provider receives only what it needs for the purpose listed.

  • Apple. App distribution, in-app purchase, Sign in with Apple, push delivery, Apple Search Ads attribution. Governed by Apple's privacy policy.
  • RevenueCat. Subscription records and receipts, for both App Store and web purchases. Receives your account ID, the subscription receipt, device identifiers (and the IDFA if you allowed tracking), the campaign you came from, and the email address on a web purchase so it can send you a receipt.
  • Stripe. Payment processing for web purchases of the student plan, through RevenueCat Web Billing. Stripe receives your card details and billing address; we never see or store them. Governed by Stripe's privacy policy.
  • Supabase. Our database and server. Holds your account ID, usage events, notification settings, feedback, subscription status, Sign in with Apple details if you use it, and the website measurement events described in Cookies and this website. Also serves lens content.
  • Singular. Install attribution and marketing measurement, as described in Advertising and attribution. On this website, it receives taps on Download buttons as described in Cookies and this website.
  • Meta, TikTok, Reddit and Google. Ad networks. Receive the milestones listed under Advertising and attribution, through Singular.
  • Sentry. Crash and performance reports, with your account ID.
  • Expo (EAS). Build and update service. Receives app launch and performance metrics (app version, OS version, device model) so we can see that updates work.
  • Microsoft. Website only, and only if you agree to it. Session replays and heatmaps for playgeography.app via Microsoft Clarity. Receives no data from the app. See Cookies and this website.

On your device

Your progress, practice history and settings are stored in a local database on your iPhone. They are included in your device backups (iCloud or computer) under Apple's control, and we cannot read them there. Deleting the app deletes them from the device.

Cookies and this website

This section is about the marketing website (playgeography.app) only. Nothing described here happens inside the iOS app, which carries none of it.

The website runs two things. The first is a small measurement script we wrote and host ourselves. It records which pages are opened, how far they are read, which links are tapped, and where a visit came from (a search engine, a social app, or a tag on the link you followed), and sends that to our own server, which stores it with our database provider, Supabase. We use it to tell which pages are useful and which ones lead people to the app. It sets no cookies. It keeps a random visitor number and session number in this browser's local storage so a visit is counted once; if your browser sends a Global Privacy Control or Do Not Track signal, it stores nothing and uses a fresh number on every page. It never records anything you type, and we do not use it to identify you.

The second is Microsoft Clarity, which records anonymized session replays and heatmaps: the movement of your cursor, your clicks, and how far down a page you scrolled, played back over a copy of the page as it appeared to you. We use it to find the places where this site confuses people. Every word it can capture on these pages is text we published ourselves, and there is nothing on this website to type into: no forms, no search box, no account, no login.

We ask before we switch it on. Until you answer, Clarity runs in a restricted mode: it sets no cookies and cannot connect one page view to the next, so each page you open is unrelated to the last. If you agree, it sets two first-party cookies (_clck, which lasts a year, and _clsk, which lasts a day) so a visit holds together as one session, and Microsoft sets a handful of its own cookies on its domains (MUID, CLID, SM, MR and ANONCHK) which it uses across its services, including advertising. If you decline, it stays in the restricted mode and any cookies it already set are deleted. If your browser sends a Global Privacy Control or Do Not Track signal we treat that as a decline and never ask, which is stricter than Clarity's own behavior: it honours Global Privacy Control but not Do Not Track.

Your answer is stored in this browser's local storage, not in a cookie, and it is never sent to us. Session recording is not running in this browser.

Being straight with you about what this means: data captured by Clarity goes to Microsoft, and Microsoft is not merely storing it on our behalf. It acts as a data controller in its own right, and its terms let it use the data for its own purposes, which include improving its products and building user profiles for advertising. That is governed by Microsoft's privacy statement rather than by this one. It is the reason this sits behind a question instead of being switched on by default, and the reason we would rather you said no than said yes without reading this paragraph. Microsoft keeps session recordings for 30 days, and a sampled subset for up to nine months.

Download buttons. When you tap a button that takes you to the App Store, the link may pass briefly through Singular (supportu.sng.link), the attribution service we use to learn which pages and channels lead to installs. Singular receives the tap itself, with the network address and device details any website receives, plus the page you tapped on, the channel your visit came from, and the random visitor and click numbers described above. If you then install the app, Singular uses those to connect the install to the tap. That is governed by Singular's privacy policy. The banner Safari may show at the top of these pages offering the app is Apple's own feature; it runs in Safari, not in our code.

Beyond these, the only network requests your browser makes are for the page itself, the fonts (self-hosted on this domain), and the app icon. We run no advertising pixels, no retargeting tags, and no data broker of any kind, and we do not sell or rent anything about your visit to anyone.

Your rights

  • Access. Email geography@supportu.ai and we'll send you what we hold for your account ID within 30 days.
  • Deletion. Email us and we'll delete your account, its usage events and your subscription record from RevenueCat within 30 days. Deleting the app removes the data on your device. We will also ask Singular to delete what it holds for you.
  • Tracking. Change your choice any time in iOS Settings, Privacy and Security, Tracking.
  • Notifications and offers. Turn them off in the app's Settings, or in iOS Settings.
  • Residents of California (CCPA/CPRA) and the EU/UK (GDPR) have these rights plus the right to know who we've shared data with. That is the list under Third parties above, and nobody else. To opt out of sharing with ad networks, choose Ask App Not to Track, or email us.

Children

Geography is rated 9+ on the App Store. We do not knowingly collect data from children under 13. If you believe a child has provided us information, email geography@supportu.ai and we will delete it.

Contact

Questions, requests, or concerns: geography@supportu.ai. We answer every message, usually within a couple of days.

SupportU LLC · 1942 Broadway, Suite 314C, Boulder, CO 80302, USA · Effective 2026-10-19