Privacy policy

seekyoo Privacy Policy

Updated September 5, 2026. Journal entries remain on your device. The visionOS live globe connects to a network service and offers optional, city-level location sharing. The city-sharing sections apply to versions that include the live globe.

Android app — updated September 14, 2026

This section covers the seekyoo Android app published by Arcstone Group AB. It is intended for adults. The older journal and visionOS sections below describe different releases; the iPhone section is separate.

Accounts and online content

Email one-time codes, Google sign-in and an optional existing-account password sign-in use Supabase Auth. Cloudflare Turnstile performs a security check. The app stores account sessions in Android-protected local storage. Profile details you choose, private questions, saved answers, connection requests, messages, reports and moderation records may be stored with your online account. Sharing a summary, sending a request or revealing contact information each requires the relevant confirmation. AI processing follows the stated consent step; your journal is never added automatically.

Local journal and maps

The place journal is stored on your Android device by default and works offline. It is not automatically uploaded or synchronized with your online account. An export is saved only to the destination you choose and may be copied by that destination’s own sync service. Map tiles are requested from OpenFreeMap over HTTPS without your account token, question or journal. A tile request exposes ordinary network information to the tile provider; the app does not request device-location permission. A city you choose to enter or publish is separate from your device location.

Providers, deletion and contact

Supabase hosts authentication and account data; Google Cloud hosts the platform and backups. Brevo delivers verification mail. Cloudflare handles the security challenge. Separately authorized AI services may process a request you choose to send. OpenFreeMap supplies map tiles. These providers may handle network and technical records under their own policies. The app has no advertising SDK or advertising tracking. My space offers account export and deletion status; deletion may require background cleanup before completion. Delete local journal entries separately. For steps and retention details, see the online data notice. Privacy contact: Arcstone Group AB via seekyoo support.

Online data notice

iPhone 1.1 online features — updated September 13, 2026

This section applies to iPhone 1.1, including prerelease testing. The earlier journal and visionOS globe sections below describe versions without these online account features. Your journal remains on your device in both versions.

Account and sign-in

Online features use your email address, account identifier and any profile information you choose to provide, such as a name or city. Apple and Google send identity information to Supabase Auth; Seekyoo does not receive their passwords. Session credentials stay in the iPhone Keychain. Apple authorization grants are encrypted on the server so authorization can be revoked during account deletion.

Questions, connections and saved content

With your explicit consent, the platform compares your question with public service descriptions using a local AI encoder. Discovery does not contact those services or save the question automatically. Sending to a chosen service requires a separate confirmation naming the recipient. Only content you choose is sent; your journal is never automatically included. Saved questions, answers and notes are linked to your account. Help messages are kept for the participants; contact details require mutual agreement. Reports keep the reported content and related identifiers for moderation.

Providers and technical records

Supabase hosts accounts and the database; Google Cloud hosts the platform and encrypted backups. Brevo delivers verification emails. Cloudflare Turnstile processes browser and network information for security. Independent AI services process only separately authorized requests. Usage records retain account and request identifiers, model versions, counts and times, without discovery question text. Email providers may retain delivery or opening statistics. The app has no advertising SDK or advertising tracking. Published node cities describe service locations, not your current device location.

Export, deletion and retention

My space provides account export and deletion. Deletion revokes access first; completion is shown only after required background cleanup and Apple authorization revocation finish. Provider cleanup can take longer. Encrypted platform backups rotate after seven days, subject to successful verification; deletion records prevent restoration of deleted account data. Providers apply their own retention policies. Authorized operators can access hosted records; this is not end-to-end encryption. Received messages and downloads cannot be recalled. Delete local journal entries separately on the device. See the online data notice for processing locations and current provider details.

Online data notice

Information collection

  • No account creation
  • No name, email, phone number, or payment collection
  • No health, contact, or photo library collection

Optional city sharing

Sharing is off by default. When you enable Share my city, our Cloudflare-hosted service estimates your city from your internet connection's IP address. Other users can see a city name, country, approximate map point, and count of active sharing connections. Coordinates are rounded to one decimal degree. Your IP address, identity, and street address are not included in the public marker. This estimate can be inaccurate, particularly when using a VPN. If a city cannot be estimated, no marker is published.

Live connections and retention

You can explore without sharing a city. Turn sharing off at any time in the app. A sharing connection is removed when its disconnect is received; interrupted connections expire within approximately 100 seconds. Cities with other active sharing connections remain visible. The service keeps temporary connection state, including through Cloudflare's connection hibernation, but does not maintain a location history or persistent user profiles. Journal contents are never sent to it.

Service providers

Cloudflare processes network connection information to operate and protect the live service. Vercel hosts the public website. Visiting the website or following external links involves those providers' handling of standard network information. See Cloudflare's privacy policy and Vercel's privacy policy.

Device permissions

The current release does not request camera, microphone, photo library, contacts, or precise location access.

Analytics

The current release does not include third-party analytics or advertising SDKs.

Data retention

Place memories stay on your device so you can reopen, edit, delete, favorite, and revisit them later. They are not uploaded to a remote server in the current release.