Privacy

Last updated: August 2026

The short version

We don't collect your data

GetGeoff is built so that your Geoffs stay yours. We don't gather personal profiles, we don't log where you go, and we don't keep a copy of whom you meet up with. The app works without us needing to know any of it.

Your places, your invites, and your arrival history live on your device and the devices of the people you've invited, not in a profile we hold about you.

End-to-end encryption

The things you do in GetGeoff (the spots you drop, the people you invite, and the pings when someone arrives or leaves) are end-to-end encrypted. That means they're scrambled on your device before they ever leave it, and they can only be unscrambled by you and the friends you've shared them with.

Because the encryption keys stay on your devices, GetGeoff can't read your Geoffs even if we wanted to. To us, it's just unreadable noise passing through.

Your location

GetGeoff needs your location to do its one job: tell your crew when you've reached the spot. Your location is used on your device to check whether you've entered a Geoff, and the resulting "arrived" or "left" ping is end-to-end encrypted to the group.

We don't store your location, build a history of your movements, or sell it. You can turn location access off in your phone's settings at any time. The app simply stops sending pings until you turn it back on.

Advertising, and what it doesn't see

GetGeoff is free to use. Any advertising it shows is limited to a single ad at the top of your list, and a one-time purchase removes it permanently. Look for Remove Ads in the app's settings.

Any advertising in GetGeoff is non-personalized. Ads are picked from rough region and the fact that you're looking at this app, not from a profile of who you are or where you've been. We never ask permission to follow you across other apps and websites, which is why you'll never see an App Tracking Transparency prompt in GetGeoff: there is nothing we'd be asking for. Choosing non-personalized costs us most of the advertising revenue we could otherwise make. We think it's the only version of this worth shipping.

Ads are delivered by Google AdMob. To fill an ad slot, Google receives technical information such as a device identifier, your IP address (which indicates an approximate region, not a precise location), and whether an ad was shown or tapped. It does not receive your Geoffs, their locations, your precise location, your arrival history, or who is in your crew. Those are end-to-end encrypted and never leave you and the people you invited. You can read how Google uses information from apps that use its services.

Beyond advertising, we don't embed third-party tracking or analytics SDKs that follow you around, and there's no hidden data broker in the middle.

We never sell your information

We do not sell, rent, or trade your information to anyone: not data brokers, not partners, not advertisers. Since your Geoffs are encrypted, and we don't hold a profile on you, there's nothing about your activity for us to sell in the first place.

Serving an ad is not selling: Google receives only the technical data described above, and only to deliver a non-personalized ad. It gets nothing about your Geoffs, because we don't have it either.

Your rights in the EEA and UK

If you're in the European Economic Area or the United Kingdom, you have the right to access the personal data held about you, to have it corrected or deleted, to object to or restrict how it's processed, and to complain to your local data protection authority.

Most of these are already in your hands rather than ours, which is the point of building it this way: we hold no profile to show you, and your Geoffs are encrypted so we can't read them. Deleting them on your devices deletes them.

Where we rely on your consent (advertising is the only case), you can change or withdraw it at any time from the privacy options in the app's settings, and we'll ask for it before showing an ad in the first place.

You're in control

Your data lives with you. You can leave a Geoff, remove people, or delete the app at any time, which removes the Geoff data held on your device. Because we don't keep server-side copies of your encrypted content, deleting it on your devices means it's gone.

Children's privacy

GetGeoff isn't directed at children under 13, and we don't knowingly collect information from them. If you believe a child has used the app in a way that concerns you, please reach out and we'll help.

Changes to this policy

If we ever update how GetGeoff handles privacy, we'll update this page and change the date at the top. If a change is significant, we'll tell you in the app before it takes effect.

Contact

GetGeoff is made by DoubleDog Software, which is the data controller for the limited information described above.

Questions about privacy? Email us at privacy@getgeoff.app and a real person will get back to you.

This page is a plain-language summary of how GetGeoff is designed to handle your information. It isn't legal advice, and the specifics may be refined as the app ships. Check back here for the current version.