Privacy Policy
Last updated: 8 November 2026 (section 16 about this website added)
The short version. Your photos, videos and projects stay on your iPhone. We have no server for them and no accounts. To write the address and draw the mini map on your stamp, the app asks Apple (Apple Maps services) about the coordinates of the place, the same way the Maps app does. Our analytics (Google Analytics for Firebase) and purchase service (RevenueCat) never receive your photos, videos, coordinates, addresses or project names. There is no advertising and no tracking, and we never sell your data.
This policy also covers this website, geoplate.app, and its free photo tool (section 16). The tool stamps your photo inside your browser and never uploads it.
1. Who we are
Geoplate: GPS Timestamp Camera (the "app") is an iOS app published under the trading name WHITE APPS ("we", "us"). For anything related to this policy or to your data, write to [email protected].
This policy covers the app and the website geoplate.app. Sections 2 to 15 are about the app; section 16 is about the website.
2. What stays on your iPhone
- Photos and videos you shoot in the app, the stamp drawn on them, and the copies of old photos you add a stamp to. They are kept in the app's own storage on this iPhone until you delete them or the app. We never receive them.
- Projects, templates and settings (names of projects, stamp styles, fields and units, your choices in Settings). Project names are never sent anywhere.
- Widgets and the Lock Screen camera. The app's widgets read a small summary the app keeps in a folder shared only between the app and its own widgets on this iPhone: project names, counts and a few thumbnails. Shots taken from the Lock Screen camera are handed to the app and appear in it after you unlock. None of this leaves the phone.
- A saves counter. The app keeps one number in the iOS Keychain: how many stamped files you have saved to Photos. It lets the free saves be counted fairly and stays on the phone after you delete the app (see section 11). It holds no photo, place or personal data.
- If you use iCloud Backup, iOS may include the app's files in your backup, as it does for most apps. That is your own Apple account; we have no access to it.
3. Permissions
| Permission | Why the app asks |
|---|---|
| Camera | To take photos and videos with the stamp on them. |
| Microphone | To record sound for stamped videos. Photos do not need it. |
| Location, while you use the app | To write the address, coordinates, altitude, and a mini map on your photos and videos. The app does not ask for location in the background. Precise location can be switched on for a moment so the address matches the exact building. The compass heading on the stamp comes from your iPhone's compass sensor and stays on the phone. |
| Photos: add | To save your stamped photos and videos to Photos as new copies. |
| Photos: read | Optional, and only if you tap for it. When you add a stamp to old photos, the iOS picker may leave the place out of the file; with this permission the app reads the place stored for the photos you picked, so the stamp can use it. Your originals are not changed. |
| Notifications | Optional. A local notification on your phone when a large batch of old photos is finished. We run no push server and send no marketing messages. |
You can change any of these in iOS Settings → Geoplate. Location is how the stamp gets its place, but you can also search for a place or type an address yourself.
4. Place, address and map: what goes to Apple
This is the one thing that leaves your phone to build the stamp. The app uses Apple's own services, built into iOS:
- Address from coordinates (Apple's geocoder, CLGeocoder): the coordinates of the place are sent to Apple, which returns the street address.
- Mini map (Apple Maps snapshots, MKMapSnapshotter): the area around the place is requested from Apple and drawn on the stamp. The app keeps used map pictures in a cache on the phone, so editing an old shot does not need to ask again.
- Place search (MapKit local search): the text you type in the place search field, and places near you, are sent to Apple to produce the list of results.
These requests go from your iPhone straight to Apple. We do not receive them and have no copy. How Apple handles them is described in apple.com/legal/privacy. Without a network the app still shoots: the stamp then carries the coordinates and no address.
5. What is inside the files you save
A stamped photo or video has the date, time and place drawn on the picture. When you save it to Photos, the app also writes the date and the place into the new item, so it sits at the right spot in your library and on the Photos map. If you then send the file to someone, that person can see the place on the picture and may find it in the file's details. Where a file goes after it is in Photos is your choice, and we do not see it.
If you turn the place off on the stamp, the place is left out of the file too.
6. Analytics
We use Google Analytics for Firebase to understand how the app is used: which first-launch step people reach and what kind of work they pick there, whether the purchase screen is shown, how long it stays open and how it ends, which iOS permissions are allowed or declined, and how many shots are taken and saved. Shots and saves are counted with short codes only: photo or video, which lens, whether a place and an address were on the stamp, the template name from our catalog (your own templates go as "custom"), and how many free saves are left. Each event comes with an anonymous analytics ID of this app install, the device model, the iOS and app versions, the language and an approximate country worked out from the IP address.
When the app asks what you shoot for, you can pick "Other" and type a few words about your work. Those words go once with that event, so we can see which kinds of work to support next. They are not kept in the app and do not go to RevenueCat. We do not send them at all if they are longer than 40 characters or look like an email address, a web link or a phone number.
Events never contain photos, videos, coordinates, addresses or project names. The app uses Google's analytics package without the Advertising Identifier (IDFA), does not show the App Tracking Transparency prompt, and has Google's advertising features switched off. We do not track you across other companies' apps or websites.
7. Purchases and ad attribution
| Who | What they receive | Why |
|---|---|---|
| Apple (App Store) |
Your Apple ID, payment method and the purchase itself. | Apple sells and charges for everything bought inside an iOS app. |
| RevenueCat | A random ID of this app install, your purchases and subscription status from the App Store, and technical facts about the device (model, iOS and app version, country). | RevenueCat checks purchases and tells the app whether Pro is active, including after a reinstall or on a new phone. |
| Apple Ads (attribution only) | On first launch iOS gives the app an attribution token. The app sends it to Apple (api-adservices.apple.com), and Apple answers only with numbers: whether the install came from one of our ads, and which campaign and ad group. RevenueCat receives the same token to see which campaign led to a purchase. The token carries no photos, location or personal data, and it does not use the Advertising Identifier. | To learn whether our ads work and to show the right offer. |
If you came from one of our ads, the app uses the ad group number to open the first-launch question with a matching kind of work already picked (for example, cleaning), so the first templates you see fit your work. You can pick anything else. The table that turns ad group numbers into kinds of work comes from Firebase Remote Config (Google); the app downloads it with an anonymous ID of this install and nothing else. Google Analytics receives only short codes: the kind of work that was picked (such as "cleaning") or why none was (for example, not from an ad), never the token or the campaign numbers.
To tie a purchase to the analytics of the same install, the app also gives RevenueCat the anonymous analytics ID from section 6. We never see your card number, name, email or billing address. Policies: revenuecat.com/privacy, firebase.google.com/support/privacy, apple.com/legal/privacy.
8. What we never do
We do not sell your data. We do not show ads in the app and do not use your data for advertising. We do not track you. We do not look at your photos or videos, because we never receive them. We have no accounts, no sign-up and no email list built from the app.
9. How long we keep things
| Data | Where | How long |
|---|---|---|
| Photos, videos, projects, templates, settings | Your iPhone only | Until you delete them or the app |
| Map pictures cache | Your iPhone only | Until iOS clears the cache or you delete the app |
| Saves counter (one number) | Your iPhone, iOS Keychain | It stays after you delete the app |
| Coordinates, typed place search | Apple (section 4) | Under Apple's privacy policy; not held by us |
| Analytics events | Google Analytics for Firebase | Under the retention setting of our Google Analytics project |
| Purchases, subscription status, install ID, ad attribution | RevenueCat | While the app is in use, or until you ask us to delete them |
10. Deleting your data
- On your phone: delete a shot or a project inside the app, or delete the app to remove everything it stores: photos, videos, projects, settings and the map cache. Items you saved to Photos are yours and stay there until you delete them in Photos.
- Analytics and purchase records: they hold no photos, places or names. To have the record of your install deleted at our services, write to [email protected]. We will ask for a detail that lets us find it, such as the order ID from your App Store receipt, and answer within 30 days.
- Subscriptions are not cancelled by deleting data or the app. Cancel in iOS Settings → your name → Subscriptions.
11. About the saves counter
The Keychain is a part of iOS that keeps small items even when an app is removed. Geoplate uses it for the counter in section 2, so that deleting and reinstalling the app does not reset the number of free saves. It is a single number with no connection to you or your files. We cannot read it from outside the phone.
12. Children
Geoplate is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has used the app and you want the record at our services deleted, write to us.
13. Legal basis and transfers (EU and UK)
- Consent - camera, microphone, location, Photos and notifications are used only after you allow them in iOS, and you can withdraw this at any time in iOS Settings.
- Performance of a contract - checking your purchases and Pro status.
- Legitimate interests - analytics without your content, and learning which of our ads work.
Google, RevenueCat and Apple operate in the United States and other countries. Where data leaves the European Economic Area or the United Kingdom, transfers rely on the standard contractual clauses used by those companies.
14. Your rights
Depending on where you live (including the EU, the UK and US states such as California, Colorado, Virginia and Connecticut), you can ask to access, correct or delete your personal data, to receive a copy, to object to or restrict processing, and to withdraw consent; and you can complain to your local data protection authority. We do not sell or share personal data as those laws define it, and we do not treat anyone differently for using these rights. Write to [email protected].
15. Security
Everything the app sends to Apple, Google and RevenueCat travels over encrypted connections. Your shots are kept in the app's own storage on the phone, which iOS protects with your passcode. No system is perfectly secure; if a breach ever affected your data, we would notify you as the law requires.
16. The geoplate.app website and the free photo tool
The website is a set of plain pages about the app. It has no accounts, no sign-up and no forms.
Hosting and server logs
The site is delivered through Cloudflare, which handles your connection on its way to our server and protects the site from attacks, and is hosted on our own server. Like any web server, ours writes a standard access log for every request: your IP address, the time, the page requested, the page you came from and your browser's user-agent string. We use these logs only to keep the site working and secure, and they are deleted after 14 days. Cloudflare's policy: cloudflare.com/privacypolicy.
The free photo tool
The tool at Add a timestamp to a photo works inside your browser:
- Your photo is never uploaded, to us or to anyone else. It is opened, stamped and saved on your device. The date and place stored in the photo file are read on your device too. The photo you download does not carry over the original file's hidden date and GPS data.
- Map. When you open the map, map images for the area you look at are loaded from OpenFreeMap (tiles.openfreemap.org).
- Address and place search. To turn a point into a street address, the tool sends the coordinates of that point to Photon, a place search service run by komoot (photon.komoot.io). If your photo has a location, its coordinates are sent this way to show the address. When you search for a place, the text you type goes to Photon, together with the point you already picked, rounded to about 100 metres, so nearby results come first.
- Use my location. Your browser asks your permission first. The position is used to place the pin and, as above, sent to Photon to find the address.
OpenFreeMap and Photon receive your IP address, as with any internet request, but never your photo, and Photon receives no cookies from this site.
Analytics on the website
The website uses Google Analytics 4 to count visits and to see which pages lead people to the app. It records the pages you open, the site you came from, taps on the App Store buttons (which button, the kind of device, and whether the page was open inside the TikTok or Instagram browser) and steps in the photo tool as short codes: the photo format, whether the photo had a date or a location (yes or no), whether the map was opened, the stamp style, where the date and place came from (the photo, the map or typed in), whether a name was typed (yes or no) and how the photo was saved. It never receives your photo, coordinates, addresses or anything you type. Google signals and ad personalization are switched off, and the data is kept for 14 months.
In Europe, including the EU and the UK, Google Analytics loads only after you tap Accept; everywhere else you can switch it off with Cookie settings at the bottom of every page. The cookies and your choices are described in the Cookie Notice.
Links to the App Store carry a short tag naming the page (for example "tool"), so that Apple's App Analytics can show us, as totals, how many downloads each page led to.
Storage in your browser
The site keeps two small items in your browser's storage for this site: your light or dark theme, and your answer to the cookie question. They never leave your browser.
Legal basis (EU and UK)
Server logs and the map and address services are needed to deliver the site and the tool you asked for (legitimate interests). Google Analytics in the EU and the UK runs on your consent. Cloudflare, Google, OpenFreeMap and komoot may process data outside your country; transfers rely on the safeguards those companies use, such as standard contractual clauses.
17. Changes to this policy
If we change what leaves your phone or your browser, who receives it, or how long it is kept, we will update this page first and change the date at the top.
18. Contact
Questions, requests or complaints: [email protected]. We answer within a few business days.