Geode has no accounts or ads. Health readings stay in protected storage on your device. Sharing usage and error reports is optional and off until you enable it.
Geode reads active energy burned from Apple Health. It does not estimate calories from steps. These readings determine mining progress and activity quests. Geode does not write to Health or send Health readings to PostHog.
Your local save, Health history and widget snapshot are stored in protected files excluded from device backups. The local recovery copy made before an import receives the same protection. You can revoke Health access in Settings, then Privacy and Security, then Health, then Geode. Removing Geode removes its local app data; Apple Health maintains its own records separately.
If you save or share a Geode backup, the destination you choose receives your collection, mining streak, earned strikes, quest and reward progress, and game dates. New backups exclude calorie readings, daily calorie history and calorie-derived gem depths. Partial progress toward the next strike is not exported. Health is read again on the receiving phone. Old Geode backups remain importable; they may contain calorie data, but new exports from them use the new format. Copies you exported previously remain wherever you saved them until you delete them there.
If you turn on Sync backup to iCloud in Settings, Geode keeps the same backup in your iCloud account using Apple’s iCloud key-value storage, so your other devices can use it. It contains no Health readings, calorie history or record of past activity goals; it does include lifetime goals reached and any rewards waiting to be claimed. Apple stores it under your Apple Account and we cannot access it. Turn the switch off to stop syncing on that device; Geode then offers to remove the iCloud copy.
When online, Geode downloads a public seasonal-gift list from geode.fit, hosted by Cloudflare. That request includes no player identifier, Health readings, collection or purchase status. Cloudflare receives the connection's IP address and ordinary request information. Mining works offline using the saved gift list.
Analytics is off unless you turn it on. Geode asks after your first find, and you can change your choice any time in Settings (Share analytics, or Share usage and error reports in earlier versions). When it is on, Geode sends usage events and crash reports to PostHog in the United States to improve the app, and current versions also send session replays. Usage events include app launches, screens, tutorial and mining interactions, collection features, paywall views, purchase attempts and outcomes, backup actions, notification and widget use, app version and device information. Session replays are captures of Geode's own screens while you use it, so we can see where players get stuck; Health figures such as calories, steps and activity progress are hidden before capture, and nothing outside Geode is recorded. In current versions, a small red dot on the Settings button shows while sharing is on. Your purchase records at RevenueCat are linked to the same random identifier so renewals, cancellations and refunds can be counted. Events use a random installation identifier so visits from the same installation can be grouped. This is not an account and we do not ask for your name. No Health readings, calorie totals, step counts or activity-quest thresholds are included. In versions with the country analytics consent prompt, opting in also allows PostHog to infer your approximate country from your connection’s IP address. Only country name and country code are kept with these analytics, linked to the same installation identifier; city, region, postal code, coordinates and raw IP addresses are not retained with them. This does not access your device’s Location Services and can be inaccurate when using a VPN. Previous analytics consent does not enable this collection: users who previously opted in are asked again, while users who declined remain opted out. Versions without the country consent prompt disable location enrichment; early beta versions collected approximate city and country.
Switching sharing off stops new usage, error-report and session-replay collection. Previously submitted data is retained in PostHog until deleted through our deletion process or its applicable retention rules; we do not currently promise automatic deletion after a fixed period. To request deletion, email hello@geode.fit with the analytics ID available under Copy analytics ID in Settings. If that ID is no longer available, contact us and we will explain what we can locate. Opting out does not itself delete previous events.
If you choose to send feedback, your message, category and app version go to PostHog in the United States. Sending feedback does not enable usage sharing. When sharing is off, each submission uses a separate random identifier. Avoid including personal or Health information. Feedback is retained with our support records until removed through the deletion process; contact hello@geode.fit with the message and approximate submission date if you want it deleted.
When Geode runs ads, Apple’s privacy-preserving ad attribution (SKAdNetwork) tells the ad network, in aggregate and after a delay, that an install came from an ad. Apple sends this report, not Geode; it contains no personal or device identifiers and is not used to track you across apps or websites. Geode does not use the advertising identifier or ask to track you.
Cloudflare hosts this website. It does not use cookies, browser analytics or session replay. See Cloudflare’s privacy policy for more about its processing.
Before launch, this website offered a waitlist, which is now closed. If you joined, we keep your email address, signup time, signup consent and any campaign tags from the link you followed in PostHog in the United States. We use these to send the launch announcement and occasional Geode updates. Your waitlist email is not linked to your app activity or Apple Health readings. You can unsubscribe using the link in any waitlist email, or email hello@geode.fit to leave the list or request deletion. Waitlist records are kept until you request deletion or we retire the list; an unsubscribe record may be kept to prevent further messages.
PostHog processes data under its data processing agreement. We do not sell your data or share your waitlist email with advertising platforms. Questions and deletion requests can be sent to the address below.