Privacy Policy

Last updated: June 20, 2026

1. Data Controller

Speakz Media GmbH
Kantstraße 127
10625 Berlin
Germany

2. Overview

geoking is a geography quiz game with minimal data collection. You do not need a user accountto play geoking — you don't provide an email address, password, or personal contact details.

The following data may be processed when you use our App and website:

Local device data (game progress, settings, player name)
Pseudonymous leaderboard entries (player name + anonymous device identifier)
Technical purchase and subscription data (via RevenueCat / App Store / Google Play)
Anonymous usage statistics (via PostHog)
Technical crash data (via Sentry)
Website access data (via Vercel Analytics, cookie-free)

3. Legal Bases

The processing of personal data is based on the following legal bases under Art. 6 GDPR:

Performance of a contract (Art. 6(1)(b) GDPR): Processing is necessary for the performance of a contract to which you are a party (e.g. in-app purchases).
Legitimate interest (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller (e.g. app improvement, error diagnosis, website operation).

4. Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk:

Encryption: All data transmissions between your device and our servers are encrypted via TLS (HTTPS).
EU storage: Server-side data (leaderboard) is stored on Supabase servers within the European Union.
Access control: Access to data is restricted to authorized personnel.

5. Locally Stored Device Data

The following information remains exclusively on your device and is not transmitted to our servers:

Game progress, statistics, high scores, and streaks
App settings (region selection, locally stored player name, sound settings)
Onboarding completion status

When you participate in the online leaderboard, your player name and an anonymous device-specific identifier are stored on our servers (see section 6).

You can permanently remove local data at any time by uninstalling the app.

6. Online Leaderboard (Supabase)

In game modes with an online leaderboard, your self-chosen player name and a randomly generated, device-specific anonymous identifier are stored on our servers (Supabase, EU). This data is not linked to your identity. Legal basis: legitimate interest in providing a leaderboard pursuant to Art. 6(1)(f) GDPR.

To request deletion of this data, please contact us (see Delete Account / Remove Data).

7. Purchases and Subscriptions (RevenueCat)

In-app purchases and subscriptions (geoking Pro) are processed through RevenueCat, Inc. (USA) as an intermediary between the app and the app store. The actual payment transaction is handled by Apple Inc. or Google LLC; we never receive your payment details.

RevenueCat processes anonymous, randomly generated app user identifiers and technical purchase details (product type, purchase date, country, device type, app version). Legal basis: performance of a contract pursuant to Art. 6(1)(b) GDPR.

8. Apple App Store / Google Play Store

Our App is available through the Apple App Store (Apple Inc.) and the Google Play Store (Google LLC). When downloading the App, required information is transmitted to the respective app store. We have no influence over this data collection. For more information, see the privacy policies of the respective providers:

Apple: apple.com/legal/privacy
Google: policies.google.com/privacy

9. Anonymous Usage Statistics (PostHog)

To improve the App, we use anonymous usage metrics via PostHog. Events such as app launches, completed games, onboarding steps, and technical details (device type, OS version, app version, language) are captured. Each device receives a randomly generated anonymous identifier. We do not link this data to your identity and do not collect names or contact details. Legal basis: legitimate interest in app improvement pursuant to Art. 6(1)(f) GDPR.

10. Error and Crash Diagnostics (Sentry)

We use Sentry (Functional Software, Inc., USA) to detect and resolve programming errors. When crashes occur, technical diagnostic data is transmitted (error messages, stack traces, device type, OS and app version, timestamp). This information is used solely to ensure app stability. Legal basis: legitimate interest pursuant to Art. 6(1)(f) GDPR.

11. Website Statistics (Vercel Analytics)

This website is hosted by Vercel Inc. and uses Vercel Analytics for access statistics. Vercel Analytics does not use cookies and requires no cookie banner. No personal data is permanently stored; access information is evaluated in aggregated, anonymized form. Legal basis: legitimate interest in the technically correct presentation and optimization of the website pursuant to Art. 6(1)(f) GDPR.

12. Contact Requests by Email

If you contact us by email, your details including the contact information you provide will be stored for the purpose of processing your request. We do not share this data without your consent. Legal basis: legitimate interest in effectively processing inquiries pursuant to Art. 6(1)(f) GDPR.

13. International Data Transfers

Some service providers (RevenueCat, PostHog, Sentry, Apple) process data in the United States using appropriate safeguards, including EU Standard Contractual Clauses and the EU-US Data Privacy Framework.

14. Your Rights

As a data subject, you have the following rights under the GDPR:

Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether personal data concerning you is being processed.
Right to rectification (Art. 16 GDPR): You have the right to obtain the rectification of inaccurate personal data concerning you.
Right to erasure (Art. 17 GDPR): You have the right to request the erasure of personal data concerning you.
Right to restriction of processing (Art. 18 GDPR): You have the right to request restriction of processing of your personal data.
Right to data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.

Since we do not link data to your identity, additional information may be required to process your request. To exercise your rights, contact: dev@speakzmedia.de

15. Right to Withdraw Consent

Where processing of your personal data is based on your consent, you have the right to withdraw that consent at any time. The lawfulness of processing carried out on the basis of consent prior to its withdrawal is not affected. You can withdraw consent at any time, e.g. by emailing dev@speakzmedia.de.

16. Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the member state of your habitual residence, place of work, or place of the alleged infringement. The supervisory authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219
10969 Berlin, Germany
www.datenschutz-berlin.de

17. Version of This Privacy Policy

This Privacy Policy is dated June 20, 2026. We reserve the right to amend this Privacy Policy to reflect changes in applicable law or changes to our services and data processing. The current version is always available on this page.