Privacy Policy
Last updated: December 19, 2025
Summary: GeoGraph OCR is designed with privacy-first principles. Your data stays on your device by default, and you control what gets shared.
1. Information We Collect
1.1 Data You Provide
- Images and Documents: Photos you capture or upload for OCR processing
- Account Information: Email address if you choose to create an account
- Location Data: GPS coordinates (only with your explicit permission)
1.2 Automatically Collected Data
- Device Information: Browser type, operating system for compatibility
- Usage Analytics: Anonymous statistics to improve the service
2. How We Use Your Information
- OCR Processing: Extract text from your images using Google Gemini AI
- Knowledge Graph: Generate semantic relationships from extracted data
- GIS Enrichment: Add geographic context to your documents
- Cloud Sync: Synchronize data across your devices (optional, requires account)
3. Data Storage
3.1 Local Storage (Default)
By default, all your data is stored locally on your device using IndexedDB. This data never leaves your device unless you explicitly choose to sync or contribute.
3.2 Cloud Storage (Optional)
If you create an account and enable cloud sync, your data is stored securely in Supabase with the following protections:
- End-to-end encryption in transit (TLS 1.3)
- Row-level security ensuring you can only access your own data
- Regular security audits and compliance checks
4. Third-Party Services
- Google Gemini AI: Processes images for OCR and analysis. Google's privacy policy applies to this processing.
- Supabase: Provides authentication and database services for cloud features.
- Polygon Network: Used for optional NFT minting (Web3 features only).
5. Data Sharing
We never sell your personal data. Data is shared only:
- With your explicit consent (e.g., contributing to the global corpus)
- To process your requests through necessary third-party services
- When required by law
6. Your Rights
- Access: Request a copy of your data
- Deletion: Delete your account and all associated data
- Portability: Export your data in JSON format
- Opt-out: Disable cloud sync and analytics at any time
7. Data Retention
- Local Data: Stored until you delete it or clear browser data
- Cloud Data: Retained while your account is active; deleted within 30 days of account deletion
- Anonymous Analytics: Aggregated and retained for up to 2 years
8. Security
We implement industry-standard security measures including:
- HTTPS encryption for all communications
- Secure authentication with email verification
- Regular security updates and vulnerability assessments
9. Children's Privacy
GeoGraph OCR is not intended for children under 13. We do not knowingly collect personal information from children under 13.
10. Changes to This Policy
We may update this privacy policy periodically. Significant changes will be communicated through the application or via email for registered users.
11. Contact Us
For questions about this privacy policy or your data: