Geode

Your data

Privacy policy

In two sentences: with no account, your photos and your collection never leave your phone. If you create one — it is optional — your collection is backed up so it follows you from one device to the next, your photos only if you switch that on, and nothing is ever sold on.

Last updated: 19 August 2026

Data controller

Benjamin Repingon, sole trader, 384 chemin de la Sarriette, 30250 Sommières, France. For any question about your data: identify-suite@revely.tech.

What we collect, and why

Photos of stones
Sent to our analysis provider for as long as the identification takes, then saved on your device to fill your collection. They are only copied to our servers if you switch on the photo backup, which is off by default.
On your phone until you delete it; in the backup, as long as the account exists
Technical identifier
An identifier created automatically on first launch, with no email and no password, which lets the app call our services and carry a subscription. It does not name you. If you create an account, this is what becomes it.
For as long as the app is installed
Account (optional)
Your email address, or the identifier Apple or Google hands us if you go through them. Used only to recognise you from one device to the next and give you your collection back. We never receive your Apple or Google password.
Until you delete the account
Backed-up collection (optional)
With an account: the names of the stones you identified, the date, and where you found them if that was recorded. This is what lets your collection survive a lost phone. Hosted in the European Union.
Until you delete the account
Where you found it
Optional, off by default: places the stone in your collection. Saved on the device, and in the backup if you have an account.
On your phone until you delete it; in the backup, as long as the account exists
Subscription status
To know whether unlimited identifications are open, and to restore a purchase on a new device. Handled by RevenueCat from App Store and Google Play receipts.
Duration of the subscription, then accounting obligations
Usage analytics
Aggregated events — an identification started, a screen opened — to see what helps and what gets in the way. No photo content, nothing that names you.
14 months at most
Crash reports
When the app closes or fails, the technical error message, the device model and the system version are sent so the failure can be fixed. No photo content, nothing that names you.
90 days
Notifications (optional)
If you ask to hear about the stone of the week, your device is registered with a notification token issued by the operating system, the language you read the app in, and the device's timezone — the last one only so the message arrives on your Saturday morning rather than in the middle of your night. The token identifies a device, not a person, and is never used for anything else.
Until you turn notifications off, or uninstall the app

Your photos, precisely

This is the part that matters most, so here is the detail. When you start an identification, the photo is sent encrypted to Google's Gemini API, which reads it and returns a hypothesis. We neither receive nor store that photo: it exists in transit for the length of the request. Under Google's paid service terms, it is not used to train models.

This processing may involve a transfer outside the European Union, covered by the European Commission's standard contractual clauses.

The photo is then kept on your phone, in the app's private storage. If you switch on the matching option in settings, it is also saved to your device's photo library. Our own servers store only the mineral sheets — the text describing amethyst, quartz, pyrite — which are the same for every user and contain nothing about you.

One exception, and it is yours to make: if you have an account and switch on "Back up my photographs too", they are then copied to our servers so they can be restored on another device. That option is off by default, can be switched off at any time, and offers to delete the photographs already backed up when you do.

Your account, and what it backs up

The account is optional. Geode works entirely without one: the free identifications, the subscription, the collection, all of it behaves the same. An account does one thing — it lets your collection survive a phone that is lost, broken or replaced.

You can create it with an email address and a password, or through Apple or Google. In that second case we receive neither your password nor your full identity: only an identifier and, if you allow it, an email address. If you choose "Hide My Email" with Apple, all we see is a relay address, and the app says so rather than showing you an address you would not recognise.

What is backed up: the names of the stones, the date, the place if it was recorded, and the photographs only if you switch that on. What is not: the app's language, your answer to the welcome question and your other preferences, which describe this device rather than you.

The backup is hosted by Google Cloud in the European Union. You can delete your account from the app, under Settings → Account: deleting it permanently erases your backed-up collection and your backed-up photographs from our servers. It does not cancel your subscription, which is attached to your Apple or Google account — the app says so and takes you there.

Location

If you allow it, the place you found the stone is saved alongside it to enrich your collection. The permission is optional and off by default: refuse it and identification works exactly the same. With no account the position never leaves your device; with an account it is part of the backed-up collection, just like the name of the stone.

Notifications

Geode sends one message a week, and only that one: the stone featured on the home screen. There is no daily reminder, no promotional nudge, and no notification tied to what you have identified.

The permission is optional and off by default: refuse it and the app works exactly the same, with the card still on the home screen. To send it we store your device's notification token, the language you read the app in, and its timezone — the timezone because the message goes out at 9am where you are, which a single broadcast could not do.

You can turn notifications off at any time, from the bell beside the card, from the app's Settings, or from your phone's. The device registration is deleted when you do.

Processors

Geode relies on a small number of providers, each for one precise job:

  • Google Ireland Ltd / Google LLC — hosting of the backup (European Union), technical identifier and accounts, image analysis, sheet generation, notification delivery, audience measurement and crash reports (Firebase, Vertex AI).
  • RevenueCat, Inc. (United States) — purchase receipt validation and subscription status.
  • Apple Distribution International Ltd and Google Ireland Ltd — sale and billing of the subscription, and "Continue with Apple / Google" sign-in if you use it. They alone handle your payment details: we never see your card.

This website

The site you are reading sets no cookies, runs no scripts and uses no trackers. Fonts are served from our own servers, so no request is made to any third party while you visit.

Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data. In practice most of it stays in your hands. With no account: the collection and the photos live on your device, so deleting a stone in the app, or uninstalling the app, permanently erases the matching data — we have no copy to delete on your behalf. With an account: deleting a stone removes it from the backup too, and Settings → Account → Delete my account erases the account, the backed-up collection, the backed-up photographs and your devices' notification registrations in one go.

For what remains — subscription status, analytics events — write to identify-suite@revely.tech: we answer as soon as we can, and within the one-month limit the GDPR sets. You may also lodge a complaint with the French data protection authority, the CNIL, or with your own national supervisory authority.

Children

Geode is not aimed at children under 15 and does not knowingly collect their data. If you are a parent or guardian and believe otherwise, write to us and we will delete whatever needs deleting.

Changes

Any change to this policy is published on this page with a revised update date. A change that genuinely affects you — a new category of data, a new processor — will be flagged inside the application.