Privacy policy.

Who operates GeoSignal

GeoSignal is operated by Haldenmark Technologies Limited, registered in England and Wales, company number 17506267. Our registered office is International House, 64 Nile Street, London, United Kingdom, N1 7SR.

For privacy enquiries, contact Haldenmark Technologies Limited at support@geosignal.space or use GeoSignal Support.

Reading and service security

The app uses a random client session to request content. The service stores a one-way hash of its token, session identifiers, timestamps and content-access status. Authenticated content reads do not update an exact last-access timestamp. Website and API delivery also process ordinary connection information, such as an IP address, user agent and request time.

Security checks use short-lived, secret-key hashes of connection information to limit abuse. The audience rate-limit records do not retain raw IP addresses. Operational infrastructure may still process request metadata for delivery, security and diagnosis. Application request-access logging is disabled by default, and account confirmation routes are configured to avoid logging their secret links.

Optional accounts and Sign in with Apple

If you create an account, we retain your account identifier, verified email addresses, linked sign-in methods and account preferences. Email sign-in uses a short-lived confirmation link; GeoSignal does not ask you to create a password. A request must be confirmed before it establishes a session. Account and newsletter choices remain separate.

If you choose Sign in with Apple, Apple supplies a verified app-specific identifier and may supply an email address, including a private relay address. The service verifies the Apple response and stores encrypted provider credentials where needed to check or revoke that authorization. Identities are linked only through an explicit authenticated action; a matching email address alone does not silently merge accounts.

Account and newsletter records are separate from the aggregate readership counters described below. They are not supplied to the AI briefing-drafting pipeline.

Newsletter subscriptions

You can subscribe with an email address without creating an account or using an iPhone. We record the request, consent wording/version, source, confirmation time and subscription status. Only a confirmed opt-in is eligible for newsletters. A verified account can explicitly link an existing confirmed subscription so you can manage it there.

Resend processes addresses, messages and delivery information for sign-in emails and newsletters. We retain delivery identifiers and relevant failure, bounce, complaint and opt-out information to avoid unwanted or failed mail. GeoSignal’s current email configuration does not track email opens or provider-tracked link clicks. Shared campaign labels in newsletter links may contribute to aggregate website arrival counts if that measurement is enabled; they do not identify the individual email recipient.

You can withdraw newsletter consent using the unsubscribe link in an email or the available account preference control. Stopping a newsletter does not delete an account. We retain limited consent and suppression evidence so an opt-out is respected.

Edition notifications and local reminders

If edition notifications are offered and you opt in, Apple Push Notification service receives the information needed to deliver them. GeoSignal stores an app/device notification token, a separate registration credential hash, notification permission and opt-in status, timestamps and delivery outcomes. These device records are not joined to your account or newsletter address.

Edition notifications can be turned off separately in the app or iOS notification settings. Turning them off stops future eligible sends; unregistering also clears the stored delivery token. Delivery can be delayed by Apple or device settings. Existing Watchlist reminder content and schedules stay on your device. Account deletion does not itself unregister this separate device notification preference.

Cookies and on-device storage

Account pages use secure cookies for sign-in, one-use challenges and protection against forged requests. These cookies support the account action you request; they are not advertising cookies. GeoSignal does not use third-party advertising SDKs or sell personal data.

The app stores opaque credentials in the iOS Keychain and keeps its already-authorized edition cache, settings and local engagement counters on your device. Local engagement includes briefing opens, completions and share attempts used for on-device experience and review prompts; those local counters are not uploaded by this implementation. Cache files are excluded from device backups. iOS may retain Keychain items after an app is removed.

GeoSignal does not request access to precise location, contacts, photos, camera, microphone, advertising identifiers or health data.

Aggregate readership measurement

The existing app API counts successful requests for the current operating picture. A valid client session contributes a secret-key pseudonym to that calendar day’s distinct-session estimate; hourly records contain totals only. A session is not a verified person or device, and daily pseudonyms are not joined across days. These records do not contain IP addresses, user agents, story identifiers or the details of what a person read.

Optional website measurement, when enabled, counts briefing opens, assessment/impact opens, search submissions, App Store clicks and coarse campaign arrivals. It does not retain search text, full referrer URLs, account identifiers or a persistent visitor identifier. A fresh, short-lived event receipt suppresses repeat submissions; it is not a reader identity. The browser sender omits cookies and credentials and respects Do Not Track and Global Privacy Control.

These figures are interaction counts or daily session estimates, not audited unique people, cross-day retention or an individual conversion history. Basic bot filtering cannot remove all automated or inaccurate submissions.

Providers and recovery copies

GeoSignal uses infrastructure needed to host, deliver and secure the service. Resend handles email delivery and confirmed newsletter contacts; Apple handles app distribution, chosen Apple sign-in and optional push delivery. If you contact support, we receive the address and information you choose to send. Please do not send passwords or sign-in codes.

Recovery backups are encrypted before off-site storage in a private GitHub repository. The recovery key is held separately from the server. Copies can contain older account, subscription and operational records until backup rotation. The audience restore process invalidates old sessions and pauses outbound delivery until consent, deletion and provider state can be reconciled.

Following links to LinkedIn, the App Store, source publishers or other external sites brings you under those services’ own privacy practices. Public LinkedIn publishing does not require sending GeoSignal account or subscriber lists to LinkedIn. Information may also be disclosed where required by law or needed to protect the service and its users.

Retention and deletion

Account records remain while the account is used, until deletion is requested or the records are no longer needed to operate and secure the service. Session expiry prevents further use; default account sessions last 30 days. Email sign-in links normally expire after 15 minutes, and newsletter confirmation links after 48 hours.

Cleanup defaults remove expired sign-in links and expired or revoked session records after a seven-day grace period and ordinary email-delivery/event metadata after 90 days. Cleanup runs separately from expiry. Existing API readership records have a configurable window of no more than 35 days; optional website day-level aggregates default to 400 days. Short-lived website event receipts expire after ten minutes and are removed by cleanup.

Consent, unsubscribe and suppression records are not automatically erased with an account; limited evidence is retained to respect your email choice. Old unsubscribe authorizations can remain valid for up to ten years. Device registration and delivery records are retained to operate and diagnose notifications; you can request removal through support. Encrypted backups have a separate rotation cycle and are not rewritten immediately when a live record is deleted.

The available account controls let you download your account/preferences record, sign out and delete the GeoSignal account. Deletion stops linked newsletter subscriptions and queues Apple authorization removal where required; it can also show an Apple settings step. Independent, unlinked newsletter subscriptions and device notifications must be stopped separately. Removing the app alone does not delete a server account or unsubscribe an email address.

Your choices and privacy enquiries

You can read free intelligence without an account, decline newsletters, withdraw email consent, manage notification permission and use the available account controls. Where a feature is not offered, it is not a requirement for reading. No payment collection, advertising or content paywall is introduced by these choices.

You can ask about access, correction, deletion, restriction, objection or a copy of your personal data by emailing support@geosignal.space. We may need appropriate proof that the request concerns your data; never send a password or sign-in token. Available rights depend on the circumstances and applicable law.

You can also raise a concern with the UK Information Commissioner’s Office. Material changes to this notice will be reflected in its effective date.