Privacy Policy

Effective Date: August 5, 2026

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and display name. If you sign in via Google or Apple, we receive limited profile information (name and email) from those providers. We do not receive or store your Google or Apple passwords.

1.2 Geological and Project Data

You may create projects containing geological field data, including sites, stations, structural orientation measurements, datasets, formations, and related metadata. This data is created and owned by you. When you use cloud sync, this data is stored on our servers to enable cross-device access.

1.3 Photos

If you use the photo capture or attachment features, photos may be stored on your device and, at your direction, on your Google Drive account. We do not store your photos on our servers.

1.4 Location Data

With your permission, the mobile app collects GPS coordinates to geotag stations and measurements. You can disable location access at any time through your device settings. Location data is stored as part of your project data and is not shared with third parties.

1.5 Device and Sensor Data

The mobile app may access your device’s compass, accelerometer, and gyroscope sensors to facilitate structural orientation measurements. This sensor data is processed locally and stored only as part of your measurement records.

1.6 Voice Notes

If you use the voice notes feature, the mobile app accesses your microphone and uses your device’s speech recognition to transcribe what you say. The resulting text transcript is stored as a note in your project data (and syncs with it); we do not store audio recordings on our servers.

1.7 Usage and Website Analytics

Inside the apps, we collect first-party usage analytics to understand how the Services are used and to improve them: events such as app opens, screens viewed and time spent on them, and features used. These events are associated with your account identifier, are not shared with third-party analytics or advertising companies, and are automatically deleted after 90 days.

On our public website (sigmageoscience.com) we use Microsoft Clarity, a third-party analytics service, to understand how visitors find and read our pages. Clarity records page views, clicks, scrolling and mouse movement, and reconstructs them as aggregate heatmaps and individual session replays. It sets cookies and receives your IP address, browser and device type, and the page that referred you. Text you type into form fields is masked and is not captured in recordings. Clarity runs on the website only and is not present inside the apps, and it never receives your account data, geological data, or project content. Microsoft’s handling of this data is governed by the Microsoft Privacy Statement.

We also use Google Analytics, a third-party analytics service from Google, on both our public website (sigmageoscience.com) and the Stereogram Pro web app (stereogram.sigmageoscience.com). It records page and screen views, the page that referred you, your browser and device type, and an approximate location derived from your IP address. It sets cookies at sigmageoscience.com so that a visit which begins on the website and continues into the web app is counted as one session rather than two unrelated ones. Google Analytics measures navigation only: it does not receive your geological data or project content, and we do not send it your account identifier or email address. It is not present in the Stereogram Go iPhone app. Google’s handling of this data is governed by the Google Privacy Policy. You can opt out in any browser using Google’s Google Analytics Opt-out Browser Add-on.

1.8 Crash and Error Data

We use Sentry, a third-party error monitoring service, to collect crash reports and diagnostic information. This data includes device type, operating system version, app version, and error stack traces, and may be associated with your account identifier and email address so we can investigate problems you report. We also store error reports (message, stack trace, and technical context) in our own database. Crash and error data does not include your geological data or personal project content.

1.9 Payment Information

If you subscribe to a paid plan, our order process is conducted by Paddle.com, our merchant of record. We do not receive or store your full credit card number. Paddle may collect information necessary to process your payment in accordance with their privacy policy.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Authenticate your identity and manage your account
• Sync your project data across devices when you opt in to cloud sync
• Process payments for paid subscriptions
• Diagnose and fix technical problems via crash reports
• Respond to your support requests and communications
• Send you occasional product update emails, only if you opted in (you can unsubscribe at any time)
• Comply with legal obligations

We do not sell your personal information. We do not use your geological data for any purpose other than providing the Services to you.

3. How We Share Your Information

We may share your information only in the following circumstances:

• Service Providers: We use third-party services to operate the Services, including Supabase (authentication and database hosting), Sentry (crash reporting), Paddle (payment processing, as merchant of record), Cloudflare (web hosting), Microsoft (Clarity website analytics), Google (OAuth authentication and Drive storage at your direction), and Apple (Sign-In with Apple). These providers access only the data necessary to perform their functions and are obligated to protect it.
• Map Tile Providers: When you view basemaps, your device requests map tiles directly from third-party providers (Esri/ArcGIS Online and OpenTopoMap). Like any web request, these providers receive your IP address and the coordinates of the map area you are viewing. We do not send them your identity or project data.
• Legal Requirements: We may disclose your information if required by law, subpoena, court order, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Data Storage and Security

Your project data may be stored locally on your device (using SQLite on iOS or IndexedDB in your browser) and, if you enable cloud sync, on servers operated by our hosting provider (Supabase) in the United States.

We implement reasonable technical and organizational measures to protect your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention and Deletion

We retain your account information and synced project data for as long as your account is active. You may delete individual projects from within the app at any time. You can delete your entire account and all associated data directly in the app (Settings → Delete Account), or by contacting us at [email protected].

Upon account deletion, we will remove your personal information and project data from our servers within 30 days, except where retention is required by law. Usage analytics are deleted with your account (and expire after 90 days regardless); error reports are anonymized rather than deleted; crash data held by Sentry expires per its retention period (approximately 90 days).

Data stored locally on your device is under your control and is not affected by account deletion on our servers.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing
• Object to or restrict certain processing activities

The Services include a data export feature that allows you to download all of your data. To exercise any other rights, contact us at [email protected].

7. Children’s Privacy

The Services are not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. International Data Transfers

If you access the Services from outside the United States, your information may be transferred to and processed in the United States. By using the Services, you consent to this transfer. We will take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

9. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Effective Date” above. Your continued use of the Services after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Sigma Geoscience
Email: [email protected]