Privacy Policy

This Privacy Policy explains how Godwana ("we", "us", or "our"), operated by Tobias Wetzel, collects, uses, and protects your personal data when you use our geography learning application at godwana.steadygo.app.

We take your privacy seriously and process your data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using Godwana, you agree to the collection and use of information as described in this policy.

For direct individual use, the data controller responsible for your personal data is:

• Tobias Wetzel
• Email: contact[at]steadygo.app
• Website: godwana.steadygo.app

For school or other institutional use, the school, school authority, or contracting institution is generally the controller and Godwana acts as its processor under a data processing agreement. Data-subject requests should normally be directed to that institution; you may also contact us at the address above.

We collect the following categories of personal data:

• Account Information: Email address, username, and password when you register. Passwords are stored only in hashed form.
• Learning Data: Lesson progress, your answers and results in lessons, quizzes, and reviews, and the progress statistics calculated from them.
• Saved Items: Places, notes, lists, and map drawings you save, the offline map regions you choose, and map data you import or connect.
• Class & Organization Data: If you join a class or organization, we store your membership, role (student/teacher), assignments, and submissions.
• AI Assistant Usage: If you use the AI map assistant, we record usage information such as the amount of text processed and the model used, so that we can apply your AI allowance.
• Map Control Connections: If you connect an external AI assistant to control your map, we store the connection and the map commands and their results so they can be delivered to your map.
• Technical Data: IP address, browser type, device information, and access times when you visit our website.
• Error Reports: If an error occurs, our error tracking service may collect technical details about the error, such as browser information.

Without an account, your progress, results, saved items, and settings are stored only in your browser (localStorage and IndexedDB) on that device. When you sign in on that device, you can choose to keep this work in your account or discard it.

Apart from technical data and the optional analytics described below, we do not store data about visitors who are not signed in on our servers.

We use your personal data for the following purposes:

• To provide and maintain the Godwana atlas and learning service
• To save your progress and saved items and sync them across your devices
• To schedule spaced review and display your progress statistics
• To enable class features for teachers and students
• To answer your AI map assistant requests and carry out the map actions you ask for
• To authenticate you and secure your account
• To diagnose and fix technical issues
• To improve our service based on usage patterns
• To send service-related notifications (if applicable)

The legal basis for processing your data is: (a) performance of a contract when you use our service, (b) legitimate interests for security and service improvement, and (c) your consent for optional analytics.

Godwana does not use your learning data to train machine learning models.

Spaced review and practice suggestions are calculated from your own results and saved places using fixed scheduling rules.

AI map assistant requests are processed by the AI provider described in the AI section of this policy. According to that provider, prompts and responses are not used for training.

When you use the AI map assistant (available after signing in), Godwana sends your message, the current map context (such as the visible area, active layers, selection, saved items, and drafts), and, when the assistant needs it to answer, relevant data from your account, such as saved places, classes, or assignments, to TensorX. TensorX processes it on infrastructure in the European Union using a DeepSeek V4 Flash model.

TensorX states that prompts and responses are not retained, are not used for training, and are not shared with DeepSeek. Privacy Policy: https://tensorx.ai/privacy-policy/

Your conversation is kept in your browser for the current session and is not stored in Godwana's database. We only record usage information to apply your AI allowance.

If your school or organization has configured its own AI provider, requests from its members are sent to that provider instead.

If you connect an external AI assistant to Godwana, the data you allow it to access is processed by that assistant's provider under its own terms.

Do not include sensitive personal information in your requests.

We use the following third-party services that may process your data:

• Supabase (supabase.com): Provides authentication and database services. Your account data, learning data, and saved items are stored on Supabase servers in Frankfurt, Germany (EU). Privacy Policy: https://supabase.com/privacy
• TensorX (tensorx.ai): Processes AI map assistant requests as described above. Privacy Policy: https://tensorx.ai/privacy-policy/
• Cloudflare (cloudflare.com): We use Cloudflare for DNS, CDN/edge delivery, security, and reliable delivery of the website. Cloudflare may process technical access data such as IP address, request metadata, security events, and approximate country information. Core account and progress data are not stored with Cloudflare. Privacy Policy: https://www.cloudflare.com/privacypolicy/
• Resend (resend.com): We use Resend to send transactional emails such as account confirmations, invitations, and password resets. Resend may process recipient address, email content, and delivery metadata. Privacy Policy: https://resend.com/legal/privacy-policy
• PostHog (posthog.com): With your consent, we use PostHog to understand how visitors use our site and track product engagement. This is optional and only activated if you allow analytics and tracking. Privacy Policy: https://posthog.com/privacy
• Microsoft Clarity (clarity.microsoft.com): With your consent, we use Microsoft Clarity to understand how visitors interact with our site through session recordings and heatmaps. This is optional and only activated if you allow analytics and tracking. Privacy Policy: https://privacy.microsoft.com/privacystatement
• Google Analytics (analytics.google.com): With your consent, we use Google Analytics 4 to understand website traffic patterns and how visitors find our site. This is optional and only activated if you allow analytics and tracking. Privacy Policy: https://policies.google.com/privacy
• Sentry (sentry.io): We use Sentry for error tracking and performance monitoring. When errors occur, technical data (such as browser information and error details) may be sent to Sentry to help us fix issues. Sentry remains active for all users, including institutional accounts, as it is essential for maintaining service reliability and does not perform analytics or user profiling. Privacy Policy: https://sentry.io/privacy
• Stripe (stripe.com): If paid Godwana plans are offered and you make a purchase, Stripe processes the payment and collects payment information (such as card number, billing address, and email) directly. We do not store your full payment details on our servers. Privacy Policy: https://stripe.com/privacy

Map and data providers: To display the map and geographic information, your browser loads map tiles, map fonts, elevation data, satellite imagery, and place information directly from the following providers. They receive your IP address and the details of each request, such as the map area, zoom level, or place being looked up, and process them under their own privacy policies:

• OpenFreeMap (openfreemap.org): base map tiles and map fonts
• Mapterhorn (mapterhorn.com): elevation tiles for terrain and 3D views
• EOX IT Services (eox.at): Sentinel-2 cloudless satellite imagery
• NASA GIBS (earthdata.nasa.gov): satellite and Earth observation layers
• GEBCO (gebco.net): ocean floor relief
• Global Forest Watch (globalforestwatch.org): tree cover layers
• Google Cloud Storage (storage.googleapis.com): JRC Global Surface Water tiles
• Macrostrat (macrostrat.org): geological map tiles
• ISRIC SoilGrids (isric.org): soil maps
• WorldPop on ArcGIS (worldpop.arcgis.com): population density imagery
• NOAA National Centers for Environmental Information (ncei.noaa.gov): elevation samples for elevation profiles
• U.S. Geological Survey (earthquake.usgs.gov): earthquake data
• World Bank API (worldbank.org): country indicators
• Wikidata and Wikipedia (Wikimedia Foundation): place summaries, facts, and images

If you add a map data source from a web address, your browser loads that data directly from the server you entered.

We use cookies and similar technologies as follows:

• Essential Cookies: Required for authentication and basic functionality. These cannot be disabled.
• Analytics and Session Recording: Optional analytics and replay tools such as PostHog, Microsoft Clarity, and Google Analytics are only activated after explicit consent where required. These services are completely disabled for users signed in with institutional accounts (schools and organizations) — no analytics data is collected or transmitted.
• Local Storage: We use IndexedDB and localStorage for app functionality and settings. This data remains on your device.

You can manage your tracking preferences at any time in Settings, on the Trackers page, or by adjusting your browser settings.

When we advertise on Google, we measure which ads lead to sign-ups. This is optional and only activated after consent where required.

• Google Ads (ads.google.com): Google Ads imports sign-up events from Google Analytics. Privacy Policy: https://policies.google.com/privacy

We count a sign-up once, when the form is sent and before anyone is signed in, including sign-ups for a school account, and we count email confirmations of individual accounts. Nothing is tracked once someone is signed in with a school account.

We retain your personal data only as long as necessary:

• Account data: Kept while your account is active
• Learning data and saved items: Kept while your account is active
• Error logs: Retained for up to 90 days for debugging purposes
• Usage records (which of our apps you used on which days): Deleted after 13 months

Data stored in your browser without an account stays on your device until you delete it, for example by clearing your browser's site data.

Inactive registered accounts may be deleted after an extended period of inactivity. We will attempt to notify you via the email associated with your account before any deletion.

When you delete your account, all your personal data is permanently deleted immediately from our systems. Some anonymized or aggregated data that cannot identify you may be retained for statistical purposes.

Your data may be processed in countries outside your country of residence, including the United States and European Union, where our service providers operate.

We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by the European Commission where required.

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Row-level security in our database
• Regular security updates and monitoring

To protect the privacy and personal data of students and other users, we may temporarily restrict accounts, roles, permissions, or access to data where this is necessary to prevent unauthorized access, respond to a sufficiently substantiated suspicion of misuse, or maintain the confidentiality, integrity, availability, and resilience of our systems.

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Request that we limit how we use your data
• Right to Data Portability: Request your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for optional processing (like analytics) at any time

To exercise any of these rights, please contact us at contact[at]steadygo.app. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.

You can delete your account at any time through the account settings page. Upon deletion:

• Your account and the Godwana data linked to it are permanently deleted
• Your learning progress, results, and saved items are removed
• Any class memberships are terminated
• Limited records may remain where legally required, and encrypted backups may persist until their normal rotation (see Data Retention)
• This action cannot be undone

Data stored in your browser may remain on your device until you clear your browser's site data.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the 'Last Updated' date.

We encourage you to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Email: contact[at]steadygo.app
• Website: godwana.steadygo.app