Privacy Policy
This policy explains what personal data ARA GEOSERVICES LTD ("Geode", "we") collects when you use our online geoscience learning and creation studio, why we use it, and the rights you have.
Last updated: 2026-07-13
1. Who is responsible for your data
The data controller is ARA GEOSERVICES LTD, 8 Viewfield Terrace, Dunfermline, Scotland, KY12 7HZ, United Kingdom. You can reach us about privacy at support@arageos.shop or +44 7947430752. Geode is an online-only digital subscription service; we do not sell physical goods or provide on-site services.
2. What we collect
- Account data — name, email address and authentication details when you register.
- Subscription & billing data — plan, billing interval, billing country and payment status. Card details are handled by our payment processor; we never receive or store full card numbers.
- Tool inputs — the descriptions you type about rocks, minerals, fossils and landforms, and any photos of specimens or sites you choose to upload.
- Generated outputs — the identifications, formation stories, images, cross-sections and animation briefs produced for you.
- Support data — messages you send through our contact and explorer-brief forms.
- Technical data — IP address, device and browser type, and usage events needed to run and secure the service.
3. Where the data comes from
We collect data directly from you (registration, tool use, uploads, forms) and automatically from your device (cookies and server logs). We also receive limited billing metadata from our payment processor to confirm and manage your subscription.
4. Why we use it and our legal bases
- To provide the service (identify, explain, visualise, export) — performance of our contract with you.
- To take payment and manage subscriptions — performance of a contract and our legal obligations.
- To keep the service secure and prevent abuse — our legitimate interests.
- To provide support — performance of a contract and legitimate interests.
- Optional analytics and product improvement — your consent, where required.
We do not use your inputs, uploads or generated outputs to train machine-learning models.
5. Handling of your inputs, outputs and uploads
Your typed descriptions and uploaded photos are processed only to generate your requested output. Uploaded photos are cached for up to 30 days to let you re-generate, then deleted. You can request earlier deletion of uploads and outputs at any time. Generated Field Notes and images are yours to keep and download.
6. Who we share it with
We share data only with processors who help us run the service, under contract and only as needed:
- Hosting & infrastructure — to serve the application and store data.
- Payment processing — to take subscription payments securely (they, not us, handle card data).
- Email & support — to deliver account and support messages.
- AI generation providers — where used to produce images and animations from your inputs.
We do not sell your personal data.
7. International transfers
Some processors operate outside the United Kingdom and European Economic Area. Where data is transferred internationally, we rely on appropriate safeguards such as UK/EU adequacy decisions or Standard Contractual Clauses with additional measures.
8. How long we keep it
Account and subscription records are kept while your account is active and for as long as needed to meet legal, tax and accounting obligations. Uploaded photos are kept up to 30 days. Support messages are kept up to 24 months. We delete or anonymise data when it is no longer needed.
9. Your rights (UK GDPR, EU GDPR, CCPA)
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, port your data, and withdraw consent. California residents may request access and deletion and may exercise the rights described below. To exercise any right, email support@arageos.shop. We respond within the time limits set by applicable law.
10. Do Not Sell or Share
We do not sell or share your personal information for cross-context behavioural advertising, and we have not done so in the preceding twelve months. There is nothing to opt out of, but you may still contact us with any question about your data.
11. Cookies and analytics
We use strictly necessary cookies to run the service and, with your consent where required, limited analytics cookies to understand usage. See our Cookie Policy for details.
12. Automated decisions and children
Identifications are educational estimates generated automatically; they do not have legal or similarly significant effects on you, and a human can review any concern on request. Geode is not intended for children under 13. Users aged 13–17 must have parental or guardian consent; classroom and family use should run through a teacher or guardian account.
13. Security
We use encryption in transit, access controls and reputable infrastructure providers to protect your data. No method is perfectly secure, but we work to protect your information and will notify you and regulators of a qualifying breach as required by law.
14. Complaints and contact
Contact us first at support@arageos.shop. UK and EU users also have the right to complain to their data protection authority (in the UK, the Information Commissioner's Office). This policy is governed by the law of England and Wales.