Privacy Policy
Effective Date: December 22, 2025
Gadzooks is operated by Very Machine, Inc. ("we", "us", or "our"). Gadzooks is a location-based discovery application that combines AI-powered insights with user-generated content. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").
By using Gadzooks, you agree to the collection and use of information in accordance with this policy. If you do not agree with these terms, please do not use the Service.
1. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Display name (optional)
- Authentication credentials (stored securely)
Location Data
With your permission, we collect precise geolocation data from your device. This is essential to the Service and is used to:
- Show you places, events, and content near your current location
- Record the location of field notes you create
- Track your visits to places and expedition waypoints
- Calculate distances to points of interest
You can disable location access in your device settings, but this will significantly limit the functionality of the Service.
User-Generated Content
When you create field notes or waypoints, we collect:
- Title and description text
- Photos you capture or upload
- Precise geographic coordinates
- Timestamp of creation
- Device orientation (compass heading, pitch, roll) at the moment of capture
- Any tags or categories you assign
Both field notes and waypoints are processed by our AI systems to generate insights and integrate with the knowledge graph.
We also collect organizational structures you create:
- Collections: groups of field notes organized by theme or interest
- Expeditions: sequences of waypoints that form journeys or tours
- Engagement data: places you've viewed, visited, or marked as loved
Photos and Images
When you capture or upload photos:
- Images are stored on our servers
- EXIF metadata (location, timestamp, camera settings) may be extracted and stored
- Images may be processed by AI systems to generate insights and connections
Device Information
We automatically collect:
- Device type and operating system version
- App version
- Unique device identifiers
- IP address
- Browser type (for web access)
Usage Data
We collect information about how you use the Service:
- Features accessed and actions taken
- Search queries
- Discovery preferences (your tuning of the seven axes)
- Time spent in the app
- Crash reports and performance data
Biometric Data
If you enable biometric login (Face ID, fingerprint), the biometric data itself is stored only on your device by your operating system. We store only an encrypted token that allows us to verify your identity after successful biometric authentication. We never have access to your actual biometric data.
2. How We Use Your Information
We use collected information to:
- Provide the Service: Display nearby places, events, and user content; enable field note creation; track expedition progress
- AI Processing: Analyze your photos and text to generate insights, find connections to the knowledge graph, and surface related content
- Personalization: Remember your discovery preferences (the seven axes) and show content that matches your interests
- Build the Knowledge Graph: When you publish content publicly, it becomes part of the collective knowledge available to all users
- Improve the Service: Analyze usage patterns to fix bugs, improve features, and develop new functionality
- Communicate: Send service-related emails (account verification, security alerts, important updates)
- Process Payments: Handle subscription purchases and manage your account tier
- Prevent Abuse: Detect and prevent fraudulent, abusive, or illegal activity
3. Public vs. Private Content
The Knowledge Commons Model
Gadzooks follows a "knowledge commons" model, similar to Wikipedia and OpenStreetMap. When you contribute public content, you're adding to a shared resource that benefits everyone. This model shapes how we handle your content.
Public Content
When creating content, you choose whether to make it public or private. We encourage public contributions because Gadzooks is built on the idea that curious people sharing their discoveries makes the platform better for everyone. When you publish content publicly, you grant Gadzooks an irrevocable, perpetual, royalty-free license to use, display, and incorporate it into the knowledge graph. Public content:
- Is visible to all Gadzooks users
- Appears in search results and on the map
- Becomes part of the collective knowledge graph
- Is automatically moderated to ensure quality and safety
- May be displayed alongside AI-generated content about locations
- Cannot be edited or deleted once published (it becomes a permanent contribution)
- Will be anonymized (not deleted) if you delete your account, preserving the contribution while removing your identity
Private Content
We understand that some discoveries are personal. All users can create private field notes, expeditions, collections, and waypoints. Private content:
- Is visible only to you
- Does not appear in search results or on the map for other users
- Is not shared with the community
- May still be processed by our AI systems to provide you with personal insights
- Remains yours—we only use it to provide the Service to you
- Can be edited and deleted at any time
- Will be permanently deleted if you delete your account
Publishing Private Content (One-Way Door)
You may choose to publish private content, making it public. However, this is a one-way door: once content is made public, it cannot be made private again. When you publish, we will clearly inform you of this change. Publishing means you grant us the same irrevocable license as other public content, and it becomes a permanent contribution to the knowledge commons.
Content Moderation
All content—both public and private—is automatically moderated to maintain quality and community standards and to prevent misuse of the Service. Content that violates our terms may be removed or restricted.
4. AI Processing
Gadzooks uses artificial intelligence to enhance your experience:
- Photo Analysis: We may analyze photos you upload to identify subjects, extract text, and generate relevant insights
- Text Understanding: Your field note text may be processed to understand meaning and find connections
- Semantic Search: Your search queries are processed to understand intent and find conceptually related content
- Content Generation: AI generates descriptions and insights about places in the knowledge graph
AI processing may involve third-party AI service providers. Data sent to these providers is used solely for processing your request and is not retained by them for training purposes.
5. Information Sharing
We share your information only in these circumstances:
With Your Consent
When you publish content publicly, you consent to sharing it with other users.
Service Providers
We work with third parties who help us operate the Service:
- Cloud hosting and storage providers
- AI processing services
- Analytics services
- Payment processors
- Email delivery services
These providers are contractually obligated to protect your data and use it only for the services they provide to us.
Legal Requirements
We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers
If Gadzooks is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify you of any such change.
We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
6. Data Retention
We retain your information as follows:
- Account data: Retained while your account is active and for a reasonable period afterward
- Private content: Retained until you delete it or delete your account
- Public content: Retained permanently as part of the knowledge commons, even after account deletion
- Location history: Your engagement history (viewed, visited, loved) is retained while your account is active
- Usage data: Aggregated analytics data may be retained indefinitely; individual usage logs are typically deleted within 90 days
Account Deletion
When you delete your account:
- Private content (private field notes, expeditions, collections, waypoints) is permanently deleted
- Public content is anonymized—your identity is removed, but the contribution remains in the knowledge graph. This preserves the collective knowledge you contributed while removing any connection to you
- Your account data (email, display name, settings) is deleted within 30 days
- Engagement history (views, visits, loves) is deleted
This approach honors both your right to be forgotten and the knowledge commons model that makes Gadzooks valuable to everyone.
7. Your Rights and Choices
Access and Portability
You can request a copy of the personal data we hold about you.
Correction
You can update your account information in the app settings, or contact us to correct other data.
Deletion
You can delete private field notes, waypoints, expeditions, and collections in the app at any time. Public content cannot be deleted or edited—it is a permanent contribution to the knowledge commons. You can delete your account through Settings in the app, which will delete all private content and anonymize public content.
Location Access
You can revoke location permissions in your device settings at any time.
Marketing Communications
You can opt out of marketing emails by clicking the unsubscribe link in any marketing email.
8. California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know what personal information we collect, use, and disclose
- Right to request deletion of your personal information
- Right to opt out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your privacy rights
To exercise these rights, contact us at [email protected].
9. European Users (GDPR)
If you are in the European Economic Area, you have rights under the General Data Protection Regulation:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
Our legal basis for processing your data is:
- Contract: Processing necessary to provide the Service you requested
- Consent: For optional features like marketing communications
- Legitimate interests: For analytics, security, and service improvement
To exercise your rights or file a complaint, contact us at [email protected].
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.
11. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption of data in transit (TLS) and at rest
- Secure authentication mechanisms
- Regular security assessments
- Access controls limiting employee access to personal data
However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your data.
12. Children's Privacy
Gadzooks is not intended for users under 16 years of age. We do not knowingly collect personal information from users under 16. If we learn that we have collected information from a user under 16, we will delete it promptly. If you believe someone under 16 has provided us with personal information, please contact us at [email protected].
13. Third-Party Services
The Service may contain links to third-party websites or integrate with third-party services:
- Apple MapKit: Maps are provided by Apple. Apple's privacy policy applies to map data.
- App Stores: Downloads and payments through Apple App Store or Google Play are subject to their respective privacy policies.
- Event Data: Information about events may come from third-party sources and is subject to their terms.
We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will always update the "Effective Date" at the top of this policy when changes are made. For significant changes, we will also notify you by posting a notice in the app and/or sending an email to your registered address.
Your continued use of the Service after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Very Machine, Inc.
Email: [email protected]
General support: [email protected]
This policy is governed by the laws of the State of California, USA, without regard to conflict of law principles.