TRUST, WRITTEN DOWN
Privacy by default.
This launch draft reflects the product’s current local-first design. It is not the final legal notice until the publishing entity, support address, data processors, and production endpoints are verified.
What works without an account
The native app can run its starter route, maps, review schedule, and local progress offline. It does not need precise location or contacts to teach geography.
Optional measurement
The launch site keeps measurement off until you choose it. If you allow it, a random installation identifier is stored locally and sent as a one-way hash with allowlisted page and CTA events. Bounded UTM source/medium/campaign values and a referrer hostname bucket may be included for aggregate campaign reporting. A Cloudflare Turnstile token may be used to limit automated abuse; it is not a learner profile.
You can choose “Not now,” reopen Privacy choices, or revoke consent at any time. Revocation removes the local installation identifier and prevents unsent marketing events from being sent. The site does not request email, contacts, precise location, advertising IDs, or free-form learning content.
Competition and sync
Friends, local, and global placement are opt-in product surfaces. The current build shows a clearly labeled local prototype; live account sync and server authorization are not yet active.
Purchases
Apple handles App Store payment and StoreKit entitlement state. Product configuration, retention, refunds, and deletion/export workflows are launch gates.