Privacy
Privacy Policy
Effective 14 October 2026
This policy covers Geul.it, an iPhone and Android app published by TIGER LABS.
What is collected
The iPhone app collects no advertising identifier or behavioural analytics, and Geul.it collects no sign-up details. Ad data handling in the Android app is described under "Advertising (Android)" below. Drafts you write and posts you keep in Scrap are stored on your device.
Public Steem data and publishing
To show feeds, posts, comments, tags and profiles, the app calls Steem's public JSON-RPC services. If you connect an account and choose to publish, comment or vote, that account, the content and the transaction are recorded publicly on the Steem blockchain.
Your posting key
The posting key you enter when connecting an account is stored only on your device. On iPhone it is kept in the iOS keychain, tied to your device passcode. On Android it is encrypted with a non-exportable Android Keystore key and kept in app storage that is excluded from backups. Either way it is not restored to another device from a backup. The key itself is never sent to a server; it is used on the device to sign transactions. Owner and active keys are refused at the check and never stored.
Push notifications
If you turn notifications on, the information needed to deliver them is stored on a notification server operated by TIGER LABS. That is: your device push token (issued by Apple on iPhone, by Google Firebase Cloud Messaging on Android), the Steem account name notifications are for, which kinds of notification you have enabled, and a record of what has already been sent so the same notification is not delivered twice. The server uses this only to deliver notifications and does not share it with third parties.
The notification server never receives or stores a private key. Notification content comes from Steem's public data.
Turning notifications off in the app, or revoking Geul.it's notification permission in your device settings (iOS Settings or Android Settings), stops delivery. To have a stored device token and its settings deleted, write to the address below.
Images
Only when you choose to add an image to a post are the selected image and its file name sent to a Steem image hosting service. An uploaded image may appear in a public post.
Translation
On Android, article translation uses Google ML Kit on-device translation. The language models are downloaded from Google the first time you use them; the text being translated is processed on the device and is not sent to TIGER LABS servers. Google may process device and app diagnostic information to operate the ML Kit and Firebase libraries, under Google's own privacy policy.
Advertising (Android)
The Android app (1.0.5 and later) shows a Google AdMob banner at the bottom of the Wallet and Settings screens. No ads appear on feeds, articles, comments or the composer. The ad service may collect and share your IP address (which can be used to estimate approximate location), app and ad interactions, diagnostics, and identifiers such as the advertising ID and app set ID, for ad delivery, analytics and fraud prevention. Your posts, drafts, scraps and posting key are never sent to the ad service.
You can reset or delete your advertising ID in Android Settings. Where required, the app shows an ad privacy consent form, and you can revisit your choice from "Ad privacy choices" in the app's Settings. See the Google Privacy Policy ↗ for how the ad service handles data.
Reporting and blocking
When you report a post or comment, it is hidden on your device immediately and a report email (reason, content link, connected account name, app version) is drafted in your mail app. Once you send it, TIGER LABS reviews the report. The lists of blocked users and reported content are stored only on your device.
Retention and deletion
Local drafts and Scrap are removed from the device when you delete them in the app or remove the app. A connected account can be disconnected in the app, which deletes the stored posting key. Content already published to the blockchain cannot be deleted by the app, as a distributed ledger does not permit it.
Contact and changes
For privacy questions and deletion requests, write to admin@annotateshot.com. If the practices described here change, this page's effective date and content are updated.