Privacy Policy

Effective October 13, 2026 · Version 2026-10-13

This Privacy Policy explains how LastNight LLC (“LastNight”, “we”, “us”), the operator of GeoPilot, collects, uses and shares information when you use the GeoPilot app for Mac, the GeoPilot Go app for iPhone, the geopilot.shop website and related services (the “Service”). It is part of our Terms of Service.

The short version: we collect what we need to run your account and subscription: your email, your devices' identifiers and names, and your subscription status. We never receive the locations you set, your Apple ID password, or your card number. We don't sell or share your personal information, and we don't use ads or tracking cookies.

1. Information we collect

Information you give us

• Email address, to create your account and sign you in with one-time codes, and to contact you about your account.
• Apple ID email address (optional). If you sign in to your Apple ID inside GeoPilot (not through Xcode), we may store that email address with your account so other Macs you use can suggest it. We never receive or store your Apple ID password through our servers.
• Messages you send us, such as support emails and any diagnostics you choose to send.

Information collected automatically

• Device information: for each Mac you use, a hashed machine identifier, its name (for example “Jane's MacBook Air”) and the GeoPilot version; for each iPhone, a one-way hashed identifier derived from its unique device ID, and its model name (for example “iPhone 16 Pro”). We use these to enforce your plan's device limits and show your devices to you.
• Account and session data: sign-in sessions, when your account, devices and sessions were created and last used, and records of when you accepted these policies.
• Sign-in codes: stored only as salted hashes, and deleted about a day after they expire.
• Network data: your IP address, used briefly to prevent abuse (rate limiting) and kept for about two hours, plus standard request logs kept by our hosting provider.
• Update checks: your app version and Mac type, when GeoPilot checks for updates.

Information from others

• Stripe (payments) tells us your subscription status, plan, add-ons, renewal dates and a customer identifier. Stripe collects your payment details directly; we don't receive your full card number.

2. Information we do not collect

• The locations you set or simulate, your trips, searches or real location. These stay on your devices. (Searches and routes are sent to map providers, see Section 4, not to us.)
• Your Apple ID password. With Xcode signing you sign in inside Xcode, so the password goes only to Apple. If you sign in to your Apple ID inside GeoPilot, the password goes directly to Apple and, only if you choose “Remember on this Mac”, is stored in your Mac's own Keychain, never on our servers.
• Your contacts, photos, messages, browsing, or the contents of your devices.

3. How we use information

• To provide the Service: create and secure your account, sign you in, process your subscription, link your devices, enforce plan limits, and deliver updates.
• To communicate with you: sign-in codes, account and billing messages, important changes, and support replies. We don't send marketing email without your consent.
• To keep the Service safe: prevent fraud and abuse, enforce our Terms, and fix problems.
• To comply with law and protect our rights.

If you are in the European Economic Area, the UK or Switzerland, our legal bases are: performing our contract with you (running your account and subscription), our legitimate interests (security, abuse prevention, improving the Service), complying with legal obligations, and your consent where we ask for it.

4. How information is shared

We share information only with service providers that help us run the Service, under contracts that limit how they can use it, or as required by law:

• Cloudflare: hosts our servers, database, downloads and website.
• Stripe: payments, subscriptions and invoices.
• Resend: delivers sign-in code emails.

Some features send information directly from your device to third parties, under their own privacy policies:

• Apple: when GeoPilot installs or refreshes GeoPilot Go, Xcode (or GeoPilot on your behalf) uses your Apple ID to register your iPhone and create signing certificates and profiles with Apple. On iPhone, place search and trip routes use Apple Maps.
• OpenStreetMap services (on the Mac app): place searches go to Nominatim, map tiles come from OpenFreeMap and OpenStreetMap, and routes come from the OSRM demo server. These services receive your search text, the map area or route requested, and your IP address.
• Anisette service (only if you sign in to your Apple ID inside GeoPilot rather than in Xcode): a third-party server provides device-identification data that Apple's sign-in requires. It does not receive your Apple ID password.
• LocalDevVPN: a separate app you install, governed by its developer's privacy policy. GeoPilot Go uses it only to connect to your own iPhone.

We may also disclose information if required by law or legal process, to protect the rights, safety or property of LastNight, our users or others, or in connection with a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Cookies and tracking

The geopilot.shop website does not use advertising or analytics cookies or trackers. The apps don't contain advertising or third-party analytics SDKs. Stripe's checkout pages may use cookies needed for payments and fraud prevention, under Stripe's policies.

6. Data stored on your devices

GeoPilot keeps some data only on your devices: your sign-in session and signing materials in the macOS or iOS Keychain, your favorite and recent places, and diagnostic logs (rounded to about 1 km). The Mac sends GeoPilot Go its pairing and account-link data directly over the USB cable, not through our servers. Deleting the apps removes most of this; Keychain items can be removed in GeoPilot's settings or with Keychain Access.

7. Retention

We keep account, device and subscription records for as long as your account exists and as needed to provide the Service. Billing records may be kept longer where required for tax, accounting or legal purposes. Sign-in codes are deleted about a day after they expire, and rate-limit records about two hours after they're created. When you delete your account, we delete or de-identify your personal information within 30 days, except where we must keep it by law, to resolve disputes, or to prevent fraud.

8. Security

We use encryption in transit (HTTPS), hashed sign-in codes and session tokens, signed licenses, and access controls. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

9. Your rights and choices

• Access, correction, deletion and portability. You can ask for a copy of your information, ask us to correct it, or ask us to delete your account and data, by emailing support@geopilot.shop from your account email. We may need to verify your identity. Deleting your account doesn't cancel a Stripe subscription by itself, so cancel it first.
• California residents (CCPA/CPRA): you have the right to know, access, correct and delete your personal information, and to opt out of its sale or sharing (we don't sell or share it). We won't discriminate against you for using these rights. You may use an authorized agent. The categories we collect are identifiers (email, device identifiers, IP address), commercial information (subscription records), and internet activity (sign-in and update requests), for the purposes in Section 3, from the sources in Section 1, shared with the service providers in Section 4.
• EEA/UK/Swiss residents: you also have the right to object to or restrict processing, to withdraw consent, and to complain to your local data-protection authority.

We respond to verified requests within the time required by law (generally 30–45 days).

10. International transfers

We are based in the United States, and our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

11. Children

The Service is not for anyone under 18, and we don't knowingly collect personal information from children under 16. If you believe a child has given us information, contact us and we'll delete it.

12. Changes to this policy

We may update this Privacy Policy. If we make material changes, we will notify you in the app or by email before they take effect. The effective date above shows when it last changed.

13. Contact

LastNight LLC · support@geopilot.shop