GoldSighters — Privacy Policy

Last updated: 5 July 2026

Who is responsible for your data

GoldSighters is run by Kudakwashe Munjeri, an individual resident in Zimbabwe, operating in his own name. He is the data controller — the person who decides what is collected and why, and the person answerable for it. Reach him at kkmunjeri83@gmail.com.

This is expected to become a registered company, Dajoma Group, after the first release. We will tell you before that happens — a change of who controls your data is not something to slip into a policy update, and until it is done this page will keep saying "an individual", because that is what is true.

Summary

GoldSighters works entirely on your device and does not require an account. If you do not sign in, we collect nothing — unless you choose to turn on "share anonymous usage" (off by default), which sends anonymous, non-identifying usage data only. Signing in is optional and only enables cloud backup/sync, real-time data updates, and (later) alerts — see below for exactly what that stores. We never sell or share your data with third parties.

What the app stores on your device (always, no account)

• Your settings (disclaimer acknowledgement, plain/expert mode, optional gold-price override).
• Sites you analyse and their reliability scores; your provider ratings and any providers you add.
• If you own a surveyed claim and have signed in, a copy of your own survey — so it still works when you have no signal, which is most of why this app exists. The copy is tied to your account, so nobody else signing in on the same phone can open it, and it lapses after 30 days without a connection.
• These are held in local app storage on your device.

What we store on our server (only if you sign in)

• Your email address (used solely to sign you in and secure your account), and the name you enter when registering, so the app can address you by it.
• The profile details you choose at registration: your role (miner, consultant, investor, surveyor), the region you work in, and whether you hold a claim. These tailor what the app shows you. You can leave them blank.
• The data you choose to sync: the sites you analysed and your provider ratings — so they are backed up and available on your other devices.
• Basic account timestamps (when you created the account and last signed in).
• Only if you turn on alerts: your phone number and the alert topics you chose, used solely to send the SMS/WhatsApp alerts you requested. Turning alerts off deletes the number. Alerts are entirely optional.

This is stored on Supabase (our backend provider) with row-level security so only you (and the app owner, for support/administration) can access your rows. It is encrypted in transit. You can sign out at any time, and deleting your account removes it.

Anonymous usage data (only if you opt in)

You can turn on "share anonymous usage" on the welcome screen or in Settings. It is off by default. When on, the app sends first-party, anonymous usage data to help us improve it:

• A random device identifier that is not your name, email, phone or account — and is never linked to your account.
• Which features you use and how far you get (for example: onboarding completed, an analysis run, an account created).
• Which regions are analysed, at a deliberately coarse ~11 km grid. Your precise coordinates are snapped to this grid on your device; the exact point is not part of this analytics data.

This data contains no personal information, is used only by us to improve the app, is never sold or shared, and you can turn it off at any time in Settings. There are no third-party analytics, advertising, or tracking SDKs.

Nothing you store is shown to another user unless you choose a feature whose point is to show it. Your saved sites, your ratings and your notes are readable by you and by the app's administrator for support, and by nobody else. Three features exist to put something of yours in front of another person, and each one is your explicit act:

• Sharing a claim composes a WhatsApp or SMS message for you to send to someone you choose. Nothing is sent until you send it.
• Equipment hire is a marketplace: if you post a listing, its title, category, description, region, town and rate are visible to signed-in users — that is what a listing is for. Phone numbers are different: your number is held in a separate, locked table and released to the other party only when a hire request is accepted — the requester's number to the owner, and the owner's number to the requester, neither before. That release gate is enforced in the database, not by the app's good manners. You can report a listing to us; reports go to the administrator, never to the person reported.
• Requesting sample collection sends a provider request that carries only a coarse ~11 km grid cell — see the coordinates section below for exactly what leaves your device.

What the app does NOT do

• No third-party analytics, advertising, or tracking SDKs — any usage data is first-party and opt-in, as described above.
• No ads, and your data is never sold or shared with third parties.
• No access to your contacts, camera, or microphone — the app never requests them.
• Location only on request: if you switch on the optional live map and tap “Show where I am”, the app asks for your location once, while it is open, to put a dot on the map. That position stays on your phone: it is not sent to us, not saved, and never collected in the background.
• Geology lookups (optional, off by default): if you switch on “Geology under my feet”, the app asks the free Macrostrat geological database (macrostrat.org, University of Wisconsin–Madison) what rock is mapped near a point. Only a rounded ~5 km grid cell is sent, never the exact point, and no account or device identifier goes with it.
• We never receive the coordinates you analyse. They stay on your device: a site you save reaches us only as a coarse ~11 km grid cell, and the table it goes into has no column that could hold a precise point. A coordinate you entered leaves your device in exactly two cases, both started by you. If you tap Share on a claim, it goes into the WhatsApp or SMS message you send, to a person you choose. Requesting sample collection stores the sampling point with us in a separate, locked table so a collection provider can eventually be told where to go: the request the provider sees carries only the coarse ~11 km cell, and the precise point is readable by you alone until you accept an arrangement — its release is gated on that acceptance in the database itself. A cancelled request goes no further: the stored point stays readable by you alone, and deleting your account removes it.
• Two tables hold precise points, and only two. If you own a surveyed claim, we hold the survey you gave us — boundary, reef positions, shafts — and serve it back to you and to nobody else; nothing you type into the app reaches it. And if you request sample collection, we hold the sampling point you typed in for that purpose, under the acceptance gate described above. No other user can read either.
• What does reach our servers is a coarse ~11 km grid cell — for a site you save while signed in, and again in anonymous usage data if you opt in to it.

Counting visits to our website

We count how many people reach the website and which page they land on, so we know whether anyone is finding it. What gets recorded is: the name of the thing that happened (a page view, a button press), the page path, any campaign tags already in the link you followed, and the calendar day — nothing else.

There is deliberately no cookie, no identifier of any kind, no IP address, no device or browser details, and no time more precise than the day. That is enforced by the database itself: the table has no column that could hold any of them. Two visits cannot be linked to each other, and none can be linked to you — not by us, and not by anyone who obtained the table. That is also why you are not being asked to accept anything: there is nothing stored that consent would be about.

The website waitlist

If you enter your email address into the "notify me at launch" form on our website, we store that address so we can email you once, when the app launches. That is the only use; we do not add you to a marketing list, and we do not pass it to anyone. Ask us at the address below and we will delete it. This is separate from the app — you can install and use GoldSighters without ever giving us an email here.

Documents you import

When you import a PDF, text or CSV file, it is read on your device to extract coordinates. The file and its contents are never uploaded. Optical character recognition for scanned documents is intentionally not built in, so no document leaves your device.

Network use

The app works offline: every analysis, citation and advisor answer runs from data bundled inside it. It does make some network requests, and this section used to understate them, so here is the complete list.

• The live gold price. Unless you are in data-saver mode, the ticker asks api.gold-api.com for the current spot price. Like any web request this reveals your IP address to that service. It carries nothing else — no account, no identifier, no coordinate — and switching on data-saver mode stops it entirely.
• Signing in and syncing (only if you have an account): requests to our own backend, described in the sections above.
• Anonymous usage data (only if you opt in): described above.
• Tapping an external source link, which opens your browser.
• A PDF-reading helper, loaded only when you import a PDF on the web version.

Your precise coordinates are in none of them. There was previously one exception — a "Share as QR" button that sent the encoded coordinate to a third-party QR service to draw the image. That has been removed. Sharing works by a short code you send yourself over WhatsApp or SMS, which touches no server at all.

Why we are allowed to hold each of these

Zimbabwe's Cyber and Data Protection Act [Chapter 11:12] requires a lawful reason for holding personal information. Ours, item by item:

• Your name, email and phone — your consent, given by choosing to register. You can withdraw it by deleting your account, and nothing about the analysis tools stops working if you never register at all.
• Your saved sites and ratings — performing the service you asked for. Backing them up is the thing you signed in to get.
• Alert phone numbers — your consent, given per channel, and withdrawn the moment you turn alerts off, which deletes the number.
• Anonymous usage data — your consent, off by default, and reversible in Settings at any time.
• Website visit counts — not personal information at all. No identifier is stored, so there is nothing that could be linked to you.

How long we keep it

• Anonymous usage data: 180 days, then deleted automatically by a scheduled job — not on request, not when someone remembers.
• Alert delivery records: 180 days, same automatic deletion.
• Your account and everything attached to it: until you delete it. We do not expire accounts or quietly purge inactive ones.
• Anything on your device: until you clear it or uninstall. We cannot reach it and neither can anyone else.

Your rights, and how to use them

You may ask what we hold about you, ask us to correct it, ask us to delete it, or object to us holding it at all. Email kkmunjeri83@gmail.com and we will respond within 30 days. There is no form and no fee.

You do not have to ask for deletion — you can do it yourself, immediately, in the app under Account → Delete account, or from our deletion page. That removes your server-side data outright; we are not copied in and there is nothing to approve.

If you think we have handled your information badly, tell us first — but you are also entitled to complain to Zimbabwe's Postal and Telecommunications Regulatory Authority (POTRAZ), which supervises data protection.

Where your data is held, and what happens if something goes wrong

Server-side data lives with Supabase in Ireland (eu-west-1). It is encrypted in transit. Row-level security means each account can read only its own rows.

If information is lost, exposed or stolen, we will tell the people affected and POTRAZ without undue delay and within 72 hours of discovering it, describing what happened, what was involved, and what to do about it. We would rather tell you about a breach we are unsure of than stay quiet about one we are.

Data deletion

Uninstalling the app removes everything it stored on your device. Inside the app you can remove saved claims individually.

Children

The app is a professional reference tool and is not directed at children.

Not financial, legal or geological advice

GoldSighters is an evidence-based screening tool. Its estimates and likelihood percentages are not guarantees, not a geological survey, and not a resource statement. Always verify with assays, a licensed surveyor, and professional advice before making decisions.

Contact

Questions: kkmunjeri83@gmail.com

Google Play / App Store data declarations

These are the categories as the stores name them, so that what you read here and what we declare to Google and Apple are the same list. Every one is optional — the app analyses coordinates, cites its sources and answers questions without any of them.

• Name, email address, phone number — only if you register. The phone number is only stored if you turn on alerts.
• Approximate location — the coarse (~11 km) grid cell of a site you save while signed in, the same cell in anonymous usage data if you opt in, and the city you type when you add a service provider of your own. Never the coordinates you analyse: those are saved on your device, in your own analysis history, and the table they sync to has no column that could hold a precise point. A claim survey you gave us is the one exception, and it is returned only to you.
• App activity and user-generated content — the sites you choose to sync, your provider ratings and any note you write with them, and the details of any service provider you add yourself.
• Device identifier — only if you opt in to anonymous usage data. It is a random id generated on your device, tied to no account, and it is not an advertising identifier. We declare it because it is persistent, even though it identifies no one.
• Not collected: precise location, contacts, calendar, photos, files, messages, health data, financial data, or any advertising identifier.
• Shared with other companies: none. Our hosting provider (Supabase) and our SMS/WhatsApp provider (Twilio) process data on our instruction to run the service; they do not receive it for their own use. Nothing goes to any other company. Sharing a claim sends a message to a person you pick, through your own WhatsApp or SMS — no company of ours is involved.
• Encrypted in transit: yes.
• You can delete it: yes — Account → Delete account removes your server-side data; uninstalling clears what is on your device.