GEOREAL TOOLS · EFFECTIVE 24 OCTOBER 2026

Privacy Policy

This Privacy Policy explains how Honestana, the developer and provider of geoReal Tools (also displayed in the app as geoRealTools), handles information in the app and its related account, access, billing, and support services. “We”, “us”, and “our” mean the developer operating under the Honestana brand.

Our privacy contact is abdallajava@gmail.com. Please identify geoReal Tools in your message. The public company website has a separate website privacy notice.

1. Information we access, collect, and use

Account and sign-in information: when you register or sign in, Firebase Authentication processes your email address, account identifier, authentication credentials, account creation and sign-in timestamps, and display name when supplied. Email/password registration sends your password to Firebase over an encrypted connection for authentication; the app does not save your password locally. If you choose Google sign-in, Google and Firebase process the sign-in tokens and basic profile information supplied by that provider, which can include your name, email, provider identifier, and profile image. We use account information to create and authenticate your account, recover access, and determine your free-month or paid access.
Session credentials: the app uses authentication tokens to make authenticated requests. If you stay signed in, it saves a refresh credential using platform storage through secure-storage facilities where supported. Signing out clears the app’s saved session. Google or your browser may maintain a separate provider session.
Access and purchase information: when Google Play purchases or restoration are available and used, Google Play processes checkout. Our verification service processes your app account identifier, a derived account identifier used to associate a purchase, product and plan identifiers, purchase tokens and their hashes, purchase verification timestamps, renewal/expiry, acknowledgement, refund or revocation status, and account entitlement records. This supports purchase verification, restoration, subscriptions, access control, and preventing a purchase from being assigned to multiple accounts. We do not receive your full payment-card number or banking credentials from Google Play.
Technical request information: authentication, billing, hosting, and tutorial providers receive information needed to deliver their services, such as IP address, browser or app request details, connection information, and request or error timestamps. Our backend records limited operational information such as billing error codes and response status to operate and protect the service.
Preferences: language, panel layout, introduction progress, and whether to show tips are stored on your device. They are used to remember your choices.
Drawings and screenshots: geometry work stays in the running workspace session; the current app does not upload it to our servers or provide cloud drawing storage. A workspace screenshot is generated when you request it. Saving or sharing an image sends it only to the device location, app, service, or recipient you choose. It captures the app workspace and does not require access to your device camera. Do not include student records or sensitive information in drawings you share.
Support correspondence: if you contact us, we receive your email address, message, and any attachments or app details you choose to send. We use them to reply, investigate problems, and handle privacy or deletion requests. Never send passwords, sign-in tokens, full card information, or sensitive student records.

The current app does not include advertising, advertising identifiers, Firebase Analytics, or Crashlytics integrations. It does not request access to contacts, precise location, microphone, or camera for its geometry tools. “Intelligent mode” controls instrument interaction; it does not send drawings to an AI service.

We do not sell personal or sensitive user information or use it for our own targeted advertising. We disclose information necessary for the functions described above to these providers:

Google / Firebase: Firebase Authentication handles account registration, authentication, and recovery. Google Cloud services, including Cloud Functions and Firestore where billing is enabled, process and store access and purchase-verification records. Google sign-in is optional. See Firebase privacy information and the Google Privacy Policy.
Google Play: processes purchases and subscription management and exchanges purchase-verification and status information with our billing service. Google’s store maintains its own transaction records under its policies.
YouTube / Google: opening an in-app video tutorial loads YouTube player resources, and choosing an external video link opens YouTube. The embedded player uses YouTube’s privacy-enhanced embed domain, but this does not make playback anonymous: Google can receive technical information and process playback, cookies, or identifiers under its policies. Watching a video is optional and is not required to use the geometry instruments.
Cloudflare: hosts the Honestana website, including this policy and the account-deletion page. Visiting it involves technical request processing, as described in our website privacy notice and Cloudflare’s Privacy Policy.
Email and destinations you choose: our support mailbox uses Gmail. Your email service and apps or recipients you choose when sharing handle those communications or files under their own policies.

We may disclose the minimum information necessary to comply with a binding legal obligation, protect people or the service from fraud or security threats, or transfer the service to a successor subject to applicable privacy protections and required notice. We do not publish private account or purchase information.

3. Secure handling and international processing

Account and billing requests use HTTPS encryption in transit. Authentication credentials are handled by Firebase; authenticated backend requests verify identity and restrict access to purchase records. We limit administrative access to people who need it to operate or support the service. No storage or transmission system can be guaranteed completely secure.

Google, Firebase, Cloudflare, and email providers operate internationally, so information may be processed outside your country. Their published data-protection terms describe the safeguards and transfer mechanisms that apply to their services. You can contact us with questions about where your information is handled.

4. Retention

Account data: we keep your account profile, authentication record, and access information while your account exists, until you request deletion or it is otherwise no longer needed to provide the service.
Purchase records: we keep verification and entitlement records while needed to deliver or restore purchased access. On deletion, we delete associated account data, except the minimum records needed for a specific legal obligation, unresolved payment dispute, or documented security/fraud-prevention purpose. If an exception applies to your request, we explain the data, reason, and applicable retention period in our reply; the exception is not used to retain your whole account indefinitely. Store transaction records held independently by Google are subject to Google’s retention policies.
Support and technical records: we retain correspondence while needed to answer and resolve the request, and limited technical records for operating, securing, and troubleshooting the service. We remove information when these purposes end, unless a legal obligation or active dispute requires continued retention. You may request deletion of support correspondence separately.
Local data: preferences remain until reset or removed through device/app storage controls. Workspace drawings normally end with the running session or when cleared. Exported files remain where you saved or shared them until you or the destination remove them. Provider-controlled technical logs or backups follow the applicable provider’s retention and deletion processes.

5. Account deletion and your choices

You can request permanent deletion of your geoReal Tools account and associated personal data without reinstalling the app, signing in to this website, or paying a fee. Follow the account and data deletion instructions, or email abdallajava@gmail.com with the subject “geoReal Tools account deletion”. Send the request from your registered account email where possible. If you cannot access that email, contact us for another reasonable ownership check. Do not send a password or sign-in token.

Requests are handled by the developer, rather than an automatic website form. We verify ownership, delete the authentication account and associated data from systems we control and service providers acting on our behalf, and confirm completion. Our target is to complete a verified request within 30 days, or sooner where required by law. If an extension is legally permitted and necessary, we explain the reason and expected completion date. Any narrowly necessary retention is handled as described above.

Deletion ends account access, including access linked to that account. It does not delete your Google account, exported files, recipient copies, or automatically cancel a separate Google Play subscription. You can cancel future renewals through Google Play subscriptions; cancellation is not a condition for submitting a deletion request. Uninstalling or signing out alone does not delete your account.

Depending on applicable law, you may also request access, correction, a copy, restriction, or deletion of your information, or object to processing. Where processing relies on consent, you may withdraw it for future processing. Contact our privacy email to make a request or raise a concern. You may also contact the relevant data-protection authority. Some information is necessary to authenticate you or provide paid access, so removing it can prevent those functions.

6. Children and classroom use

geoReal Tools is designed primarily as a geometry teaching and demonstration tool. Children should use it under the supervision of a parent, guardian, or authorized educator; it is not intended for children to independently create personal accounts where they cannot lawfully do so. We do not knowingly collect children’s personal information without the authorization required by applicable law. Teachers should use adult-managed accounts and avoid entering student names, school records, or other sensitive personal information. If you believe a child has provided information improperly, contact us so we can investigate and remove it as appropriate.

7. Changes and contact

We update this policy when our app or data practices change and revise the effective date above. Where required, we provide notice of material changes and obtain any necessary consent before new processing begins. Acceptance of service terms does not by itself authorize unrelated tracking or advertising.

Developer / brand: Honestana
App: geoReal Tools / geoRealTools
Privacy and deletion contact: abdallajava@gmail.com
Website: honestana.com