Privacy Policy

1.1 Account & Login Information

When you log in (including via QR code login), we process credentials and identifiers needed to authenticate you and maintain your session, such as your username/password and session tokens.

1.2 Session Data

We use secure, encrypted, HTTP-only session cookies to keep you signed in and to authorize access to places and audio content. These cookies store a signed session identifier and, where applicable, short-lived access and refresh tokens. They do not contain your raw password.

1.3 Usage Data

We may collect information about how you use the App, such as the places and language tracks you view or play, and general app interactions, to operate and improve the service.

1.4 Device & Local Storage Data

The App uses your browser's local storage (IndexedDB) to cache and store downloaded audio guides on your device, enabling offline playback. This data is stored locally on your device and is not automatically transmitted to our servers beyond what is required to fetch the content initially.

1.5 Information We Do Not Collect

We do not knowingly collect precise device location, payment information, or sensitive personal data through the App, unless separately disclosed to you.

We use the information described above to:

• Authenticate you and maintain a secure session
• Provide access to places, routes, and their associated audio guides
• Enable offline playback by storing downloaded audio on your device
• Maintain and improve the reliability, security, and performance of the App
• Diagnose and fix technical issues

The App uses strictly necessary cookies (session, access token, and refresh token cookies) to keep you logged in. These cookies are:

• HTTP-only — not accessible to client-side scripts
• Secure — transmitted only over HTTPS in production
• Scoped — limited to the App and expire automatically (session cookies expire after a limited period, e.g. 24 hours to 30 days depending on token type)

We also use browser local storage (IndexedDB) to store downloaded audio content for offline use. You can clear this data at any time by clearing your browser's site data for the App.

We do not sell your personal information. We may share information only:

• With service providers who help us operate the App (e.g., hosting and infrastructure providers), under obligations to protect your data
• If required by law, regulation, or legal process
• To protect the rights, property, or safety of our users or the public

We use industry-standard measures to protect your information, including encrypted session tokens (JWT-based, signed and time-limited) and secure cookie handling. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We retain account and session data only for as long as necessary to provide the service or as required by law. Session cookies expire automatically based on their configured lifetime. Locally cached audio data remains on your device until you clear it or uninstall the App.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Withdraw consent or object to certain processing
• Request a copy of your data in a portable format

To exercise these rights, please contact us using the details below.

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date above. Continued use of the App after changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us through the support channels provided within the App.