# Privacy Policy

**Last Updated: December 28, 2025**

## 1. Introduction

Welcome to Travel Guide ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the application.

## 2. Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("Personal Information").

### A. Information You Provide to Us
*   **Account Data:** When you sign in (e.g., via Google Sign-In), we collect your name, email address, and profile picture to create and manage your account.
*   **User Content:** We collect text and voice inquiries you submit to our AI guide, as well as any feedback you provide.

### B. Information We Collect Automatically
*   **Location Data (Crucial):** With your permission, we collect precise location data (GPS coordinates) to provide core features like nearby landmark recommendations and reviews. This may occur while the app is in the foreground or background, depending on your device settings.
*   **Device Information:** We collect information about your mobile device, including unique device identifiers (e.g., IDFA, Android ID), IP address, operating system, and hardware model.
*   **Usage Data:** We collect data on how you interact with the App, such as features used, time spent, and error logs.

### C. Payment Information
We process payments through third-party services (RevenueCat, Google Play Store, Apple App Store). We do not store your financial information (e.g., credit card numbers) on our servers. We receive only transaction receipts/tokens to validate your subscription status.

## 3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:
*   **Consent:** When you explicitly allow us to access your location or send you notifications.
*   **Performance of a Contract:** To provide the services you requested (e.g., account creation, premium features).
*   **Legitimate Interests:** To improve our App, prevent fraud, and ensure security.
*   **Legal Obligation:** To comply with applicable laws and regulations.

## 4. How We Use Your Data

We use the collected data for the following purposes:
*   To provide, operate, and maintain the App.
*   To improve, personalize, and expand our App.
*   To understand and analyze how you use our App.
*   To develop new products, services, features, and functionality.
*   To process your transactions and manage your orders.
*   To communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the App.
*   To find and prevent fraud.
*   To comply with legal obligations.

## 5. Sharing Your Data

We may share your information with the following third parties:

*   **Service Providers:**
    *   **Google Firebase:** For authentication, backend hosting, database storage, and analytics.
    *   **Mapbox:** To render maps and provide map data. Mapbox may collect location and usage data governed by their own privacy policy.
    *   **RevenueCat:** For subscription management and purchase validation.
    *   **Google AI:** To process your inquiries and generate travel content. **Note:** Voice and text inputs are sent to Google's cloud for processing but are not used by Google to train their models in a way that identifies you.

*   **Legal Requirements:** We may disclose your information where required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

We do **not** sell your Personal Information to third parties for monetary consideration.

## 6. International Data Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. By using the App, you consent to this transfer, specifically to servers in the United States. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

## 7. Data Retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.
*   **Account Data:** Retained until you delete your account.
*   **Usage/Log Data:** Retained for a limited period (typically up to 14 months) for analytics and security purposes.
*   **Audio/Voice Data:** Processed ephemerally for the purpose of the query and not permanently stored associated with your account.

You can request deletion of your data at any time by deleting your account within the App settings.

## 8. Your Privacy Rights

### General Rights
*   **Access and Portability:** You can request a copy of your personal data.
*   **Correction:** You can request that we correct inaccurate data.
*   **Deletion:** You can request that we delete your personal data ("Right to be Forgotten").

### CCPA/CPRA (California Residents)
If you are a California resident, you have specific rights:
*   **Right to Know:** You may request details about the categories of personal information we have collected, the sources, the business purpose, and the third parties with whom we share it.
*   **Right to Delete:** You may request deletion of your personal information, subject to certain exceptions.
*   **Right to Opt-Out of Sale/Sharing:** We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
*   **Non-Discrimination:** We will not discriminate against you for exercising your CCPA rights.

**Categories of Personal Information Collected (Last 12 Months):**
*   Identifiers (Name, Email, IP Address, Device ID)
*   Geolocation Data
*   Commercial Information (Purchase history)
*   Audio/Electronic Information (Voice commands, App interaction logs)

### GDPR (EEA/UK Residents)
In addition to the general rights above, you have the right to lodge a complaint with a Data Protection Authority (DPA) if you believe we have violated your rights.

To exercise any of these rights, please contact us at **p.loffay@gmail.com**. We will respond to your request within 30 days (GDPR) or 45 days (CCPA).

## 9. Children's Privacy

Our App is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you become aware that a child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

## 10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

## 11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

*   By email: [p.loffay@gmail.com](mailto:p.loffay@gmail.com)