Privacy policy
Last updated: January 1, 2026
What we collect
We collect information you provide directly: your name, email address, profile photo, and content you create — posts, tours, and ratings. When you choose to tag a location on a post or tour, that location is stored as part of that piece of content. We also collect standard technical data (browser type, device type, session identifiers) to keep the platform secure and functioning correctly.
Location data — two distinct types
We use location data in two separate and distinct ways, both of which are entirely optional and user-initiated. First, post and tour location tags: when you choose to tag a location on a post or tour, that place name and coordinates are stored as part of that piece of content. They are used to make your content discoverable in location-based search and to serve contextual ads relevant to that location alongside search results. You can remove a tag by editing the post at any time. Second, search location: if you enable 'Use my location for search' in Settings, we request your device's current coordinates at the moment you run a search query. These coordinates are used only to rank search results by proximity for that single query — they are not stored after the search completes, not linked to your account profile, and not used for advertising. We never access your device location in the background, and we never use IP-based location inference.
How we use your data
Your account data is used to operate the platform — publishing your content, enabling social features such as following, messaging, and ratings, and managing your account. Your email address is used for transactional communications (security alerts, password resets, booking confirmations) and, with your separate consent, for marketing emails. We do not build a cross-session behavioural profile of you for advertising, and we do not sell your personal data to third parties.
How advertising works
Advertising on this platform is served by Google AdSense. By default ads may be personalised based on signals Google uses across its advertising network. You can switch to non-personalised ads at any time in Settings — ads will still be displayed but will be matched to the content of your current search and the locations in the results rather than to a profile of your behaviour. We do not share personal data directly with advertisers. We do not use cross-site tracking, retargeting pixels, or data brokers to serve our own ads.
Who we share data with
We use a small number of third-party service providers to operate the platform, including cloud infrastructure (Google Cloud / Firebase) and email delivery services. Each provider has a Data Processing Agreement in place and is permitted only to process your data as necessary to deliver their specific service. We do not sell personal data. We do not share personal data with advertisers or ad networks.
Your rights
Depending on your location, you have rights including: access to your data (use the data download feature in Settings), correction of inaccurate data (edit your profile), erasure (delete your account), restriction of processing, and the right to object to personalised advertising. You can withdraw email marketing consent at any time through Settings or the unsubscribe link in any marketing email. To exercise any other right, contact privacy@yourapp.com. We will respond within 30 days.
Data retention
Your account data is kept while your account is active. Location tags are retained as part of the post they are attached to until you delete that post or your account. Email marketing consent records are kept for 7 years after consent is given or withdrawn, as required by applicable law. Server logs are retained for 90 days. On account deletion, all personal data is permanently removed within 30 days, except where retention is required by law.
Contact us
For privacy questions or to exercise your rights, contact us at privacy@yourapp.com. For users in the EU/EEA, our EU representative can be reached at eu-rep@yourapp.com. Complaints may also be submitted to your local data protection authority — in the EU, this is the authority in the member state where you live or work.