waytorch ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our waytorch mobile application (the "App"). This policy applies to all users of our AI-powered tour guide service.
By using waytorch, you consent to the data practices described in this Privacy Policy.
2. Information We Collect
2.1 Personal Information
Account Information:
- Email address (required for account creation)
- Display name and profile photo (optional, may be imported from Google Sign-In)
- Username (optional, 3-20 characters)
- Bio and social profile information (optional)
- Account preferences and settings
Authentication Data:
- Login credentials when using email/password authentication
- Google account information when using Google Sign-In (email, name, profile photo)
- Authentication tokens and session data managed by Firebase
2.2 Location Information
We collect location data to provide core tour functionality:
- Precise GPS coordinates (latitude and longitude)
- Current location for personalized tour recommendations
- Tour destinations and waypoints
- Navigation routes and directions
- Location names and addresses through geocoding
- Background location data when the app is in use for tour navigation
2.3 Device Permissions and Data
Camera and Media:
- Camera access for AI-powered landmark recognition and image analysis
- Photos captured for vision-based tour assistance
- Temporary image data for processing (automatically deleted after analysis)
Audio Data:
- Microphone access for voice commands and speech-to-text conversion
- Audio recordings for tour questions and interactions
- Speech transcripts stored with conversation history
- Text-to-speech audio output preferences
Device Information:
- Device type, operating system, and app version
- Device capabilities (camera, microphone availability)
- App performance and crash data
2.4 Usage and Interaction Data
Tour and Chat Data:
- Conversation history with AI tour guides
- Tour creation requests and generated itineraries
- Questions asked and AI responses received
- Voice interaction transcripts
- Tour ratings, reviews, and feedback
Social Features Data (Optional):
- Social profile information and preferences
- Follow/follower relationships
- Posts, notes, and shared content
- Comments and interactions on social posts
- Visibility and sharing preferences
2.5 Payment Information
Financial Transactions (Processed by Stripe):
- Payment method information (credit card, digital wallets)
- Purchase history and transaction records
- Credit balance and usage tracking
- Billing address and payment preferences
Note: We do not store your payment card details. All payment processing is handled securely by Stripe.
3. How We Use Your Information
3.1 Core App Functionality
- Create personalized AI-powered tour itineraries
- Provide location-based recommendations and navigation
- Process voice commands and questions during tours
- Analyze images for landmark recognition and information
- Manage your account and app preferences
3.2 AI and Machine Learning Services
- Generate tour content using Google Gemini AI
- Process images through OpenAI Vision API
- Provide conversational AI assistance during tours
- Improve AI responses based on your interactions
3.3 Social Features (Optional)
- Enable social sharing of tours and experiences
- Connect you with other users and their content
- Display your activity and tour history to followers
- Facilitate social interactions and community features
3.4 Service Improvement
- Analyze app usage patterns to improve functionality
- Monitor app performance and fix technical issues
- Develop new features based on user needs
- Ensure security and prevent abuse
4. Information Sharing and Disclosure
4.1 AI Service Providers
Google (Gemini AI):
- Tour creation prompts and location information
- Conversation data for generating responses
- Search queries for enhanced tour content
OpenAI:
- Images captured for vision analysis
- Chat messages for conversational AI
- Voice transcripts for processing
4.2 Third-Party Services
Google Maps Platform:
- Location data for mapping and navigation
- Place searches and business information requests
- Route calculations and directions
Stripe:
- Payment processing and transaction data
- Purchase history and billing information
- Credit balance and usage tracking
Firebase/Google Cloud:
- All app data is stored and processed through Google's Firebase platform
- User authentication and session management
- Real-time data synchronization
- Analytics and performance monitoring
4.3 Legal Requirements
We may disclose your information when required by law or in good faith belief that such disclosure is necessary to:
- Comply with legal obligations or court orders
- Protect our rights, property, or safety
- Prevent fraud or security threats
- Investigate potential violations of our terms of service
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.
5. Data Storage and Security
5.1 Data Storage
- All user data is stored securely in Google Cloud Firestore
- Images temporarily processed for AI analysis, then automatically deleted
- Conversation history and tour data retained for app functionality
- Payment information processed and stored by Stripe according to their security standards
5.2 Security Measures
- Firebase App Check for API security and abuse prevention
- Firestore security rules ensuring users can only access their own data
- Encrypted data transmission using HTTPS/TLS protocols
- Regular security assessments and updates
- Restricted access to user data within our organization
5.3 Data Isolation
- Users can only access their own data and content
- Social sharing requires explicit user consent
- Strict access controls prevent unauthorized data access
6. Your Privacy Rights and Choices
6.1 Account Control
- Access and update your personal information through app settings
- Delete your tours, notes, and social posts
- Modify privacy and sharing preferences
- Deactivate or delete your account
6.2 Location Data Control
- Enable or disable location sharing in app settings
- Control background location access through device settings
- Opt out of location-based recommendations
6.3 Communication Preferences
- Manage notification settings and preferences
- Opt out of promotional communications
- Control social interaction notifications
6.4 Data Portability
- Request a copy of your personal data
- Export your tours and conversation history
- Transfer your data to another service (where technically feasible)
7. Data Retention
7.1 Retention Periods
- Account information: Retained while your account is active
- Conversation history: Retained for app functionality and user experience
- Location data: Retained for tour history and recommendations
- Payment records: Retained for legal and accounting requirements (typically 7 years)
- Social content: Retained until deleted by user
7.2 Data Deletion
- You can delete specific tours, notes, and social posts at any time
- Account deletion removes your personal data from our systems
- Some data may be retained for legal obligations or legitimate business purposes
- Backup copies may persist for up to 90 days before complete deletion
8. Children's Privacy
waytorch is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take steps to remove such information.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including the United States, where our AI service providers and cloud infrastructure operate. We ensure appropriate safeguards are in place to protect your data during international transfers, in compliance with applicable data protection laws.
10. California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information is collected and how it's used
- Request deletion of your personal information
- Opt out of the sale of personal information (we do not sell personal information)
- Receive equal service and pricing regardless of privacy choices
To exercise these rights, please contact us using the information provided below.
11. European Privacy Rights (GDPR)
If you are located in the European Economic Area, you have the right to:
- Access your personal data
- Rectify inaccurate personal data
- Erase your personal data
- Restrict processing of your personal data
- Data portability
- Object to processing
- Withdraw consent at any time
We process your data based on legitimate interests, contractual necessity, and your consent. To exercise your rights or file a complaint with a supervisory authority, please contact us.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy in the app
- Sending you an email notification
- Displaying a prominent notice in the app
Your continued use of waytorch after any changes indicates your acceptance of the updated Privacy Policy.
13. Contact Us
Effective Date: This Privacy Policy is effective as of July 21, 2025 and was last updated on July 21, 2025.
By using waytorch, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.