Privacy Policy
Last updated: November 10, 2025
TL;DR
Your location and conversation data is yours. We encrypt it, never sell it, and only use it to make citypal smarter for you. You can delete everything anytime.
1. Information We Collect
Information You Provide
- •Account Information: Email address, name (optional), authentication credentials
- •Location Data: GPS coordinates to narrate what\'s around you in real-time
- •Conversations: Your voice and text messages with citypal for context and personalization
- •Preferences: Interests (history, food, art), tour settings, accessibility needs
Automatically Collected Information
- •Usage Data: Features used, tour duration, question types
- •Device Information: Device type, OS version, app version
- •Analytics: Anonymized usage patterns to improve citypal
2. How We Use Your Information
To Make citypal Work
- ✅ Narrate what\'s around you in real-time
- ✅ Remember your interests and preferences
- ✅ Generate personalized tour routes
- ✅ Answer your questions with context
To Improve citypal
- 📊 Understand feature usage (anonymized)
- 🐛 Fix bugs and improve performance
- ✨ Develop new features
- 🤖 Train and improve our AI models
3. How We Share Your Information
🚫 What We DON\'T Do
- •We never sell your data. Not to advertisers, not to anyone.
- •We never share your location or conversations with third parties for marketing.
- •We never show you ads based on your walking habits.
What We DO Share
- •Service Providers: We use OpenAI (for AI), AWS (for hosting), and Stripe (for payments). They only process data as needed.
- •Anonymized Analytics: Aggregated, anonymized data for research (e.g., "Users ask about food 40% of the time").
- •Legal Requirements: We may disclose information if required by law.
4. Data Security
We take security seriously. Your data is:
Encrypted in transit
TLS/HTTPS
Encrypted at rest
AES-256
Secure data centers
AWS with SOC 2
Access-controlled
Only authorized team
5. Your Rights & Controls
You have full control over your data:
Access Your Data
Download all your data anytime from Settings
Edit Your Data
Update or correct any information in the app
Delete Your Data
Delete specific tours or your entire account
Export Your Data
Get a copy in machine-readable format (JSON)
To exercise these rights, go to Settings → Privacy & Data in the app, or email us at privacy@citypal.app.
6. Data Retention
- Active Accounts: We keep your data as long as your account is active.
- Deleted Accounts: Permanently deleted within 30 days (some anonymized data retained for analytics).
- Inactive Accounts: If you don\'t log in for 2+ years, we\'ll email before deleting.
7. Children's Privacy
citypal is not intended for children under 13. We do not knowingly collect data from children under 13. If we learn that we have, we will delete it immediately.
8. International Users
citypal is based in the United States. If you use citypal from outside the U.S., your data will be transferred to and processed in the U.S. We comply with GDPR for EU users and CCPA for California residents.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we\'ll update the date at the top and notify you via email or in-app notification.
10. Contact Us
Questions or concerns about privacy? We\'re here to help:
Email: privacy@citypal.app