Privacy Policy
Draft for review. Fill in your registered legal entity name/address and privacy contact, and confirm with a qualified lawyer before publishing. Keep the sub-processor list (§5) current.
This Privacy Policy explains what information TellTours (“we”, “us”, “our”) collects, how and why we use it, who we share it with, and the rights and choices you have. It applies to the TellTours app and website. We are the “controller” of your personal data. We aim to comply with the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy laws.
1. Information we collect
- Account details you provide: email, password (stored only as a secure hash by our authentication provider), display name, username, date of birth, and optionally a profile photo, interests, and home city.
- Activity in the app: places visited, tours saved, badges earned, and your settings.
- Technical data: device and app version, language, approximate region, and diagnostic logs needed to run and secure the Service.
2. How we use your information
To create and secure your account; provide and personalize tours, narration, and recommendations; track badges; sync your profile and history across your devices; send service and security messages (such as email verification and password resets); prevent fraud and abuse; and comply with legal obligations.
3. Legal bases (EEA/UK users)
We process your data to perform our contract with you (providing the Service), with your consent (e.g. precise location and optional profile fields, which you can withdraw at any time), to meet legal obligations, and for our legitimate interests in operating, securing, and improving the Service in a way that does not override your rights.
4. Location data
With your permission, we use your device location to find and narrate nearby places as you travel, and your home city to tailor recommendations. You can turn location off at any time in your device settings. We do not sell your location data.
5. Sharing & service providers
We do not sell your personal information. We share it only with service providers (“processors”) who help us run the Service under contract:
| Provider | Purpose |
|---|---|
| Google Cloud / Firebase | Authentication, database, storage, hosting |
| Resend | Transactional email delivery |
| Google Maps Platform | Maps and place data |
| AI / text-to-speech providers | Generating tour narration |
We may also disclose data where required by law or to protect rights and safety.
6. International transfers
Our providers may process data in the United States and other countries whose data-protection laws may differ from yours. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
7. Data retention
We keep your personal data while your account is active and as needed to provide the Service. When you delete your account, we permanently delete your profile, photo, saved tours, badges, and history, except where we must retain limited records to comply with legal obligations or resolve disputes.
8. Security
Your data is stored with Google Cloud / Firebase and transmitted over encrypted (TLS) connections. Passwords are handled by our authentication provider and never stored by us in plain text. We limit access to the information needed to run the Service. No system is perfectly secure, but we work to protect your data.
9. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your data, to object to certain processing, and to withdraw consent. California residents have the right to know, delete, correct, and to opt out of “sale”/“sharing” (we do neither), and not to be discriminated against for exercising these rights. You can edit your profile and delete your account in-app at any time, or contact us at info@telltours.com to exercise any right. You may also complain to your local data-protection authority.
10. Children
TellTours is intended for people aged 16 and older. We do not knowingly collect personal information from children under 16. If you believe a child has provided us data, contact info@telltours.com and we will delete it.
11. Cookies & website analytics
On our website (telltours.com) we use a small number of cookies and Google Analytics 4 to understand how visitors use the site so we can improve it. Analytics runs only with your consent through the cookie banner, IP addresses are anonymized, and you can decline or change your choice at any time. We do not use cookies for advertising and we do not sell the data they collect. The TellTours mobile app does not use cookies.
12. Changes & contact
We may update this Policy; we’ll revise the “Effective” date and, for material changes, notify you in the app or by email. For any privacy question or request, contact us at info@telltours.com.