Privacy Policy

Data We Collect

Account Data: email address, display name, profile avatar, selected interests, subscription tier, and stable RevenueCat App User ID after paid access is configured.

Location Data: approximate and precise location while planning or taking tours, including participant location shared inside group tours. Home nearby suggestions request foreground location only after the user taps Enable Location. Onboarding tour planning requires users to choose a starting point and requests foreground location only after the user taps Use Current Location; users can instead select a listed city or search for a city or address.

Voice and Photo Data: audio, transcripts, and images submitted to guide, narration, speech, and visual identification features.

AI and Tour Data: prompts, generated tour stops, narration scripts, route metadata, ratings, and saved tours.

Purchase Data: subscription entitlement, tier, product, transaction, store, and lifecycle metadata after paid subscriptions are configured.

Usage Data: AI tour generation events and reservation status used to enforce the free lifetime tour limit and Premium monthly fair-use limits, plus account-level tour suggestion, onboarding chat, narration, guide chat, photo, speech, and voice-agent request events used for monthly cost and abuse limits.

Technical Data: session identifiers, request metadata, server logs, and diagnostics needed for security, rate limiting, reliability, and support.

How We Use Data

We use data to create accounts, personalize tours, generate AI-guided experiences, provide location-based navigation, support group tours, protect the service, and respond to support or privacy requests.

AI requests may be processed by Replit AI Integrations and the configured model providers used by the server.

Sharing

Group tours share participant display names, avatars, and recent participant locations with other authorized tour participants.

We do not sell personal data. Service providers may process data only as needed to operate hosting, database, AI, routing, stop photo lookup, authentication, payment, support, analytics, security, or app delivery systems.

Controls

Users can export a JSON copy of their account data in the Profile screen. The export includes account profile data, stable RevenueCat App User ID, owned tours and stops, own group-tour memberships, ratings, subscription metadata, AI tour generation usage with reservation status, and AI feature usage with feature, tier, and timestamp.

Users can delete their account in the Profile screen. Account deletion removes the account and associated owned tours, memberships, ratings, and profile data from the app database.

Account deletion does not cancel an App Store subscription. Manage or cancel active subscriptions in your App Store subscription settings.

For privacy questions or support, visit https://wanderguidetours.com/support.

Data Retention

We retain account and tour data while the account remains active. Account deletion removes the account and associated relational data from the application database.

Backups, logs, or provider-side processing records may persist for a limited period according to service-provider retention policies.

Security

Passwords are hashed before storage. Sessions use secure server-side session handling with HTTP-only cookies.

Production deployments must use HTTPS, a production SESSION_SECRET, and Replit-managed secrets for sensitive credentials.

Children's Privacy

WanderGuide Tours is not intended for children under 13. Do not use the app if you are under 13.

Contact

Email ahmad.m.aldajani@dajanidaoudi.onmicrosoft.com for account, billing, privacy, or safety support.

Updates

This policy may change as the app evolves. The current version is dated 2026-07-11.