Privacy Policy

When you create an account we store your email address, a chosen display name (optional), and the plan you signed up on. When you use the app we store the routes you save, your in-app preferences, and aggregate usage events used to monitor the service.

Your device sends GPS coordinates to our servers in real time while you have the app open and have granted location permission, so we can find points of interest near you. Coordinates are not retained beyond what is needed to answer the immediate request.

We use the data above to operate and improve the Service, deliver the features you ask for, respond to support requests, and meet legal or tax obligations. We do not sell your data.

Our legal bases for processing (GDPR Art. 6) are: your consent for location / GPS processing — which powers nearby narration, is requested when you start a guide session, and which you can decline or withdraw at any time; the performance of our contract with you to run your account and deliver the Service; our legitimate interests in keeping the Service secure and improving it; and legal obligation for tax and fraud-prevention records.

To run the Service we rely on a small set of vendors:

• Supabase — authentication and database hosting.
• Paddle.com Inc.— Merchant of Record for payments. Card details are entered on Paddle's site and never reach our servers.
• Anthropic — large-language-model inference for AI features. Conversation content is sent to Anthropic to generate responses; per their data-handling policy it is not used to train models.
• Wikimedia / OpenStreetMap — public data sources we query for POI information.
• Railway / Vercel — infrastructure hosting.

We use first-party cookies and local storage to keep you signed in and remember your in-app preferences. We do not use third-party advertising cookies. No tracking pixels, no behavioural ad networks.

Account data persists for as long as your account exists. Deleted accounts are removed from our active databases within 30 days, subject to limited retention of records required for tax or fraud compliance.

If you are based in the EU/EEA, UK, or another jurisdiction with equivalent rights, you have the right to:

• Access — receive a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — have your personal data deleted.
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — withdraw consent you have given (for example, for location) at any time, without affecting processing carried out beforehand.

To exercise any of these, email support@guidacle.com and we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority — in Norway, the Datatilsynet.

Our vendors operate servers in multiple regions including the European Economic Area and the United States. Data transfers outside your home region rely on standard contractual clauses or equivalent safeguards.

Guidacle is not intended for children under 16 and we do not knowingly collect personal information from them. If you believe a child has signed up, contact us and we will remove the account.

We may update this policy from time to time. Material changes will be communicated in-app. The effective date at the top reflects the most recent change.

Privacy questions or data-rights requests: support@guidacle.com.

The data controller for personal data processed in Guidacle is KICODE AS (org.nr 937 901 143), a company registered in Norway. Direct GDPR / data-rights requests to support@guidacle.com.