1. Who we are
Tours & Travel, Inc. (“Tours & Travel,” “we,” “us,” or “our”) develops digital travel products, including mobile applications, websites, audio guides, maps, and related services (collectively, the “Services”). For purposes of applicable data protection law, Tours & Travel is the controller of personal data described in this Policy unless another party is identified as the controller.
Questions or privacy requests may be sent to hello@toursandtravel.app. Our principal place of business is in San Jose, California, United States.
2. Our privacy-first approach
Our current products are designed to work without Tours & Travel creating a personal travel profile. When location is needed for navigation or nearby content, it should be processed on your device whenever technically possible. We do not sell personal data, retain a history of your movements for advertising, or use precise location for cross-context behavioural advertising.
“We do not store your data” means we do not maintain a Tours & Travel database containing your identity, travel history, precise routes, contacts, photos, or listening activity merely because you use an app. Some limited information may nevertheless be processed when it is technically necessary, when you contact us, when a purchase is verified, when the law requires it, or by third-party platforms as explained below.
3. Information processed on your device
Depending on the product and the permissions you choose, an app may process the following locally on your device:
- Precise or approximate location to show your position, provide directions, trigger nearby content, or support an audio tour.
- Downloaded content and preferences such as maps, audio files, language, favourites, and playback progress.
- Notification settings when you choose to receive reminders or travel-related updates.
Local processing does not mean that Tours & Travel receives or stores that information. You can control permissions through your device settings. Some features may not work if a necessary permission is disabled.
4. Limited information we may receive
- Messages and support requests. If you email us, we receive the address and information you choose to provide.
- Purchase verification. Apple, Google, or another marketplace may provide a transaction identifier, product purchased, purchase status, country, or receipt token. We do not receive your full payment-card details.
- Diagnostics. If enabled by you or supplied by the app marketplace, we may receive limited crash reports, app version, device model, operating-system version, or aggregated performance information.
- Website security logs. Our hosting provider may temporarily process IP address, browser type, timestamps, requested pages, and security events to deliver and protect the website.
- Information required by law. We may preserve information when reasonably necessary to comply with legal obligations, resolve disputes, prevent fraud, or protect users and the Services.
5. Why we process information
We do not make decisions producing legal or similarly significant effects based solely on automated processing of your personal data.
6. App permissions
We request access only when a feature needs it and the operating system presents the permission request. A product may request location, notifications, network access, or device storage. We do not access contacts, photos, camera, microphone, or other sensitive device functions unless a specific feature clearly requires it and explains the purpose before access.
7. Third-party platforms and providers
Our Services may rely on Apple App Store, Google Play, hosting and content-delivery providers, mapping services, payment verification, crash-reporting tools, or links to third-party websites. Those providers may process device, transaction, network, or location information under their own terms and privacy policies. Their processing is not the same as Tours & Travel storing that information.
We require service providers acting on our behalf to process information only for agreed purposes and with appropriate safeguards. We do not authorise them to sell personal data or use it for their own targeted advertising on our behalf.
8. Data retention
We keep personal data only for as long as necessary for the purpose described:
- Support correspondence is normally retained for up to 24 months after the issue is closed, unless a longer period is needed for a dispute or legal obligation.
- Website security logs are normally retained for up to 30 days, unless an incident requires further investigation.
- Transaction and tax records are retained for the period required by applicable accounting and tax law.
- Consent-based information is deleted or anonymised when consent is withdrawn, unless another lawful basis requires retention.
Information stored only on your device remains under your control and may generally be removed by clearing app data or deleting the app.
9. International transfers
Tours & Travel is based in the United States. Information we receive may therefore be processed outside the European Economic Area (“EEA”), United Kingdom, or Switzerland. Where required, we use recognised safeguards such as adequacy decisions, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism.
10. Your rights in the EEA, UK, and Switzerland
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection to processing. You may withdraw consent at any time without affecting earlier lawful processing. You may also lodge a complaint with your local data protection authority.
Because we intentionally retain very little information, we may be unable to identify data connected to you. If we hold identifiable information, we may ask for reasonable verification and will normally respond within one month.
11. California privacy rights
California residents may have rights to know, access, correct, or delete personal information; to limit certain uses of sensitive personal information; and to opt out of sale or sharing where the California Consumer Privacy Act applies. We do not sell personal information and do not share it for cross-context behavioural advertising. We will not discriminate against you for exercising a privacy right.
12. Children
The Services are not directed to children under 13, or a higher minimum age where local law requires it. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to delete it.
13. Cookies and similar technologies
Our website does not intentionally use advertising cookies or cross-site tracking. Essential hosting, security, and content-delivery technologies may process short-lived identifiers or network information needed to operate the site. If we later introduce non-essential analytics, advertising technologies, or mobile SDKs, we will update this Policy and obtain consent where required before activating them.
14. Security
We use reasonable technical and organisational safeguards designed to protect the limited information we process. No system is completely secure, and we cannot guarantee absolute security. If a personal-data breach creates a risk requiring notice under applicable law, we will notify affected users and authorities as required.
15. Changes and contact
We may update this Policy when our products, providers, or legal obligations change. We will post the updated version with a new effective date and provide additional notice when a change is material.
To ask a question or exercise a privacy right, email hello@toursandtravel.app. If a Data Protection Officer or EU representative becomes legally required, their contact details will be added here.