Privacy Policy | Untourist

Untourist ("we," "our," or "us") is a product of Dream Lab Solutions LLC. This policy describes the data practices of the Untourist iOS app and the website at getuntouristapp.com.

1. Information We Collect

We collect the following information only when needed to deliver the app and website experience:

Location data (precise, while using and always). Used to keep you oriented on a route, detect off-route drift, and (with background modes) deliver "a curated walk is nearby" notifications. You can disable location for Untourist at any time in iOS Settings → Privacy & Security → Location Services.
Purchase data. When you buy a City Pass, the app marketplace issues a transaction identifier that we receive so we can restore your pass on this device and across devices. We do not receive your password or full payment information.
Account sign-in data. If you choose to sign in, we receive a stable opaque user identifier that we use to associate your pass ledger with your account.
Device and usage data. This may include app version, build, device model, operating system version, bundle identifier, a randomly generated distinct identifier, screen views, feature events, and your tracking-permission status. We use this to understand product performance and improve the app.
Server-side data. This may include your pass purchase ledger, account identifier, and optional newsletter consent.
On-device data. This may include cached route packages and audio files, your completed walks, your account name, and tokens for signed-in services.

We do not collect: your name, email address, phone number, contacts, photos, microphone audio, calendar, motion data, health data, or FaceID data.

2. How We Use Information

We use the information above to:

Deliver the walking-tour experience (route guidance, audio cues, off-route recovery).
Restore your City Passes across devices and after reinstall.
Send optional "a curated walk is nearby" local notifications (with your permission).
Understand which features are used so we can improve them.

3. Service Providers

We use trusted service providers to operate the app and website. We share only the minimum data needed for those services to work. These providers may support:

Product analytics: device and usage events as described above.
Advertising measurement: limited attribution data, only where permitted by your device settings and applicable law.
Maps and route display: map tiles, routing, and related technical data needed to show maps and route context.
Backend infrastructure: account, pass, and consent records needed to provide app features.
App marketplace and sign-in services: purchase, restoration, and account authentication.

4. Tracking Permission

Untourist may request App Tracking Transparency permission once. If you decline, tracking-based advertising measurement is disabled. Basic product analytics may still be collected to operate and improve the app.

5. Push and Local Notifications

Untourist requests notification permission in-app. "A curated walk is nearby" uses your approximate location and is delivered as a local notification. We do not send marketing push notifications in this version of the app.

6. Data Sharing

We do not sell personal data. We share data only with the third parties needed to operate, secure, measure, and improve the app and website.

7. Children's Privacy

Untourist is not directed to children under 13. We do not knowingly collect personal information from children.

8. Your Choices

Location: iOS Settings → Privacy & Security → Location Services → Untourist.
Tracking: iOS Settings → Privacy & Security → Tracking → Untourist.
Notifications: iOS Settings → Notifications → Untourist.
Delete your account and pass ledger: email francisco@dreamlabsolutionsllc.com and we will delete your server-side data within 30 days.

9. Data Retention

On-device data lives until you delete the app or the entry. The server-side pass ledger is retained while your account is active plus 24 months for tax and audit, then deleted on request.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. International Transfers

Our service providers may process information in the United States and other countries where they or their infrastructure operate.

12. Changes to This Policy

We may update this policy from time to time. The latest version will always be posted at getuntouristapp.com/privacy with an updated "Effective Date."

13. Contact

Questions about this policy? Email us at francisco@dreamlabsolutionsllc.com.