Privacy Policy | Untourist

Untourist ("we," "our," or "us") is a product of Dream Lab Solutions LLC. This policy describes the data practices of the Untourist iOS app and the website at getuntouristapp.com.

1. Information We Collect

We collect the following information only when needed to deliver the app and website experience:

Location data (precise, while using and always). Used to keep you oriented on a route, detect off-route drift, and (with background modes) deliver "a curated walk is nearby" notifications. You can disable location for Untourist at any time in iOS Settings → Privacy & Security → Location Services.
Purchase data. When you buy a City Pass, the app marketplace issues a transaction identifier that we receive so we can restore your pass on this device and across devices. We do not receive your password or full payment information.
Account sign-in data. If you choose to sign in, we receive a stable opaque user identifier that we use to associate your pass ledger with your account.
Device and usage data. This may include app version, build, device model, operating system version, bundle identifier, a randomly generated distinct identifier, screen views, feature events, and your tracking-permission status. We use this to understand product performance and improve the app.
Server-side data. This may include your pass purchase ledger, promotional claims and credits, tour entitlements, account identifier, and campaign eligibility records.
Email and consent data. When you join a launch or marketing list, we collect your email address, confirmation status, consent choice and version, unsubscribe status, and delivery events such as delivery, bounce, complaint, or suppression.
Campaign and attribution data. This may include campaign, referral, or partner codes; tour interest; landing-page variant; and approved UTM campaign fields. Personal referral codes are associated with your verified app account so qualifying rewards can be added to its wallet. We keep public referral and partner identifiers separate from private claim codes.
Security and abuse-prevention data. We may retain request identifiers, timestamps, outcomes, and keyed hashes derived from an email address, account identity, or network address. These records help enforce promotion limits without placing raw private claim codes in logs or analytics.
On-device data. This may include cached route packages and audio files, your completed walks, your account name, and tokens for signed-in services.

We do not collect through the iOS app: your contacts, photos, microphone audio, calendar, health data, or Face ID data. We collect an email address only when you choose to submit it through a website form or another clearly identified signup flow.

2. How We Use Information

We use the information above to:

Deliver the walking-tour experience (route guidance, audio cues, off-route recovery).
Restore your City Passes across devices and after reinstall.
Confirm campaign signups and deliver private promotional claims.
Enforce promotion eligibility, prevent duplicate claims, and investigate abuse.
Attribute referrals or partner conversions and administer agreed affiliate arrangements.
Send marketing email when you have opted in and record an unsubscribe when requested.
Send optional "a curated walk is nearby" local notifications (with your permission).
Understand which features are used so we can improve them.

3. Service Providers

We use trusted service providers to operate the app and website. We share only the minimum data needed for those services to work. These providers may support:

Product analytics: device and usage events as described above.
Advertising measurement: limited attribution data, only where permitted by your device settings and applicable law.
Maps and route display: map tiles, routing, and related technical data needed to show maps and route context.
Backend infrastructure: account, pass, and consent records needed to provide app features.
Email delivery: Resend processes the destination email address and delivery metadata for confirmation, claim, and other messages you request or consent to receive. Supabase remains our canonical record for audience, consent, and unsubscribe state.
App marketplace and sign-in services: purchase, restoration, and account authentication.

4. Tracking Permission

Untourist may request App Tracking Transparency permission once. If you decline, tracking-based advertising measurement is disabled. Basic product analytics may still be collected to operate and improve the app.

On the website, analytics and advertising measurement are separate choices. Google Analytics loads only after analytics consent, and Meta Pixel and the Pinterest Tag load only after advertising consent. Website choices are also separate from marketing-email consent and can be changed from the Privacy choices link in the footer.

5. Push and Local Notifications

Untourist requests notification permission in-app. "A curated walk is nearby" uses your approximate location and is delivered as a local notification. We do not send marketing push notifications in this version of the app.

6. Data Sharing

We do not sell personal data. We share data only with the third parties needed to operate, secure, measure, and improve the app and website.

7. Promotions, Referrals, and Partners

Promotional claims may be limited by campaign, email confirmation, and eligible Apple account. Referral and partner codes may connect a signup, redemption, first tour start, or verified App Store purchase to the person or organization that shared the offer. Referring from the app does not subscribe you to marketing emails or create an email signup. Referral progress is shown as counts; the app does not expose friends' email addresses. Reward emails are sent only when a confirmed, linked contact is available and delivery is permitted. Free claims are not treated as purchases or revenue. We may revoke fraudulent or ineligible promotional access while preserving the audit record needed to explain that decision.

8. Children's Privacy

Untourist is not directed to children under 13. We do not knowingly collect personal information from children.

9. Your Choices

Location: iOS Settings → Privacy & Security → Location Services → Untourist.
Tracking: iOS Settings → Privacy & Security → Tracking → Untourist.
Website measurement: use the Privacy choices link in the website footer.
Notifications: iOS Settings → Notifications → Untourist.
Marketing email: use the unsubscribe link in a marketing message or visit the linked preference page. Unsubscribing does not remove an existing claim, credit, entitlement, or purchase.
Delete your account and pass ledger: email francisco@dreamlabsolutionsllc.com and we will delete your server-side data within 30 days.

10. Data Retention

On-device data lives until you delete the app or the entry. The server-side pass ledger is retained while your account is active plus 24 months for tax and audit, then deleted on request. Consent and unsubscribe events, promotion outcomes, affiliate records, and abuse prevention records may be retained as needed to honor your choices, prevent repeat claims, resolve disputes, and meet legal obligations.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. International Transfers

Our service providers may process information in the United States and other countries where they or their infrastructure operate.

13. Changes to This Policy

We may update this policy from time to time. The latest version will always be posted at getuntouristapp.com/privacy with an updated "Effective Date."

14. Contact

Questions about this policy? Email us at francisco@dreamlabsolutionsllc.com.