Privacy Policy
This Privacy Policy describes how SolGuide ("we," "us," "our") collects, uses, and protects your personal information when you use our mobile application and website (the "Service"). We are committed to protecting your privacy in compliance with the EU General Data Protection Regulation (GDPR), Spanish data protection laws, and the California Consumer Privacy Act (CCPA).
1. Who We Are
SolGuide is a Costa del Sol travel guide application that uses artificial intelligence to generate personalized travel itineraries. Contact: hello@solguide.app
2. Information We Collect
2.1 Information You Provide
- Account data: Email address, name (optional), language preference
- Travel preferences: Interests (beach, hiking, culture, etc.), companion type, budget, dietary preferences, mobility preference, destination cities
- Generated routes: AI-generated itineraries you create, saved favorites
- Subscription data: Plan type (Free, Explorer, Premium, One-trip), purchase date
2.2 Information Collected Automatically
- Device location (with permission): Used to show nearby destinations, calculate distances, and trigger GPS-based audio guides
- Device information: Operating system, app version, device type, language
- Usage analytics: Anonymous interactions to improve the app (no personal identification)
2.3 Permissions We Request
| Permission | Purpose |
|---|---|
| Location (Fine, Coarse) | Show nearby destinations, calculate routes |
| Background Location | Trigger GPS-based audio guides while you explore |
| Microphone | Voice search for destinations (optional) |
| Camera & Photo Library | Save and share route screenshots (optional) |
| Motion & Compass | Compass feature to point toward nearby destinations |
3. How We Use Your Information
- Generate personalized travel itineraries based on your preferences (via OpenAI's GPT models)
- Provide GPS-based audio guides during your trips
- Save your routes, favorites, and preferences across sessions
- Process subscription payments (via Apple App Store / Google Play)
- Improve the app through anonymous usage analytics
- Send service-related communications (account, security)
4. Third-Party Services & Data Processors
To deliver our service, we share limited data with the following processors. Each operates under their own privacy policy:
| Service | Purpose | Data Shared | Region |
|---|---|---|---|
| Supabase | Database, authentication | Account, preferences, saved routes | EU |
| OpenAI | AI route generation (GPT-4o) | Travel preferences (anonymized prompts, no email/name) | USA |
| Google Maps Platform | Maps, geocoding, places | Approximate location, place queries | USA / Global |
| ElevenLabs | Audio guide generation | Text-only content (no personal data) | USA |
| Google Analytics | Anonymous usage analytics | Anonymized device + session data | USA / EU |
| Apple App Store / Google Play | Payment processing | Subscription purchase data only | USA / Global |
We do not sell your personal data to third parties.
5. International Data Transfers
Some third-party services (OpenAI, ElevenLabs, Google) process data in the United States. These transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring GDPR-equivalent protection. Where available, we use EU-region data centres (e.g., Supabase EU).
6. Data Retention
- Account data: Retained while your account is active. Deleted within 30 days of account deletion.
- Generated routes: Stored until you delete them or your account.
- Anonymous analytics: Retained up to 24 months.
- Subscription records: Retained 7 years for tax and accounting compliance (Spanish law).
7. Your Rights (GDPR & CCPA)
Depending on your location, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure ("right to be forgotten"): Request deletion of your data
- Restriction: Limit how we process your data
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Withdraw previously given consent at any time
- Opt-out of sale: CCPA — we do not sell data, but you have the right to confirm this
- Lodge a complaint: With the Spanish Data Protection Agency (AEPD) at www.aepd.es
To exercise these rights, contact us at hello@solguide.app. We respond within 30 days.
8. Account Deletion
You can request account deletion at any time:
- In the app: Profile → Settings → Delete Account
- By email: hello@solguide.app with subject "Delete my account"
All personal data is permanently deleted within 30 days. Anonymized analytics may be retained.
9. Children's Privacy
SolGuide is not intended for children under 13 (16 in the European Economic Area). We do not knowingly collect data from children. If we discover such data, we delete it immediately. Contact us if you believe a child has provided us with personal information.
10. Data Security
We implement industry-standard security measures including:
- HTTPS encryption for all data transmission
- Encrypted database storage
- Authentication tokens with limited lifetime
- Regular security audits
No method of electronic transmission is 100% secure. We cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be notified through the app or via email. The "Last Updated" date at the bottom reflects the latest version.
12. Contact Us
Questions about this Privacy Policy or your personal data:
Email: hello@solguide.app
Website: solguide.app