This is a translation; if there is any discrepancy, the Spanish version prevails.
Here we explain what data of yours we process when you use ATravelGuide (the mobile and desktop apps, and the website atravelguide.app), what for, on what legal basis, how long we keep it, who we share it with and how you can exercise your rights. We have written it so that it is easy to understand.
| Controller | [PENDIENTE: nombre y apellidos o razón social] |
|---|---|
| Tax ID (NIF) | [PENDIENTE] |
| Address | [PENDIENTE] |
| Contact and privacy email | info.mytravelguide@gmail.com |
We do not have a data protection officer (it is not mandatory for our activity). For any privacy matter, write to the email address above.
a) Account. Email, name and password (stored encrypted by our authentication provider; we never see it). If you sign in with Apple or Google, we receive your identifier and email from them (with Apple it may be a relay address).
b) Profile (optional). Photo, bio, interests and travel styles, and —only if you enter them— the city and country where you live. Your place of residence is not shown on your profile: it is used to suggest people and guides from your area and as the home country of your stamp passport.
c) What you create. Guides, stops, accommodation, activities, restaurants, transport, journal, budgets and expenses, packing, notes, pins, photos, videos and any booking documents you attach.
d) Location. The coordinates of the places you add to your guides and, if you choose, of your Moments. Your GPS position only when you ask for it (centring the map, dropping a pin, looking for parking or nearby places) and with your permission; we do not store it and we do not track you in the background. If, on arriving somewhere, you tell us where you parked, we store that point without any data that identifies you and other travellers can see it.
e) Social. Messages, comments, likes, ratings, followers, group trips, date polls, Moments and reactions. We record who views a published guide or a Moment (the author can see this). Blocks and reports.
f) AI. What you send to the artificial intelligence features (text, photo or PDF) and how many coins you spend on each.
g) Payments. Transaction identifiers, product, amount, currency, country and email of the buyer, and the invoice. We never see or store your card.
h) Booking links. That you tapped a booking link, which provider, and from which item of which guide.
i) Crash reports (only if you turn them on). Error message, screen, operating system, app version, your identifier and your email. Never photos, texts or location.
j) Technical data. Notification token, language, app version, date of last activity.
k) Your acceptances. Which version of the Terms and of this Policy you accepted and when, and whether you want to receive emails with news, with their history.
l) If you are a professional. Trade name and category; and the data of your clients that you enter in the app (see section 9).
m) If you write to a professional from their page. Without an account, you can request a quote on a professional's microsite: name, email, destination, dates, number of people, budget and message. We pass it on to that professional.
n) If you sign a contract with a professional. Your name, email, the amount, and the IP address and browser you sign from, as evidence of the signature.
We do not process health data, date of birth, phone number, identity documents or other special categories of data. We do not sell data, there is no advertising in the app and we do not track you across third-party apps or websites.
| Purpose | Legal basis (GDPR) | How long |
|---|---|---|
| Creating your account and providing the service (guides, map, PDF, packing, syncing devices) | Contract (Art. 6(1)(b)) | While you have an account |
| Social features and group trips | Contract; what you publish, because you decide to publish it | While you have an account or until you remove it. Moments, 24 h unless you add them to highlights |
| AI features | Contract | What you send is processed to answer you; the usage log, while you have an account |
| Payments, invoices and tax obligations | Contract and legal obligation (Art. 6(1)(c)) | Invoices and supporting records: 6 years (Spanish Commercial Code, Art. 30) even if you delete your account |
| Recording your acceptances | Legal obligation (being able to demonstrate consent, Art. 7(1)) | While you have an account |
| Emails with news and offers | Your consent (Art. 6(1)(a); Spanish LSSI Art. 21) | Until you unsubscribe |
| Crash reports | Your consent | Up to 12 months, or until you delete your account |
| Push notifications | Your consent (system permission) | Until you turn them off |
| GPS location | Your consent (system permission) | Not stored |
| Recording taps on booking links | Legitimate interest (knowing what is useful and collecting commissions) | 24 months |
| Internal usage and website statistics | Legitimate interest (improving the service); the website, without cookies and without IP | 24 months, aggregated |
| Security, blocks, reports and abuse | Legitimate interest | As long as necessary; reports, up to 12 months after they are resolved |
| Handling your enquiries and your rights | Legal obligation / legitimate interest | The time needed to deal with you and, afterwards, up to 3 years in case of a claim |
Where the basis is legitimate interest, you can object (section 6).
Only with providers we need for the app to work, who act on our behalf (processors), under contract and without being able to use your data for their own purposes:
| Provider | What for |
|---|---|
| Supabase | Database, sign-in, photo storage and server functions. Servers in [PENDIENTE: región del proyecto] |
| Anthropic (Claude) | AI features. It does not use your data to train its models |
| Stripe | Card payments and payments collected by professionals |
| Apple and Google | In-app purchases, Sign in with Apple or Google, and notifications |
| Expo | Delivering notifications and app updates |
| Resend | Service emails (codes, guide deliveries, trip alerts, contracts) |
| Mapbox, OpenStreetMap (Nominatim, Overpass, OSRM) | Maps, routes, place and parking search |
| Open-Meteo | Weather forecast for the places in your guide |
| Cloudinary | Photos uploaded before we moved them to Supabase |
| Vercel | Website hosting and statistics, without cookies |
In addition:
Several of these providers are based in the United States or may process data there (Anthropic, Stripe, Apple, Google, Expo, Resend, Mapbox, Cloudinary, Vercel and, depending on the region, Supabase). These transfers rely on the adequacy decision for the EU-U.S. Data Privacy Framework where the provider is certified and, otherwise, on the European Commission's standard contractual clauses (Art. 46 GDPR). You can ask us for a copy of the safeguards by writing to us.
You can ask us for access to your data, to rectify it, erase it, restrict or object to its processing, take it with you (portability) and withdraw your consent at any time, without affecting anything done before.
We do not make automated decisions with legal effects on you. The AI generates texts and suggestions that you decide whether to use.
If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (C/ Jorge Juan 6, 28001 Madrid, Spain · aepd.es).
You must be at least 16 years old to create an account. If we learn that an account belongs to someone underage, we will close it and delete their data.
Encryption in transit, per-user access control in the database, keys stored on the server and the session stored in the device's encrypted storage. If there were a breach affecting you, we would notify you and the AEPD as the law requires.
When you enter data about your clients in the app (their email, their name, your notes, amounts, appointments, contracts, requests that reach you from your page), you are the controller of that data and we are your processor: we process it only to provide you with the service, under the data processing agreement (atravelguide.app/pro-contrato). It is up to you to have a legal basis for processing it and to inform your clients.
If we change anything important, we will tell you in the app and ask you to accept it again. The current version, with its date, is always at atravelguide.app/privacy.
Version 2026-10-09 · Terms of Use · Cookie Policy · info.mytravelguide@gmail.com