Privacy policy

Version 2026-10-09

1. General Information

  1. This Privacy Policy ("Policy") describes how personal data is processed in connection with the Guiddo service.
  2. Terms used in this Policy:
    • App — the Guiddo service available as a web application at https://guiddo.travel/app and as a mobile application for iOS (App Store) and Android (Google Play); requires an account;
    • Website — the website https://guiddo.travel and its sub-pages (service information, pricing, blog, place pages), excluding the App at /app; no account required;
    • User — a person using the App or visiting the Website;
    • Controller — Ideas P.S.A. (point 3).
  3. The data controller is Ideas P.S.A., ul. Jastrzębia 6, 05-080 Lipków, Poland, registered in the National Court Register under KRS 0001231713, NIP (tax ID) 1182326586, REGON 544348673 (the "Controller").
  4. Contact regarding data protection: hello@guiddo.travel.
  5. The Controller processes personal data in accordance with Regulation (EU) 2016/679 (GDPR), the Polish Personal Data Protection Act of 10 May 2018 and the Act on Providing Services by Electronic Means of 18 July 2002.
  6. The App generates personalised sightseeing plans (routes, place descriptions, audio narration, translator, assistant) using artificial-intelligence models. Some data provided by the user is transmitted to the providers of those models for this purpose (Section 5). Those providers act as processors and do not use Users' data to train or improve their models; the Controller does not train models on Users' data either. AI-generated content is a suggestion and has no legal effect on the User.

2. Data We Collect

  1. Account data: e-mail address, display name, password (stored only as a cryptographic hash), e-mail verification status, optional two-factor authentication secret, interface language. Sign in with Google or Apple: if you choose to sign in with a Google or Apple account, the Controller receives from the identity provider only: your identifier at that provider, your e-mail address (for Apple this may be a relay address from "Hide My Email"), whether the address is verified, and your name if you share it. The Controller never receives your Google/Apple password. Google and Apple are independent controllers of the data processed within your account with them.
  2. Trip data: destinations, dates, pace, means of transport, group composition (e.g. couple, family, children's age bands — as a planning preference, not data about a specific child), interests, dietary restrictions, free-text notes, accommodation, to-do list, trip ratings.
  3. Content you type or say: free-text trip brief, questions to the assistant, text and voice recordings for the translator, photos for translating text from the camera. Text in a photo is usually recognised on the device and only the recognised text is sent to the server. If on-device recognition fails (e.g. a non-Latin script), the photo is sent to the server and to OpenAI (Section 5) solely for translation, and the Controller does not store it.
  4. Location: used on the device to remember where you parked and to show nearby places. Coordinates are passed to map services (Section 5) to display the map and find places; they are not stored on your account and are not used for tracking.
  5. Device and notification data: push notification token, platform (iOS/Android/web), device language — only if you enable notifications.
  6. Purchase data: wallet balance of "days", top-up and usage history, customer identifier in the payment system (Stripe — web app) or app-store transaction identifiers (Apple App Store — iOS app, Google Play — Android app). The Controller never receives or stores card numbers.
  7. Consents and acceptances: accepted versions of the Terms and this Policy, marketing consent decisions, timestamp, IP address and browser at the time of consent (proof).
  8. Support: content of support tickets, replies and attachments added by the User (e.g. screenshots, photos).
  9. Technical data: IP address, browser/device identifier, sign-in and security events, error logs, usage of external services for cost accounting.
  10. Providing data is voluntary, but an account cannot be created without an e-mail address and password (or a Google/Apple account), and a plan cannot be generated without trip data.
  11. Dietary preferences and other special-category data. The "dietary restrictions" field and the notes field are optional. Some entries (e.g. gluten-free, kosher, halal, allergies) may indirectly reveal health or religious information. The Controller uses them solely to select places for the plan, draws no conclusions about the User from them and does not process them for any other purpose. Entering such information constitutes explicit consent to its use in planning (Art. 9(2)(a) GDPR); consent may be withdrawn by deleting the entry or the trip.
  12. Website data: when you visit the Website, the Controller processes technical data needed to display it (IP address, browser) and — only with your consent — data from cookies of analytics and advertising tools (Section 8).
  • Running your account and providing the service (plan generation, audio, translator, assistant, plan notifications) — Legal basis: Art. 6(1)(b) GDPR (contract); Retention: until account deletion (Section 4)
  • E-mail verification, password reset, account security — Legal basis: Art. 6(1)(b) and (f) GDPR; Retention: until account deletion; security logs up to 12 months
  • Handling purchases of "days", complaints, accounting records — Legal basis: Art. 6(1)(b) and (c) GDPR; Retention: 5 years from the end of the tax year
  • Service push and e-mail notifications (plan ready, trip reminders) — Legal basis: Art. 6(1)(b) GDPR; push only after you enable it in the OS; Retention: until notifications are disabled / account deletion
  • Marketing messages (newsletter, promotions) — Legal basis: Art. 6(1)(a) GDPR (consent); Retention: until consent is withdrawn
  • Support tickets — Legal basis: Art. 6(1)(b) and (f) GDPR; Retention: 3 years after the ticket is closed
  • Proof of consents and acceptance of the Terms — Legal basis: Art. 6(1)(c) and (f) GDPR; Retention: 3 years after account deletion (limitation of claims)
  • Operation and security of the App, abuse detection — Legal basis: Art. 6(1)(f) GDPR; Retention: up to 12 months
  • Establishing, pursuing or defending claims — Legal basis: Art. 6(1)(f) GDPR; Retention: limitation period (Art. 118 Polish Civil Code)
  • Statistics and service analysis — Legal basis: Art. 6(1)(f) GDPR — aggregated/anonymous data only; Retention: indefinitely (anonymous data)
  • Website traffic analytics and ad measurement (cookies, Section 8) — Legal basis: Art. 6(1)(a) GDPR (consent given in the cookie banner); Retention: until consent is withdrawn, no longer than the lifetime of the given cookie (Section 8)
  • Proof of cookie consent — Legal basis: Art. 6(1)(c) and (f) GDPR; Retention: 3 years

The Controller does not make automated decisions producing legal effects for users. Personalising a plan based on the preferences you provide is not profiling within the meaning of Art. 22 GDPR.

4. Retention and Account Deletion

  1. You can delete your account at any time in the App (Profile → Delete account; confirmation via e-mail link is required). After confirmation the account and trip data are deleted, except data whose retention is required by law (purchase records) or by the Controller's legitimate interest (proof of consents, security logs) — to the extent and for the periods in Section 3.
  2. Inactive accounts: after 365 days without sign-in the Controller sends a warning e-mail; after a further 30 days the account is blocked; after a further 30 days the account and data are permanently deleted.
  3. Unverified accounts (activation link not clicked) are deleted after 7 days.
  4. After the retention periods expire, data is deleted or anonymised.

5. Data Recipients

Data is entrusted to processors under data processing agreements (Art. 28 GDPR) or transferred to independent controllers to the extent necessary for the service:

  • Hetzner Online GmbH (Gunzenhausen, Germany) — Purpose: server and database hosting; Data: all App data; Location: EU
  • OpenAI, L.L.C. / OpenAI Ireland Ltd — Purpose: plan and place-description generation, assistant, text translation, language detection; Data: trip data and preferences, trip brief, assistant questions, text to translate and — if on-device text recognition fails — the photo to translate (not stored); no e-mail or account data; data sent via the API is not used to train OpenAI models; Location: USA (EU-US Data Privacy Framework)
  • Groq, Inc. (alternatively Deepgram, Inc.) — Purpose: speech-to-text for the voice translator; Data: the voice recording you provide; Location: USA (standard contractual clauses)
  • Microsoft Ireland Operations Ltd (Azure Speech, West Europe region) — Purpose: narration synthesis for audio guides; Data: place-description text only (no personal data); Location: EU (Netherlands)
  • Google Ireland Ltd (Google Analytics 4, Google Ads) — Purpose: Website only, with consent — visit statistics and ad measurement; Data: cookie identifiers, IP address (truncated), events on the Website; Location: EU/USA (EU-US DPF)
  • Meta Platforms Ireland Ltd (Meta Ads), TikTok Technology Ltd (TikTok Ads), X Internet Unlimited Company (X Ads), Microsoft Ireland Operations Ltd (Microsoft Advertising, Microsoft Clarity) — Purpose: Website only, with consent — ad measurement and ad targeting (pixels) and, for Clarity, analysis of how the Website is used (click maps, session recordings with form fields masked); Data: cookie identifiers, IP address, events on the Website; Location: EU/USA (EU-US DPF)
  • Google Ireland Ltd (Maps, Places, Directions) — Purpose: in-app map, place data, opening hours, routes; Data: place queries and coordinates; IP address when the map loads; Location: EU/USA (EU-US DPF)
  • Google Ireland Ltd (Sign in with Google, Google Play, Firebase Cloud Messaging) — Purpose: sign-in with a Google account, distribution and in-app purchases in the Android app, push notifications on Android; Data: identifier and e-mail from the Google account at sign-in, push token, transaction identifiers; Location: EU/USA (EU-US DPF)
  • Google LLC / Google Ireland Ltd (Google libraries in the mobile apps: Google Sign-In, ML Kit) — Purpose: operation and diagnostics of Google libraries built into the mobile apps — sign-in with a Google account (iOS and Android) and text recognition from photos in the translator (Android; recognition runs on the device); Data: device and app information (model, OS version, library version), installation identifiers, performance and error data, and for sign-in with Google also information about use of the sign-in; photos and recognised text are not sent to Google; Google processes this data as an independent controller to maintain and improve its services; Location: EU/USA (EU-US DPF)
  • Apple Inc. / Apple Distribution International — Purpose: Sign in with Apple, push notifications (APNs), in-app purchases, app distribution via the App Store; Data: identifier and e-mail from the Apple account at sign-in, push token, transaction identifiers; Location: USA (EU-US DPF)
  • RevenueCat, Inc. — Purpose: handling purchases in the mobile apps (verifying and passing store transaction information to the Wallet); Data: the User's identifier in the App, transaction and product identifiers; no e-mail address; Location: USA (EU-US DPF)
  • Stripe Payments Europe, Ltd. — Purpose: payments in the web app; Data: e-mail, customer identifier, amount; card data only on Stripe's side; Location: EU/USA (EU-US DPF)
  • Brevo (Sendinblue SAS, Paris, France) — Purpose: sending e-mails (activation, password, service notifications; marketing messages only with consent); Data: e-mail address, name, message content, delivery events; Location: EU
  • Open-Meteo, Wikimedia Foundation, OpenStreetMap Foundation — Purpose: weather, place photos, geocoding of city names; Data: coordinates/place names only — no personal data; Location: EU/USA
  • IT, accounting and legal service providers — Purpose: the Controller's operations; Data: to the extent necessary; Location: EU

Data may be disclosed to public authorities where required by law.

6. Transfers Outside the EEA

Because some providers are located in the USA, data may be transferred outside the European Economic Area. Transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework (certified providers — status verifiable at dataprivacyframework.gov) or on standard contractual clauses (Art. 46(2)(c) GDPR). A copy of the safeguards is available on request at hello@guiddo.travel.

7. Your Rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection to processing based on legitimate interest (Art. 21), and to withdraw consent at any time without affecting the lawfulness of prior processing. Requests: hello@guiddo.travel or in the App (Profile). You may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with the supervisory authority of your habitual residence.

8. Cookies and Device Storage

  1. The App (the web app at /app and the iOS and Android apps) does not use cookies for advertising or analytics and contains no third-party analytics or advertising tools. Google libraries built into the mobile apps (Sign in with Google, ML Kit) send Google the diagnostic data described in Section 5; the Controller does not receive this data and does not use it for analytics or advertising.

  2. The App stores in device storage (localStorage, app storage) data necessary for operation: session tokens, chosen language, your trip plan, descriptions, photos and audio for offline use, parking location. This data is removed when you sign out or uninstall the App.

  3. The Website (https://guiddo.travel, excluding /app) uses: (a) strictly necessary cookies — to remember your consent decision and display the Website correctly; no consent required; (b) analytics cookies — only with consent: Google Analytics 4 (visit statistics), Microsoft Clarity (click maps and session recordings; form fields are masked); (c) advertising cookies — only with consent: Meta Ads, Google Ads, TikTok Ads, X Ads, Microsoft Advertising (ad measurement and ad targeting on those platforms). Cookies in categories (b) and (c) are not set or read before consent is given. The providers of these tools are independent controllers of the data collected by their cookies and process it under their own privacy policies:

    The current list of cookies is available in the cookie settings on the Website ("Customise").

  4. You can change or withdraw your consent at any time via the "Cookie settings" link in the Website footer. Your decision is stored in your browser and in the Controller's consent register as proof (Section 3).

  5. A plan exported to PDF or shared by the User with others is outside the Controller's control; the User decides whom to give it to.

9. Data Security

The Controller uses encrypted connections (TLS), stores passwords only as hashes, offers optional two-factor authentication, restricts server access, logs security events and keeps backups. Only authorised persons have access to data.

10. Minors

The App is intended for persons aged 16 or over. Younger persons may use the App only with the consent and under the supervision of a parent or legal guardian. Children's age bands entered in the planner are used only to tailor the plan and do not identify any individual.

11. Changes to this Policy

The Controller may amend this Policy when the law, the scope of the service or the providers change. Users will be informed of material changes in the App or by e-mail; continued use after the effective date constitutes acceptance to the extent that no separate consent is required. Version history is available in the App.

12. Contact

Ideas P.S.A., ul. Jastrzębia 6, 05-080 Lipków, Poland · hello@guiddo.travel