Privacy Policy — Let's Tour

Last updated: July 6, 2026

This Privacy Policy explains how Roman Okulevich, an individual developer based in Spain (“we”, “us”, “our”), collects and uses information when you use the Let's Tour mobile application (the “App”). We are the data controller for the purposes of the EU General Data Protection Regulation (GDPR) and Spain's Organic Law 3/2018 (LOPDGDD).

Contact: support@letstour.app · C/ Moreno Cortés, nº 6, 1ª, 30110 Cabezo de Torres (Murcia), Spain

1. Summary

The App works without an account — you don't register, and we don't ask for your name or email to use it.
We use your location to generate tours around you. That's the core of the product.
Your interests/preferences are sent to our backend and to OpenAI to generate your tour.
We use analytics and attribution tools to understand usage and measure advertising.
Subscriptions are billed by Apple — we never see your card details.
We do not sell your personal data.

2. Information we collect

We do not ask you to create an account, so we do not collect your name, email, or a password.

Category	What it is	Source
Location data	Precise device location, used to generate tours around your position or a point you set	You (device GPS, with your permission)
Preferences & inputs	Categories you tap, walking time, points of interest, the marker you place	You
Generated content	Tours generated for you, and tours you save or share	Created in-app
Purchase data	Subscription status and transaction identifiers (tier, renewal status). Apple processes the payment; we do not receive your payment card or full billing details	Apple
Usage & device data	App events, interactions, approximate region, device model, OS version, language, crash diagnostics, identifiers used by analytics SDKs	Automatically
Advertising attribution	Data used to measure Apple Search Ads campaigns (e.g., the Apple AdServices attribution token)	Apple AdServices
Support communications	Anything you send us by email	You

We do not intentionally collect special-category data (health, religion, etc.).

3. How we use your information (legal bases under GDPR)

Purpose	Legal basis
Generate tours from your location and preferences (core functionality)	Performance of a contract (Art. 6(1)(b)) and your consent for location access (Art. 6(1)(a))
Provide, maintain and secure the App	Legitimate interests (Art. 6(1)(f))
Process and manage your subscription	Performance of a contract (Art. 6(1)(b))
Analytics — understand usage and improve the product	Consent where required; otherwise legitimate interests
Measure and optimize advertising (Apple Search Ads)	Consent / legitimate interests as applicable
Respond to support requests	Legitimate interests / contract

You can withdraw consent at any time (see Section 7). Withdrawing location consent will stop tour generation, since the App needs location to function.

4. Who we share data with (processors & third parties)

OpenAI — our backend sends your tour-generation inputs (preferences and the relevant location context) to OpenAI to generate tour content. Processed on OpenAI's infrastructure (United States). This includes any free-text you type when describing the tour you want.
Apple — App Store subscription billing and Apple Search Ads attribution (AdServices).
Google / Firebase — Firebase Analytics (usage analytics) and Firebase Crashlytics (crash reporting).
Amazon Web Services (AWS) — hosts our backend, which stores your data and relays generation requests to OpenAI. Hosted in the European Union (EEA region).

We do not sell your personal data and do not share it for cross-context behavioral advertising as defined under U.S. state privacy laws.

5. International data transfers

Some providers (OpenAI, Google, Apple) process data in the United States or other countries outside the European Economic Area. AWS hosting is in the European Union, so stored data remains in the EEA. Where we transfer personal data outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework where the provider is certified.

6. Data retention

Location and generation inputs: stored on our AWS backend to produce and improve your tours. We retain them until you request deletion. You can request deletion at any time (Section 7).
Saved tours: kept on your device and/or backend until you delete them or uninstall the App.
Analytics/attribution: retained per the provider's standard retention periods.
Support emails: kept as long as needed to resolve your request and for our records.

7. Your rights

Under the GDPR (and Spain's LOPDGDD) you have the right to: access, rectification, erasure, restriction, data portability, objection, and to withdraw consent at any time. To exercise these rights, email support@letstour.app.

Because the App is anonymous, we may not be able to identify your data without additional information from you (e.g., a device or transaction identifier) — Art. 11 GDPR.

You can also lodge a complaint with the Spanish Data Protection Authority, the Agencia Española de Protección de Datos (AEPD) — www.aepd.es.

Device controls: you can turn off location access in iOS Settings, and reset/limit ad and analytics identifiers in iOS Settings → Privacy & Security.

California residents: you have rights under the CCPA/CPRA to know, delete, and opt out of “sale”/“sharing”. We do not sell or share your data as defined by those laws. Requests: support@letstour.app.

8. Children's privacy

The App is not directed to children. We do not knowingly collect data from children under the age of digital consent (14 in Spain; 13–16 elsewhere). If you believe a child has provided us data, contact support@letstour.app and we will delete it.

9. Security

We use reasonable technical and organizational measures to protect your information (e.g., encryption in transit). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Policy from time to time. We will revise the “Last updated” date and, for material changes, provide notice in the App or on letstour.app. Continued use after changes means you accept the updated Policy.

11. Contact

Questions about privacy or this Policy: support@letstour.app
Data controller: Roman Okulevich · C/ Moreno Cortés, nº 6, 1ª, 30110 Cabezo de Torres (Murcia), Spain