Privacy Policy

1. Introduction

Welcome to Beifahrer ("we," "our," or "us"). Beifahrer is an AI-powered travel companion application that provides location-based educational content and voice-interactive experiences. We are committed to protecting your privacy and personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service"). Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

Data Controller: Maurice Wipf, operating as Beifahrer
Contact: beifahrer@mauwi.me

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: When you create an account, we collect your email address and password (stored in encrypted form). You may also use the Service as a guest without providing personal information.
• Voice Data: When you use the voice interaction feature, your voice input is processed to enable conversations with our AI companion. Voice data is transmitted to our AI service provider for processing but is not permanently stored by us after the session ends.
• User Content: Any text or voice conversations you have with the AI assistant during your sessions.

2.2 Information Collected Automatically

• Location Data: With your permission, we collect your device's GPS coordinates to provide location-based information about your surroundings, landmarks, and points of interest. This is a core functionality of the Service. Location data is used in real-time and is not stored beyond your active session unless you have an account.
• Device Information: We may collect device type, operating system version, and unique device identifiers for analytics and service improvement purposes.
• Usage Data: Information about how you interact with the Service, including session duration and feature usage patterns.

2.3 Payment Information

We offer subscription services through Apple's App Store (via RevenueCat). We do not directly collect or store your payment information. All payment processing is handled by Apple and RevenueCat in accordance with their respective privacy policies. We only receive confirmation of your subscription status.

3. How We Use Your Information

We use the information we collect to:

• Provide Core Services: Use your location to deliver relevant, educational content about landmarks, history, and culture in your surroundings.
• Enable Voice Interactions: Process your voice input to facilitate natural conversations with our AI companion.
• Manage Your Account: Create, maintain, and authenticate your user account.
• Process Subscriptions: Verify subscription status and provide access to premium features.
• Improve Our Service: Analyze usage patterns to enhance features and user experience.
• Communicate With You: Send service-related notifications, updates, and respond to your inquiries.
• Ensure Security: Detect, prevent, and address technical issues, fraud, or abuse.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal basis for collecting and using your personal information depends on the data concerned and the context in which we collect it:

• Consent: For location data and microphone access, we rely on your explicit consent, which you can withdraw at any time through your device settings.
• Contract Performance: Processing necessary to provide the Service you requested (e.g., account management, subscription fulfillment).
• Legitimate Interests: For analytics and service improvement, where such interests are not overridden by your data protection rights.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• AI Service Providers: We use OpenAI to power our AI companion. Your voice input and location context are transmitted to OpenAI for processing. OpenAI processes this data according to their privacy policy and data processing agreements. We have a Data Processing Agreement in place with OpenAI.
• Payment Processors: RevenueCat and Apple handle subscription management and payment processing.
• Infrastructure Providers: We use cloud hosting services to operate the Service, which may process data on our behalf.
• Legal Requirements: We may disclose information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Retention

• Account Data: Retained until you delete your account.
• Voice Data: Processed in real-time and not permanently stored by Beifahrer after your session ends. Our AI provider may retain data according to their retention policies.
• Location Data: Used in real-time for service delivery. For registered users, recent location history may be temporarily cached to improve service quality but is automatically deleted after 24 hours.
• Guest Users: Data is only retained for the duration of your session and is deleted when you close the app.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Encryption of passwords using industry-standard hashing algorithms
• Regular security assessments and updates
• Access controls limiting data access to authorized personnel only

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restriction: Request restriction of processing of your data.
• Right to Data Portability: Request transfer of your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent for location or microphone access at any time through your device settings.

To exercise these rights, please contact us at beifahrer@mauwi.me. We will respond to your request within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers (including OpenAI) are located. These countries may have data protection laws different from your country.

When we transfer personal data from the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or reliance on the recipient's certification under applicable data protection frameworks.

10. Children's Privacy

The Service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at beifahrer@mauwi.me, and we will take steps to delete such information.

11. Third-Party Links and Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email or through the Service. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion of your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Do Not Sell: We do not sell your personal information to third parties.

To exercise these rights, contact us at beifahrer@mauwi.me.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Supervisory Authority

If you are located in the EEA, UK, or Switzerland and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.