Legal

Privacy Policy

Last updated: September 2026

AI guide s.r.o. ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information when you use our mobile app and website (collectively, the "Service"). We are the data controller responsible for your personal data under the General Data Protection Regulation (EU) 2016/679 ("GDPR").

1. Information we collect

We keep the data we hold about you to what the Service actually needs:

Account data — your email address, name, the sign-in provider you used (Google Sign-In; Apple Sign-In will be added later) and, where your provider supplies one, your profile photo URL.
App settings and preferences — for example language, audio and display options.
Route activity — when this feature is active, we may record which routes you opened, your progress along them (which stops you reached) and the related timestamps. This never includes coordinates.
Your location — used only while you navigate a route, and only on your device, by the Google Maps Navigation SDK to guide you and show your position on the map. We never receive or store your location and we keep no location history (see Data sharing & processors for Google Maps).
Purchase records — the store (Apple App Store or Google Play), product, transaction identifier, status and timestamps. Apple or Google is the merchant of record and handles all payment data; we never see or store card details. Promotional codes may be offered from time to time and are recorded the same way.
Correspondence — if you email us at [email protected], we keep your message and our reply for as long as needed to handle it.

The app contains no analytics or advertising SDKs. Our server functions write technical logs (your user identifier, timestamps and technical errors — never your email or name) that are kept in the EU for 30 days for security and troubleshooting — see Data retention.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"). As a company established in the Czech Republic and operating within the European Economic Area (EEA), GDPR applies to all personal data we process about users in the EU and EEA.

We process your personal data only where we have a valid legal basis to do so:

Performance of a contract — to provide the Service you requested, including navigation, audio guide features and purchases. Navigation uses your location on your device because you asked to be navigated; the app can only do this after you grant the location permission in your phone's operating system.
Legitimate interests — to secure and maintain the Service, where those interests are not overridden by your rights
Legal obligation — to keep accounting records and to comply with other applicable law

You can revoke the location permission at any time in your phone's settings. Navigation will then not work, but the rest of the app will. We do not currently process any data on the basis of consent.

3. How we use your information

We use the information we collect to:

Provide, maintain, and improve the Service
Deliver route navigation and AI-generated audio guide features and, when this feature is active, remember your progress on a route
Process and verify purchases made through Apple or Google and handle refunds
Respond to your emails
Detect, investigate, and prevent fraud or abuse
Comply with our legal obligations, including accounting and tax law

We do not sell your personal data to third parties, and we do not use analytics, advertising or tracking SDKs in the app.

We share your information only with the processors we need to run the Service, and with nobody else:

Google Cloud / Firebase (Google LLC and Google Ireland Ltd) — hosting, database (Cloud Firestore), authentication, file storage, serverless functions and technical logs. Google processes data on our behalf under Google's Data Processing Terms.
Apple App Store and Google Play — in-app purchases, promotional codes and refunds. Apple or Google is the merchant of record and handles payment data; we only receive the transaction identifier, product and status, never card details.
Google Maps Platform (Google LLC) — the Navigation SDK runs on your device while you navigate a route and processes your position there under Google's own terms; our servers also look up place details and photos using place identifiers only, never your location.
OpenAI — generates the narration text for our routes from our own route descriptions. No personal data is sent to OpenAI: the input is our editorial content about places, not anything about you.
Legal requirements — if required by law or to protect the rights and safety of AI Guide and its users.
Business transfers — in connection with a merger, acquisition, or sale of assets, with appropriate notice.

All processors are bound by data processing agreements that meet the requirements of Article 28 GDPR and include appropriate safeguards.

5. Where your data is stored & international transfers

We keep your data in the European Union wherever we can:

Main database and processing — Cloud Firestore and our server functions run in Google Cloud's EU regions (Belgium, europe-west1 / eur3).
Route imagery and narration audio — stored in EU-located cloud storage.
Firebase Authentication account records (email, name, sign-in provider, profile photo URL) — these are stored by Google in the United States, because Firebase Authentication does not offer an EU-only option.

Where personal data leaves the European Economic Area (EEA), the transfer is safeguarded by Google's Data Processing Terms, the European Commission's Standard Contractual Clauses (SCCs) and Google's certification under the EU-US Data Privacy Framework, which the European Commission has recognised as providing adequate protection. Apple and Google may likewise process purchase data outside the EEA under their own safeguards.

You may request a copy of the relevant safeguards by contacting us at [email protected].

6. AI processing

The narration you hear on a route is generated with the help of an AI model (OpenAI) from route descriptions written by us. This generation is about places, not about you: we do not send your account data, your location or your route activity to the AI provider. The audio is produced in advance and stored in the EU.

We do not use automated decision-making that produces legal or similarly significant effects on you within the meaning of Article 22 GDPR. If you have questions about any automated output, you can contact us at any time.

7. Data retention

We keep personal data only as long as necessary for the purposes described in this policy or as required by law:

Account data and settings — until you delete your account. You can do this yourself in the app (Profile → Delete account) or from our manage your data page.
Route activity — 12 months from your last activity on a route, after which it is deleted automatically; it is also deleted immediately when you delete your account.
Purchase records — 10 years, as required by Czech accounting and tax law. After you delete your account these records are kept in pseudonymised form (linked to an internal identifier only, not to your email or name).
Server logs — 30 days, stored in the EU.
Correspondence — as long as needed to handle your request, at most 12 months after it is closed.

You may request a copy of your data at any time from our manage your data page or by contacting us at [email protected].

8. Your rights

Under GDPR, you have the following rights with respect to your personal data:

Right of access — to obtain a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate or incomplete data
Right to erasure — to request deletion of your data ("right to be forgotten")
Right to restriction — to request that we limit how we process your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests

The fastest way to delete your account is in the app under Profile → Delete account. You can also exercise your right of access and right to erasure from our manage your data page, or contact us at [email protected] for any of these rights. We will respond within 30 days as required by GDPR.

You also have the right to lodge a complaint with the Czech data protection supervisory authority:
Úřad pro ochranu osobních údajů (ÚOOÚ)
www.uoou.cz

9. Cookies

This website sets no cookies and loads nothing from third parties — fonts are self-hosted. The app uses no advertising or analytics SDKs.

10. Security

We implement appropriate technical and organizational security measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Children's privacy

The Service is not directed to children under the age of 16. In accordance with GDPR, we do not knowingly collect personal data from children under 16 without verifiable parental consent. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will show a notice in the app and update the date at the top of this page. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

13. Contact us

If you have any questions about this Privacy Policy, how we handle your data, or to exercise your data subject rights, please contact us:

AI guide s.r.o.
Na Drážce 1561, Pardubice III – Bílé Předměstí
530 03 Pardubice, Czech Republic
IČO: 21665524 | DIČ: CZ21665524
Email: [email protected]