Privacy Policy

1. Introduction

Welcome to Scavy Tours ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service"). By accessing or using the Service, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information when you use our Service:

• Name, email address, and account credentials
• Payment and billing information (processed securely via Stripe)
• Profile preferences and tour history
• Communications you send to us or through the AI assistant

2.2 Automatically Collected Information

• Device information (type, operating system, unique identifiers)
• Location data (with your explicit consent, for tour navigation)
• Usage data (pages visited, features used, interactions with the AI assistant)
• Audio data (only when you explicitly activate the microphone for voice queries)

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Personalize your tour guide experience and AI recommendations
• Provide location-based navigation and checkpoint verification
• Process voice queries through our AI virtual assistant
• Send you updates, security alerts, and support messages
• Detect, prevent, and address fraud, abuse, or technical issues
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Payment Processors: Stripe processes payment information under their own privacy policy
• AI Service Providers: Voice and text queries are processed by our AI partners to provide assistant responses
• Service Providers: Third parties that help us operate the Service (hosting, analytics)
• Legal Requirements: When required by law, subpoena, or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Location Data

Our Service uses location data to verify checkpoint visits, provide navigation assistance, and deliver location-specific content. Location access is requested only when needed and requires your explicit permission. You may disable location services at any time through your device settings, though this may limit certain gamification features such as checkpoint verification and stamp collection.

6. Voice and Audio Data

When you use the voice input feature, your audio is processed in real-time to convert speech to text for AI assistant queries. We do not store raw audio recordings. Voice data is transmitted securely and used solely to fulfill your query. You must grant microphone access through your browser or device before the feature is activated.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS/SSL), secure payment processing (PCI-DSS compliant via Stripe), and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated data at any time.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Restrict or object to data processing
• Data portability (receive your data in a structured format)
• Withdraw consent at any time

10. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

11. Fraud Prevention

We employ automated and manual fraud detection systems to protect against unauthorized access, account abuse, payment fraud, and misuse of our Service. This may include monitoring usage patterns, flagging suspicious transactions, and verifying account authenticity. Users found engaging in fraudulent activity will have their accounts suspended or terminated, and we reserve the right to report such activity to law enforcement authorities.

12. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: