Privacy

How Eye Walk AI handles and protects account and tour data, including retention and account closure.

Effective September 1, 2026 · Policy version privacy-2026-09

When you create an account, we process your email address, Firebase account identifier, language, optional display name, consent choices, and account status. We also keep an app-specific device identifier so a tour session and its offline progress can be synchronized safely.

For paid access, we keep product, transaction, entitlement, refund, and restoration records linked to your account. Apple handles iOS payment credentials and Stripe handles web payment credentials; Eye Walk AI does not receive your full payment-card number.

Tour generation uses the destination, language, duration, distance, mobility, and interest choices you submit. Tour progress records include session events such as starting, reaching a stop, pausing, resuming, and completing a tour.

Precise location is requested only while you actively use tour guidance or explicitly choose a current-location feature. Guidance uses it on the device to show your position and determine whether you are near a stop. When you choose current-location discovery or ask what is open nearby, your coordinates are sent to the platform API and its map provider for that request so destinations or nearby places and opening status can be returned. Eye Walk AI does not use those requests to build a continuous device-location history. Map and operating-system providers may process data under their own notices.

Camera guidance is optional and starts only after you choose it and grant permission. Live guidance frames stay on the device. Landmark Scanner is a separate, explicit action: only after you tap Scan landmark is one compressed image sent securely through the platform API to Google Cloud Vision for recognition. Eye Walk AI does not retain the image. The provider may process service data under its own notice. Denying camera or location access leaves text, map-link, and manual-arrival controls available.

Downloaded tours, media, and unsent progress are stored locally. The iOS app encrypts its offline database. Local data is removed when you use the account-deletion flow; deleting the app also removes app-local data under iOS behavior.

We use this information to authenticate accounts, prevent abuse, deliver and restore purchases, generate requested tours, provide navigation and offline continuity, synchronize progress, answer support requests, and satisfy security, accounting, and legal obligations.

Eye Walk AI does not sell personal data, show third-party advertising, or use personal data to track you across other companies' apps and websites. Product analytics is enabled by default for the current United States launch and can be disabled at any time under Settings > Privacy choices.

We use Firebase and Google Cloud for authentication, app attestation, storage, platform operation, and an explicitly requested landmark scan; Apple for iOS distribution and purchases; Stripe for web checkout; Google Maps for map presentation; and OpenAI for requested tour generation. Providers process only the information needed for their role under their own terms and data-protection commitments.

These providers may process information in countries different from yours. Where required, transfers rely on the provider's contractual and legal safeguards.

We retain data only as long as needed for the purposes above. After account closure, purchase, entitlement, tour, scan, referral, commission, refund, partner, fraud-prevention, tax, dispute, and audit history remains available without your direct profile details so financial and partner records stay accurate.

You can request account deletion in Settings after recent authentication. The device signs out immediately, and you may sign back in during the 10-minute cancellation window to cancel before closure begins. After that window, the tracked job disables access, removes your sign-in credentials, structured profile and contact details, and notification endpoints, and records closure. App Store refunds remain a separate Apple process. You may also ask for access, correction, or deletion by contacting the privacy address below. Rights and available appeals depend on your location.

We use encrypted transport, restricted service identities, app attestation, server-side authorization, immutable purchase evidence, and encrypted iOS offline storage. No system is completely secure; please report suspected account compromise promptly.

Eye Walk AI is not directed to children under 13, and we do not knowingly collect their personal data. A parent or guardian who believes a child supplied data should contact us.

Material policy changes receive a new version and effective date. When law requires it, we will request a new consent choice rather than treating continued use as consent.