Vimana ("we", "us") is an audio walking-tour app: a catalogue of tours we make with artificial intelligence, walked free in the app. This policy explains what personal data we collect, how we use it, who processes it, and what happens to it when you delete your account. Contact: [email protected].

Account details. When you sign in with Google we receive and store your name and email address, and we store your app language and light or dark setting. Your walks. We store which tours you have started or saved, and for each one the last stop you reached and when you started and finished it, so Your walks can show them. We store which stop you reached, never the path you walked. Your location in Explore. If you allow location, the app sends your position to our servers when you open Explore or the map, to list the cities and tours nearest you and to show the tours around where you are. We use it to answer that request and do not store it with your account. You can use Explore without it. Your location during a tour. While you walk a tour the app reads your device's precise location, including while the screen is off, to show your position on the map and to play the right audio as you reach each stop. This stream is processed on your device only — it is not sent to or stored on our servers. What reaches us is which stop you reached (see Your walks). Place search. What you type into the map's search box is sent through our servers to Google Places to suggest matching places. We do not keep your searches, though a search that fails can appear in our error logs and reports. Reports and feedback. When you send us a report or feedback we store what you chose and wrote, the tour and the part of it the report is about, where the audio stood, and your app version, language and platform, linked to your account. A report never includes your location. Tips. When the app offers tips, Google Play or the App Store takes the payment; we never see your card or payment details. The store sends us a record of the tip — which tip, its amount, when, and the store's purchase reference — which we check with the store and keep with the tour and your account. Diagnostics. When the app or our servers hit an error, an error report goes to Sentry so we can fix it. It holds technical details: the device model and operating system, the app version, a random identifier for this installation of the app, your IP address, and a short record of what the app was doing just before, including the addresses of its recent requests to our servers, which can contain a map position or a place search. Reports from our servers carry your account's internal identifier, not your name or email. Our servers and Cloudflare also see standard request data, such as your IP address, and we use it to keep the service working and to limit abuse. We collect nothing else: no contacts, photos, microphone, or advertising identifier, and the app contains no advertising or analytics tools of its own. On the website, your sign-in is kept in your browser so you stay signed in.

We use your data to run your account and Your walks, to show tours near you when you ask, to record tips, to read your reports and improve the tours, and to keep the service safe and working. Where the GDPR or a similar law applies, we rely on providing the service you asked for (account, walks, Explore, tips), on our legitimate interest in fixing errors, preventing abuse and improving tours (diagnostics, reports), and on your permission for location, which you give and can withdraw in your device's settings. We do not sell personal data, we show no advertising, and we do not send your personal data to AI models or use it to train them.

Every tour is made with AI: its text, its narration voices (which are AI-generated, not real people), and any music and sound effects. The real historical recordings and video clips some tours play come from Wikimedia Commons and are credited where they play. We check tours against map data, but they can still contain mistakes, outdated details, or false statements about places, people, and businesses. Please verify anything that matters, such as opening hours, access, and safety, before relying on it, and tell us through Report or by email if something is wrong.

We use a small number of service providers: • Amazon Web Services — hosting, the database, and storage, in the European Union, and delivery of audio, pictures and clips from Amazon's network near you. • Cloudflare — every request to our API and website passes through Cloudflare's network, which delivers it and protects the service from attacks, and sees your IP address and the request. • Sentry — error reports, as described in section 2, stored in the European Union and kept for up to 90 days. • Expo — delivers updates to the app. Each time the app starts it asks Expo's servers whether a newer version of its code exists, sending your operating system, our app's identifier, a random identifier for this installation and your IP address; nothing about you or your walks. • Google — sign-in with your Google identity; Google Places, for the place search in section 2; and the map in the app, which is Google Maps. Google's map software on your device collects technical and usage information directly, such as your IP address, device details, an identifier of its own, and how you move the map, under the Google Maps End User Additional Terms of Service and the Google Privacy Policy. We make the tours with Google's Gemini AI models, which receive none of your personal data. • Google Play and the App Store — tips, which they process as described in section 2 under their own privacy policies. • Wikimedia Commons — the pictures, recordings and clips on your tour come from Wikimedia Commons, attributed to their authors and licences, and are delivered from our own servers. A picture on an older tour that has not yet been copied over still loads from Wikimedia's servers, which then see standard request data such as your IP address, like any image on the web. Some of these providers process data outside the country where you live, including in the United States, under their own safeguards for international transfers.

Vimana uses YouTube API Services. Our servers use them to choose the videos linked from a tour; we access no YouTube data about you, and you never sign in to YouTube through Vimana. A tour's video thumbnails load from YouTube's servers during a walk, even when you open no video, so YouTube sees standard request data such as your IP address. When you open a video it plays in YouTube's own player, served by YouTube, which may show advertisements and may place, read, or recognise cookies and similar technology on your device and collect information about your device and viewing. YouTube's use of that information is governed by the Google Privacy Policy and the YouTube Terms of Service.

Walking routes are planned when we make a tour, from OpenStreetMap data — © OpenStreetMap contributors, available under the Open Database License — with Geoapify; no data about you is sent to either. We store Google Maps content only as Google's terms permit.

We keep your account details, Your walks, your reports and your tips for as long as your account exists. You can delete your account at any time in the app (Profile → Delete account), on the web at the account deletion page, or by emailing us at [email protected] from your registered address (processed within 30 days). When you delete your account, we permanently and immediately delete your account details, Your walks, and your reports and feedback. Copies in our database backups expire within 30 days, error reports expire as section 5 says, and the tours themselves stay in the catalogue, since they were never yours or about you. Where the law requires us to keep a record of a payment, we keep only what it requires, for as long as it requires.

Depending on where you live (including under the EU/UK GDPR and Israeli privacy law), you may have rights to access, correct, export, or erase your personal data, to object to or restrict its processing, and to withdraw a permission you gave. Email us at [email protected] to exercise them. You can also complain to the data protection authority where you live.

Vimana is meant for adults and is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, email us and we will delete it.

When this policy changes we will update the version and effective date at the top of this page, and tell you in the app if the changes are significant.