AutoTour ← Home

Privacy

Privacy Policy

Last updated: July 10, 2026

This policy explains what information AutoTour ("AutoTour," "we," "us") collects, how it is used, and the choices you have. It applies to the AutoTour iOS app and this website.

1. Information we collect

• Location. With your permission, AutoTour uses your precise location to detect when you arrive at a tour stop. With an active tour open, the arrival can start the matching narration. If AutoTour is in the background or your screen is locked, arrival detection continues on-device, makes that stop ready, and can post a notification; tap or open AutoTour to play it. Map search and routing use Apple MapKit. AutoTour does not store your location on our servers or send your exact starting location to AI services.
• Tour preferences you enter. The place, landmark, or neighborhood you search for, plus options such as interests, duration, pace, transport mode, and language. These are sent to our AI provider to generate your tour itinerary and narration (see Section 2).
• Purchases. In-app purchases are processed and verified on-device with Apple's StoreKit. AutoTour's servers do not receive or store your purchase history, receipt, name, card number, or other payment details.
• App and iCloud data. Your generated tours, settings, and credit balance are stored on your device and sync through your private Apple iCloud/CloudKit account. Private CloudKit is the authority that prevents the same free tour or credit from being spent twice across devices, so the built-in free-tour and credit lane—and delivery of a purchased credit pack—requires a signed-in iCloud account. Cached audio and images stay on the device that downloaded them.
• App integrity identifier. Apple App Attest gives AutoTour an app-scoped cryptographic key identifier and opaque attestation receipt. Our proxy stores that identifier, receipt, its public verification key, a replay-prevention counter, and security timestamps. For daily per-installation cost limits, it also stores a purpose-specific SHA-256 hash derived from that random key and the UTC date. It is not your Apple ID, advertising ID, name, email, or hardware serial number, and we do not use it for tracking or advertising.
• Proxy usage and safety budgets. To prevent abuse and control service costs, AutoTour stores daily aggregate counts of authorization-method requests and App Attest registration/assertion challenges. It also stores reserved text-to-speech characters, estimated language-model input tokens, requested maximum language-model output tokens, and request counts in global totals and per-installation rows keyed by the daily hash described above. These records contain no tour text, IP address, account identifier, bearer credential, raw App Attest key, or exact request time, and are deleted after 90 days.

We do not collect your name, email (unless you email us for support), contacts, photos, browsing history, or advertising identifiers. AutoTour contains no third-party analytics or advertising SDKs and does not track you across apps or websites.

2. Third-party services

To create and play tours, AutoTour sends limited data to the following providers. Each handles data under its own privacy policy.

• DeepSeek (AI tour generation, through the protected AutoTour proxy) — receives the tour preferences you enter (place, interests, duration, etc.) to write your itinerary and narration. AutoTour does not intentionally send your account, contact details, or exact starting location. Information you type into free-form preference fields is part of the tour request, so do not enter sensitive personal information there.
• ElevenLabs (voice narration) — when a premium voice is selected, receives the narration text to synthesize speech. It does not receive your location or identity. Device-voice mode uses your iPhone's built-in speech and contacts no third party.
• Wikipedia / Wikimedia — we request publicly available encyclopedia text and images about your stops via standard web requests.
• Apple — Maps (MapKit) provides maps, routing, and place lookup; private iCloud/CloudKit syncs eligible app data; App Attest helps verify genuine AutoTour requests; and the App Store processes in-app purchases. Handled under Apple's privacy policy.
• Cloudflare — hosts the AutoTour proxy, App Attest receipts/public keys/replay counters, aggregate and daily per-installation safety budgets, and rate limiting. Cloudflare processes the app-integrity identifier and transient network metadata only to deliver and secure the service; persisted Workers observability logs are disabled, and AutoTour does not use this data for advertising or cross-app tracking.

3. How we use information

We use the information above only to create and play your tours, to grant the credits you purchase, to protect the proxy, and to respond to you if you contact support. App Attest verifies that a protected request comes from a genuine AutoTour installation and supports replay prevention and cost isolation; it does not verify a StoreKit purchase or current credit entitlement. Credit grants and spending are authorized separately by StoreKit and the app's private iCloud/CloudKit record. We do not sell your data, and we do not use it for advertising.

4. Data retention & deletion

AutoTour stores local copies of your tours, settings, credit balance, and caches on your device. Eligible records may also remain in your private iCloud/CloudKit account. Delete a tour in AutoTour to sync its removal, clear cached audio in Settings → Downloads, and manage AutoTour's iCloud access in your Apple Account's iCloud settings. Deleting the app removes its local data but does not necessarily remove previously synced iCloud records. We do not operate separate AutoTour user accounts or keep a behavioral profile of you. An app-integrity registration is retained so the same installation can continue using its persistent hardware-backed App Attest key; it is removed only for an explicit security response or when the protected service is retired. Aggregate and per-installation proxy usage/safety-budget records are removed after 90 days. Purchase records are retained by Apple under Apple's policies.

5. Children

AutoTour is rated 4+ and is not directed to children under 13. We do not knowingly collect personal information from children.

6. Your choices

You can change or revoke location access at any time in iOS Settings → Privacy → Location Services. Without location, tours still display their stops, but automatic arrival detection, arrival alerts, and foreground narration start will not work; you can still choose a stop and play it manually. You can clear caches in the app, and you may contact us with any privacy request.

7. Security & international processing

Data sent to third-party providers is transmitted over encrypted HTTPS connections, and on-device data is protected by iOS. Our providers may process data on servers located outside your country.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the latest version, and material changes will be noted here.

9. Contact

Questions about privacy? Email jaguirre2192@gmail.com.