Travel AI Privacy Policy

📋 1. DATA CONTROLLER

Identity: Carlos Cao López

Contact: carloscao@anyart.app

📩 2. WHAT DATA DO WE PROCESS?

• Identity Data: Email, User ID, name.
• Usage and Technical Data: Device information, tokens, logs.
• Geolocation Data: GPS coordinates.
• Multimedia Content: Photographs of artworks.
• Transactional Data: Subscriptions, payments via Stripe.
• Advertising and Tracking Data: Device advertising identifiers (e.g., Apple IDFA, Android Advertising ID) and app interaction events. This data is linked to your user identity.

🎯 3. PURPOSE OF PROCESSING

• Service Provision: Identifying artworks via AI.
• Account Management: Authentication and profile management.
• Billing: Premium/Travel Pass subscriptions.
• AI Service Improvement: Only with consent.
• Communications: Push notifications.
• Marketing and Third-Party Advertising: To measure app installations, analyze user interactions, and deliver personalized advertisements through third-party platforms (such as Meta/Facebook).

📜 4. LEGAL BASIS

• Execution of the Contract: To provide the service.
• Consent: Geolocation, notifications, AI training, and cross-app tracking for personalized advertising (via App Tracking Transparency).
• Legitimate Interest: Security.
• Legal Obligation: Billing and tax compliance.

⏳ 5. DATA RETENTION

• Active Data: Retained as long as the account exists.
• Account Deletion: Immediate deletion of personal data upon account deletion.
• Statistics: Anonymized images may be kept for statistical purposes.
• Tax Data: Retained for 5-10 years as required by law.

🤝 6. RECIPIENTS (THIRD PARTIES)

• Supabase: Database and authentication.
• Stripe: Payment processing.
• Expo: Notifications services.
• AI Providers: Google Cloud, OpenAI, Alibaba Cloud.
• Advertising Partners: Meta Platforms, Inc. (for ad tracking, attribution, and delivery of targeted ads).
• AppsFlyer: Mobile attribution and marketing analytics platform (for measuring advertising campaign effectiveness and install attribution).

⚙️ 7. YOUR RIGHTS

Rights to Access, Rectification, Deletion, Opposition, Portability, and Limitation.

You may modify your profile, download your data, or delete your account directly within the app.

🔒 8. SECURITY MEASURES

• SSL/TLS Encryption (HTTPS).
• JWT Tokens.
• No storage of full credit card details.