Privacy Policy

1 Data Controller

Storystride Ltd

4th Floor Silverstream House, 45 Fitzroy Street, London, England, W1T 6EB

[email protected]

2 Data We Collect

We collect and process the following categories of data to operate and improve the App.

2.1 Account Data

• Email address
• Secure authentication data (passwords are hashed)

2.2 Location Data (Precise)

• GPS location during app use
• Used for walking tour navigation and stop detection
• Only check-in events (e.g. reaching a tour stop) may be stored on our servers

2.3 Device Data

• Device identifier (UUID)
• IP address

2.4 Usage Data

• App interactions
• Feature usage
• Crash logs and performance data

2.5 Feedback Data

• Feedback submitted via Formspree
• May include any information voluntarily provided by the user

2.6 Purchase Data

• Subscription status via Apple App Store or Google Play
• We do not store payment card details

3 How We Use Data

We use personal data to:

• Provide app functionality (tours, navigation, progress tracking)
• Manage user accounts
• Process feedback and support requests
• Provide advertising (free tier only)
• Improve app performance and stability
• Process and validate subscriptions
• Send marketing communications (users may opt out at any time)

4 Advertising

We use Google AdMob to display advertisements to free-tier users. AdMob may collect:

• Advertising identifiers (IDFA on iOS, GAID on Android)
• IP address
• Usage data

On iOS devices, personalised advertising is only enabled if you grant permission via Apple App Tracking Transparency (ATT). If you do not consent, only contextual ads are shown.

5 Data Sharing

We share limited data with trusted third-party providers to operate the App:

• Google AdMob — advertising services
• Google Maps API — maps and routing services
• RevenueCat — subscription management
• Supabase — authentication and database hosting
• Sanity — content management system
• Formspree — feedback form processing
• Brevo — marketing emails

These providers only process data as necessary to provide their services. We do not sell personal data.

6 Marketing

We may send marketing emails about updates, features, or events. You may opt out at any time using the unsubscribe link in emails or by contacting us directly.

7 Data Retention

We retain personal data while your account is active. After account deletion, data is deleted within 30 days. Some anonymised logs may be retained for security and analytics purposes.

8 Account Deletion

You may delete your account at any time via the App or by contacting support. Account deletion removes:

• Account information
• Progress history
• Personal identifiers

9 Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent where applicable
• Opt out of marketing communications

To exercise any of these rights, contact us at [email protected].

10 Children's Privacy

The App is intended for users aged 13 and above. If we become aware that a child under 13 has provided personal data, we will delete it promptly.

11 Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the App or email. Continued use of the App means acceptance of the updated Policy.