Draft pending legal review. Not the final wording.
Enava Privacy Policy
This explains what data Enava collects, why, who it goes to and how long we keep it. Controller: [legal entity, address], info@enava.ai.
1. What we process
- Account: email, name, a password hash or your Google/Apple sign-in id, language, narration settings.
- Location: the coordinates and heading the app sends while you walk or drive, to tell you about places nearby and guide you along a route. Routes are kept with your account.
- Usage: which places you listened to, tours taken, ratings.
- Voice (only during "Ask"): when you press the button and ask a question, your voice is sent to Google Gemini for the answer. We don't store it. This works only with your separate consent, which you can withdraw in settings.
- Technical: IP address (abuse protection and limits), error logs.
2. Why
- To provide the service: stories nearby, routes, answers, syncing your progress (contract).
- Security and abuse protection (legitimate interest).
- Voice questions (your consent).
- Emails with codes and service messages (contract).
We don't sell your data or show personalised ads.
3. Who processes it for us
- Google Cloud: hosting, database, audio storage and the voice assistant (Gemini), in the EU (Warsaw region).
- Google Maps Platform (building routes; receives the route's coordinates) and Google Text-to-Speech (reading the stories about places): Google's global services, which may process data outside the EU.
- Anthropic (USA): writes the stories about places. Your personal data isn't sent, only facts about the place.
- ElevenLabs: premium narration of the stories, without your personal data.
- Resend: sending emails (your email address).
- Google, Apple: if you sign in with them.
Transfers outside the EU, including to the USA, rely on the EU Standard Contractual Clauses.
4. How long we keep it
- Your account and progress: until you delete them.
- Routes: up to 90 days after last use.
- Guest accounts: up to 180 days unused.
- Database backups: 7 days.
- Logs: up to 30 days.
- Voice recordings: not kept.
5. Your rights
- Get a copy of your data (export in the app).
- Correct it (profile).
- Delete your account and data (in the app or at /delete-account).
- Withdraw consent to voice questions (settings).
- Object to or restrict processing by writing to info@enava.ai.
- Complain to a supervisory authority (in Ukraine, the Parliament Commissioner for Human Rights; in the EU, your country's authority).
6. Children
The service isn't meant for anyone under 16.
7. Changes
We'll announce material changes to this Policy in the app.