Wendari ("we", "our", or "the app") is a walking-tour planner for iOS. We are committed to protecting your privacy — the app has no accounts and no sign-in, and we store no personal data on our servers. This policy explains what information the app uses, how it is used, and your choices.
1. Information We Collect
Information you provide
Tour preferences: Your selected interests, pace, budget, and other tour settings are stored locally on your device.
Special instructions (optional): If you type or dictate custom instructions for a tour, that text is sent to our server with the generation request, included in the AI request that plans your tour (Section 3), and deleted with the rest of the generation inputs within 24 hours. Please don't include personal details you wouldn't want processed.
Saved tours: Tours you save — including your ratings and notes — are stored only on your device. They are never uploaded unless you explicitly share a tour (see below).
Shared tours: When you choose to share a tour, an anonymous snapshot of it (the stops, titles, and descriptions — no information about you) is uploaded to our server so the link works for the recipient. It is automatically and permanently deleted 30 days after you last shared or updated it.
Feedback: If you send in-app feedback, we store the message, its category, and the screen name you were on — anonymously, with no identifier linking it to you.
Information collected automatically
Location: We access your precise location to plan tours starting near you and to provide turn-by-turn navigation. Your coordinates are sent to our server during tour generation to find nearby places of interest, and are automatically deleted from the server within 24 hours. We do not keep any location history.
Information we do NOT collect
Photos: Tour photos are saved directly to your device's photo library. We never upload, access, or store your photos.
Audio: Voice dictation (for tour notes, instructions, and feedback) uses Apple's Speech framework; depending on your device and iOS settings, Apple may process the audio on its servers under Apple's privacy policy. Only the resulting text is kept, and only on your device — we never receive, transmit, or store your audio.
Analytics & advertising: We do not use third-party analytics, advertising, or tracking SDKs. We do not track you across apps or websites.
2. How We Use Your Information
Generate personalized walking tours based on your location and preferences
Provide turn-by-turn navigation and audio narration on your device
Host anonymous tour snapshots for share links you choose to create
Read anonymous feedback to improve the app
3. Data Sharing & Third-Party Services
We do not sell, rent, or share your personal information with anyone. To generate tours, our server calls the following services; none of these requests contains your name, email, or any account identifier:
Google Places API: To discover points of interest near your location. Google receives your coordinates for this purpose. See Google's Privacy Policy.
Foursquare API: We may also use Foursquare to discover points of interest; it would receive your coordinates for the same purpose. See Foursquare's Privacy Policy.
Google Routes API: To measure real walking distances between the stops on your tour. Google receives the coordinates of those places. See Google's Privacy Policy.
Open-Meteo: To retrieve the weather forecast for your tour area. Open-Meteo receives your coordinates. See Open-Meteo's Terms.
AI language model: To pick the best stops for your tour and write the short descriptions you see, our server sends an AI language-model provider the list of candidate places near your starting point (place names, categories, ratings, opening hours, and distances), your tour preferences (interests, pace, budget, meal options), any special instructions you typed for the tour, and a one-line weather summary. Because these places are near you, this data implies your approximate area; it contains no precise coordinates and no identifiers linking it to you. The AI only selects and describes real, verified places — it does not receive or generate any personal information. Depending on availability and quality, we may use one of the following providers: Google (Gemini), OpenAI, Anthropic, or DeepSeek. The same data described above is sent regardless of provider.
Turn-by-turn walking directions are computed on your device by Apple Maps (MapKit) and are subject to Apple's privacy policy; they do not pass through our server.
4. Data Storage & Security
Saved tours, ratings, notes, and preferences are stored locally on your device.
Our server stores only: anonymous shared-tour snapshots (auto-deleted after 30 days), in-flight tour-generation jobs (auto-deleted within 24 hours), and anonymous feedback. There are no user accounts or user tables.
All communication between the app and our server uses HTTPS encryption. Our server is hosted in the United States.
5. Data Retention
Tour-generation inputs (your coordinates and preferences) are deleted from our server within 24 hours.
Shared tours are permanently deleted 30 days after their last update; the share link stops working at that point.
We have no account data to retain — the app has no accounts.
Anonymous feedback is retained only as long as needed to act on it.
6. Your Rights & Choices
No account, ever: The app has no sign-in. Every feature — generating, navigating, saving, sharing tours, and sending feedback — works anonymously.
Delete your data: Deleting a saved tour in the app removes it from your device. A share link you already sent keeps working until it expires (at most 30 days); if you want a shared tour removed sooner, email us and we will delete it.
Location permission: You can revoke location access at any time in iOS Settings. The app will not be able to generate tours without it.
Background location: Background location is used only if you explicitly enable background narration. You can disable it at any time.
7. Children's Privacy
Wendari is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
8. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by updating the "Effective date" at the top of this page. Your continued use of the app after changes constitutes acceptance of the updated policy.
9. Contact Us
If you have questions about this privacy policy or your data, contact us at: [email protected]