Privacy Policy

Who we are

DunajecAI ("we", "the app") is a GPS audio guide for rafting the Dunajec River Gorge, available as an iPhone and Android app (the app loads its content from dunajecai.app). You do not need an account to use the app. For any privacy question or request, contact us at dunajecai.app@gmail.com.

What we collect and why

• Account data (email address, optional name, language preference): only if you have an account, which the iOS and Android apps do not require. Used to sign you in, remember your settings and manage your subscription. Stored with our database provider Supabase.
• App identifier: the iOS and Android apps create a random anonymous identifier through RevenueCat. It is used to recognise your Premium purchase, count your free AI questions and let you delete your own comments and reviews. It is not linked to your name, email or Apple/Google account details.
• Location: used only while you use the guide or map, to play audio commentary as you pass points of interest and to show your position. Your location is processed on your device and is not stored on our servers or shared with anyone. You can deny location access; the guide then works without automatic playback.
• Payment data: in the iOS and Android apps, purchases are processed by Apple (App Store) or Google (Google Play), and RevenueCat records which anonymous app identifier owns Premium. On the website, payments are processed by Stripe. We never see or store your card number; we store only what is needed to activate your purchase (product, amount, date).
• Bookings and trips: reservation requests you make to listed businesses and your trip history (route, points visited), so you can review them and resume trips.
• Feedback, comments, reviews and photos: anything you voluntarily submit, including an optional nickname and avatar. Comments, trip reviews, photos and likes are shown publicly in the app; feedback is private. Photos are stored with Vercel Blob, and we remove the location and other metadata (EXIF) from uploaded photos. Photos added to points of interest and comments are checked by an administrator before they appear; photos in trip reviews appear immediately.
• AI assistant conversations: the questions you ask the in-app AI assistant and its answers are sent to Anthropic to generate the reply, and stored so we can review answer quality and improve the assistant. To answer some questions, the assistant may search the web, so the topic of your question can be used as a search query. Conversations are linked to your account if you have one, otherwise to the app identifier above. Please do not include personal details in your questions.
• Anonymous usage analytics (page views, performance) via Vercel Analytics and our own page-view counter, which records only the page visited, without cookie-based cross-site tracking.
• Abuse protection: to stop spam and abuse, we record your IP address with a timestamp when you use features such as uploads, reviews, reports, feedback and the AI assistant, and use it to limit how often they can be used.
• Data on your device: your settings and the offline download (narration, photos, map and app screens) are stored only on your device. Deleting the app removes them.

Content moderation & reporting

Trip reviews, POI comments, and their attached photos are public and written by other travelers. Every review, comment, and photo has a "Report" action if you find it spam, abusive, or otherwise inappropriate. Reported content is queued for review by our moderators, and content that receives multiple reports is automatically hidden pending review. You can also block a specific author so their content no longer appears to you. For anything our in-app report tool doesn't cover, or to report a safety concern directly, contact dunajecai.app@gmail.com - we aim to review reports within a few days.

What we do not do

• We do not sell your data.
• We do not show third-party advertising.
• We do not track you across other apps or websites.
• We do not store your GPS location history on our servers.

Service providers

We rely on: Supabase (database and authentication, EU-hosted), Apple and Google (app store purchases), RevenueCat (in-app purchase records), Stripe (website payments), Vercel (hosting, photo storage and anonymous analytics), Resend (transactional email, e.g. a reply to your feedback), Anthropic (generates the AI assistant's answers) and CARTO (map images, based on OpenStreetMap data; as with any website, your device's IP address is visible to CARTO when map images load). Weather and water level data are fetched by our server, so no personal data is sent to those sources. Each provider processes data only as needed to provide its service.

Your rights (GDPR)

You can access, correct or export your data, and you can delete your account and all associated data yourself at any time: go to your account page and choose Delete Account. Deletion is immediate and permanent. For anything else (access requests, corrections, complaints), email us and we will respond within 30 days. If you use the app without an account, email us your app ID (shown in Settings, tap to copy) and we will delete the comments, reviews, photos and AI conversations linked to it. You also have the right to lodge a complaint with your local data protection authority.

Data retention

Your data is kept while your account exists. When you delete your account, all personal data linked to it is deleted; feedback you submitted is kept in anonymised form (with no link to you). Payment records are retained as required by accounting law. Content reports and moderation actions are kept indefinitely as a permanent record of what was reported and how it was resolved, but reports are not linked to a deleted account's remaining data. An accountless native app identity (used only when you purchase Premium without creating an account) is not deleted automatically, but is not linked to any personal information beyond what you optionally choose to add (a nickname, an avatar). It is stored on your device, in RevenueCat's purchase records and with the content you post or the AI questions you ask, and stops being used once the app is uninstalled; ask us by email to delete what is linked to it.

Children

The app is intended for general audiences and does not knowingly collect personal data from children under 16. Accounts are not required to use the free parts of the guide.

Changes

If this policy changes materially, we will update this page and the date above.