Privacy Policy

Who we are

DunajecAI ("we", "the app") is a GPS audio guide for rafting the Dunajec River Gorge, available at dunajecai.app and as a mobile app. For any privacy question or request, contact us at dunajecai.app@gmail.com.

What we collect and why

• Account data (email address, optional name, language preference): collected when you create an account, used to sign you in, remember your settings and manage your subscription. Stored with our database provider Supabase.
• Location: used only while you use the guide or map, to play audio commentary as you pass points of interest and to show your position. Your location is processed on your device and is not stored on our servers or shared with anyone. You can deny location access; the guide then works without automatic playback.
• Payment data: payments are processed by Stripe. We never see or store your card number. We store only the payment record (amount, date, product) needed to activate your purchase.
• Bookings and trips: reservation requests you make to listed businesses and your trip history (route, points visited), so you can review them and resume trips.
• Feedback and comments: anything you voluntarily submit, used to improve the app and, for comments, shown publicly in the app.
• Anonymous usage analytics (page views, performance) via Vercel Analytics, without cookies-based cross-site tracking.

Content moderation & reporting

Trip reviews, POI comments, and their attached photos are public and written by other travelers. Every review, comment, and photo has a "Report" action if you find it spam, abusive, or otherwise inappropriate. Reported content is queued for review by our moderators, and content that receives multiple reports is automatically hidden pending review. You can also block a specific author so their content no longer appears to you. For anything our in-app report tool doesn't cover, or to report a safety concern directly, contact dunajecai.app@gmail.com - we aim to review reports within a few days.

What we do not do

• We do not sell your data.
• We do not show third-party advertising.
• We do not track you across other apps or websites.
• We do not store your GPS location history on our servers.

Service providers

We rely on: Supabase (database and authentication, EU-hosted), Stripe (payments), Vercel (hosting and anonymous analytics), Resend (transactional email, e.g. a reply to your feedback). Each processes data only as needed to provide its service.

Your rights (GDPR)

You can access, correct or export your data, and you can delete your account and all associated data yourself at any time: go to your account page and choose Delete Account. Deletion is immediate and permanent. For anything else (access requests, corrections, complaints), email us and we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Data retention

Your data is kept while your account exists. When you delete your account, all personal data linked to it is deleted; feedback you submitted is kept in anonymised form (with no link to you). Payment records are retained as required by accounting law. Content reports and moderation actions are kept indefinitely as a permanent record of what was reported and how it was resolved, but reports are not linked to a deleted account's remaining data. An accountless native app identity (used only when you purchase Premium without creating an account) is not deleted automatically, but is not linked to any personal information beyond what you optionally choose to add (a nickname, an avatar); it exists only on your device and RevenueCat's purchase records, and stops being used once the device is uninstalled.

Children

The app is intended for general audiences and does not knowingly collect personal data from children under 16. Accounts are not required to use the free parts of the guide.

Changes

If this policy changes materially, we will update this page and the date above.