Privacy Policy

Last updated: 3 November 2026

Kraków Guides ("the app") is a self-guided audio tour application for the city of Kraków. We collect as little as possible and never sell your data.

What we collect

Your passport: the country you are visiting from, a name if you choose to write one, the stories you have heard, your quiz scores and the day you started. Used to show your progress and to suggest which walk to start with. It stays on your iPhone, and is kept in your account if you sign in.
Usage events: anonymous events such as "tour started", "stop reached" or "purchase made", used to understand which walks people enjoy and where they stop. Handled by Google Firebase Analytics. We do not use advertising identifiers.
Purchase records: which walks were unlocked, so we can restore and support them. Payment itself is processed entirely by Apple; we never see payment details.
Notes after a walk: if you write a private note to the guide about a walk, the note and its rating are stored with your account and reach the guide (see below). It is never published.
Questions to the guide: if you sign in and ask the guide a question about a walk you bought, the question and the guide's reply are stored with your account. With your question the guide also sees which walks you have bought, how far you got in each, your quiz scores and ratings, the country from your passport, your iPhone's language and since when you use the app. Never your name, e-mail address or account identifier.
Messages to the team: if you write to us from the app, your messages and our replies are stored with your account. Each message comes with the app version, the iPhone model, the iOS version, the language and region, whether you are online, whether location access is allowed (not your location), whether headphones are connected and, during a walk, the walk and the stop.
Notifications: if you allow them, a notification token for your iPhone is stored with your account, so that the guide's and the team's replies reach you. It is used for nothing else.
Newsletter: if you tick "Email me when the guide adds a new walk" when signing in, your e-mail address is stored with your account for that.

Who reads your questions and messages

The guide reads and answers questions and notes in Slack, a workplace messaging service run by Slack Technologies (Salesforce), in a private channel our team can see too; messages to the team go to a private channel that only the team reads. So the text you send, with the details listed above for it, is kept by Slack for us under a data processing agreement with the European Commission's Standard Contractual Clauses; Slack stores it in the United States and takes part in the EU–US Data Privacy Framework (Slack's privacy policy). Questions and notes reach Slack without your name, e-mail address or account identifier. Messages to the team carry your account's random identifier, so that our reply reaches you in the app, never your name or e-mail address. Until October 2026 they went through Telegram, another messaging service.

Location

Your location is processed on the device only: it is used to start tour stories as you reach each stop and to show walking distances. Location data is never transmitted to our servers and never stored.

Your account

The app signs each installation in to Google Firebase anonymously, with no name, e-mail or password. That anonymous account is what keeps your data separated from everyone else's, and it is created automatically so the app works without you signing up.

You may optionally sign in with Apple, Google or a link sent to your e-mail, to keep purchases and progress across devices and to ask the guide a question. If you do, we receive the identifier the provider gives us and, if you allow it, your name and e-mail address (with an e-mail link, your e-mail address). You can delete your account, and everything stored with it, from inside the app at any time.

Where your data is stored

Data is stored with Google Firebase. The database (Cloud Firestore) is located in europe-central2, Warsaw, Poland. Analytics events are processed by Google on its own infrastructure. Notifications are delivered by Google Firebase Cloud Messaging and Apple's push notification service.

What we do NOT do

No advertising, no ad identifiers.
No tracking across other apps or websites.
No sale of personal data. It goes only to the services that run the app and are named here: Google Firebase, Apple and Slack.
No passwords. Signing in is optional and handled by Apple, Google or an e-mail link; we never see a password.

Audio & photos

The app never records audio; the microphone is not used. If you add a passport photo, it is stored on your device only and is never uploaded.

Data retention & deletion

Your passport, purchase records, notes and messages to the team are kept while your account exists. A question and its reply are kept for 12 months after the guide answers, or after you send it if there is no answer. You can delete a question in the app, or your account and everything stored with it; you can also contact us and we will delete everything associated with your account. A copy of questions, notes and messages stays in the guide's or the team's Slack channel, without your name.

Children

The app is suitable for all ages and does not knowingly collect personal information from children.

Changes

We may update this policy; the current version always lives at this address with the date above.

Contact

Kraków Guides, by Dobreon sp. z o.o.: audiotours@krakowhleb.pl

This website and the Google Play waitlist

This part covers audiotours.krakowhleb.pl and what happens to your email address when you join its waitlist. Both are run by Dobreon sp. z o.o., which is responsible for your data.

What we collect

Only the email address you type in, and the date you joined. This site sets no cookies and runs no analytics or tracking.

What we use it for

To send you a short note confirming you’re on the list, and an email with the link when the app you’re waiting for is out on the App Store or Google Play. Nothing else, and we never sell or share your address.

We do this because you asked us to: ticking “I accept the Privacy Policy” and joining the waitlist is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time.

Who handles it for us

Resend (resend.com) stores the waitlist and sends our emails.
Cloudflare (cloudflare.com) hosts this website and, like any web host, processes technical data such as your IP address to deliver and protect it.

Both are US companies, so your data may be processed outside the European Economic Area, under the safeguards the GDPR requires, such as the EU Standard Contractual Clauses.

How long we keep it

Only for the waitlist. Once the Google Play launch email has gone out, we delete the list. If you want your address removed sooner, write to us and we will.

Your rights

You can ask to see, correct or delete your data, and withdraw your consent, by replying to any of our emails or writing to audiotours@krakowhleb.pl. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).