Privacy and data
App version v0.65.0
This app walks the city with you, and to do that it needs to know where you are and who you are. Here is exactly what we collect, why, and who else sees it. No small print.
Who handles your data
The data controller is:
PRIVATE GUIDE IN
77 boulevard de Magenta, 75010 Paris
SIRET 10292761300012 · RCS Paris 102927613 · APE 7990Z
TVA FR35 102927613
code@ciceapp.com
What we collect
- Your precise location (GPS) — so we know which street and neighbourhood you are in and can recommend places genuinely near you. It is the most sensitive thing we handle.
- Your email — to identify your account so you can sign back in. If you sign in with Google, your public name too.
- Your travel profile — name, gender, age range, who you travel with, budget and interests. It is what lets the guide adapt to you instead of giving generic answers.
- Your conversations — what you type or say to the guide and what it replies. Kept so it remembers your preferences between sessions.
- Your profile photo — only if you choose to upload one. It is optional and you can remove it whenever you like.
- Your usage — how many messages and how many seconds of speech you consume, to apply your plan's limits.
Your location is sent to the AI inside every request, with coordinates and an approximate address, because that is what lets it tell you how long a place is on foot. You can use the app without GPS access: type your city by hand and the guide works with less precision.
On what legal basis
- Your consent, for location access and for the profile photo. You can withdraw it at any time in your browser settings or by deleting the photo.
- Performance of the contract, for your account, your conversations and your plan: without that data the service cannot work.
- Our legitimate interest, to measure consumption and prevent abuse that would make the service unsustainable.
Who else sees it
We do not sell your data or hand it to advertisers. We do share it with the technical providers that make the app work, and only the part each one needs:
| Supabase | Database and authentication. Stores your account, profile, conversations and usage. |
| Anthropic (Claude) | The model that answers. Receives your profile, location, weather and conversation in order to reply. |
| Google Maps Platform | Routes and place search. Receives your coordinates and the name of the place you are looking for. |
| Vercel | Hosting. Processes the requests and keeps temporary technical logs. |
| OpenStreetMap (Nominatim) | Turns your coordinates into street, neighbourhood and city. |
| Tavily | Web search for up-to-date answers. Receives the text of your question. Paid plans only. |
Several of these providers are in the United States, so your data leaves the European Economic Area. When it does, the transfer relies on the European Commission's standard contractual clauses or on the EU-US adequacy framework.
For how long
- Your account, profile and conversations: for as long as your account is open.
- Usage counters: 60 days, and only the last 30 are ever read.
- If you delete your account, all of the above is erased immediately and irreversibly.
Your rights
Over your data you may exercise:
- Access: know what we hold about you.
- Rectification: correct it. You edit your profile yourself on this screen.
- Erasure: delete everything. It is under "Delete my account", and it is immediate.
- Portability: receive a copy in a machine-readable format.
- Objection and restriction: ask us to stop processing your data for a particular purpose.
For anything you cannot do from the app, write to the contact address above. You may also complain to a supervisory authority: the CNIL in France, where the controller is established, or the authority in your own country of residence.
What we don't do
- We do not sell your data or share it with advertisers.
- We do not track you across the web or use advertising cookies. The app only stores on your device what it needs to keep your session and preferences.
- We do not use your conversations to train AI models.
Minors
The service is not aimed at children under 14. If you believe a child has given us their data, write to us and we will delete it.