Privacy Policy

Newsletter: if you subscribe, we collect your email address to send you updates about the project and new cities. Subscription uses double opt-in confirmation. Legal basis: consent (Art. 6.1.a GDPR), which you can withdraw at any time via the link in every email. The email is kept for as long as you remain subscribed.

Browsing data: our hosting provider (Vercel) logs technical data such as IP address, browser type and pages visited, to keep the site working and secure. Legal basis: legitimate interest (Art. 6.1.f GDPR).

Maps: to show places, the site loads maps from Mapbox, which may receive your browser’s IP address.

Cookies and preferences: the banner saves your choice in your browser (localStorage) to remember it. The site does not currently use analytics or marketing tools: if we add any in the future, we will do so only with your consent.

Website providers: Mailchimp (newsletter), Vercel (hosting) and Mapbox (maps). Some are based in the United States: transfers take place with adequate safeguards (Standard Contractual Clauses). We do not sell your data.

Account: To use GoDot you create an account in one of these ways:

email and password: we store your email and your password in encrypted form (we cannot read it);

Sign in with Apple: we receive an identifier, your email (including the "hidden" address Apple creates if you choose to hide yours) and, only the first time and if you share it, your name;

Sign in with Google: we receive an identifier, your email, your name and your Google profile picture.

We need them to recognise you and link your purchases to your account.

Legal basis: performance of a contract (Art. 6.1.b GDPR).

Location: If you allow it, the app uses your phone's location to show where you are on the map and the places nearby.

If you choose "Always Allow", the app can also alert you when it is closed: your phone checks whether you enter an area of about 100 metres around the nearest places and sends you a notification (at most one every 10 minutes). Audio never starts by itself.

Your location stays on your phone: we do not send it to our servers and we do not store it.

You can remove the permission at any time in your phone settings (iPhone or Android): the app keeps working, without centring the map on you and without alerts.

Legal basis: consent (Art. 6.1.a GDPR), which you give through the phone permission and can withdraw.

Nearby notifications: generated by your phone (see above).

City waitlist: if you tap "Notify me" on an upcoming city, we store your account, the city, the app language and a code to send you a notification (push token) when the city becomes available. You can leave the list at any time by tapping the button again.

Legal basis: consent (Art. 6.1.a GDPR).

Purchases: Tours and City Passes are bought through Apple's App Store or Google Play. We never see or store your card details: Apple or Google handles the payment. Through RevenueCat we receive the store's purchase confirmation (product, date, expiry, transaction identifier) to unlock your content and let you restore it.

Legal basis: performance of a contract (Art. 6.1.b) and tax obligations (Art. 6.1.c GDPR).

Feedback: If you send us feedback from the app, we store your rating, your answers and the text you write, the language and the app version. Please do not write personal data in the free text. If you delete your account, the feedback remains but without any link to you.

Legal basis: legitimate interest in improving the app (Art. 6.1.f GDPR).

App errors: When the app runs into an error, we send Sentry (servers in the EU) a technical report: phone model, operating system and app version, screen and error details. We do not send your email, name or IP address.

Legal basis: legitimate interest in keeping the app working (Art. 6.1.f GDPR).

Anonymous statistics: To understand how the app is used (for example which places are opened and listened to, how many people reach a purchase) we send PostHog (servers in the EU) anonymous usage events: they are tied to a random code on your device, never to your account, email or name. The IP address is discarded. You can switch them off at any time in Settings → "Help us improve GoDot".

Legal basis: legitimate interest (Art. 6.1.f GDPR) and Art. 122 of the Italian Privacy Code, as anonymous and aggregated statistics.

What stays only on your phone: Language, chosen narrator voice, saved places, listened places and settings are stored only on your device and are deleted if you uninstall the app.

When you write to us: If you write to us from the in-app "Write to us" form, we store your message, the topic, the email to reply to, the language, the app version and your phone model, and forward them to our support inbox. If you write to support@ or privacy@godotguide.com, we use your address and message. In both cases only to reply to you.

Legal basis: performance of a contract and legitimate interest in supporting you (Art. 6.1.b and 6.1.f GDPR).

We do not sell your data, we do not show ads and we do not profile you.

We use providers that process data on our behalf (processors):

Apple and Google, for sign-in with their accounts and for payments on the App Store and Google Play, act as independent controllers under their own privacy policies.

Transfers outside the EU: for providers in the USA, transfers take place under the EU-US Data Privacy Framework, where the provider participates, or under the European Commission's Standard Contractual Clauses.

Account and purchase data: as long as the account exists. Tax documentation for sales is issued and kept by Apple and Google.

Waitlist: until you leave it or delete your account.

Error reports: about 30 days (Sentry setting).

Anonymous statistics: 1 year (PostHog plan).

Feedback: no longer linked to you after your account is deleted.

Support messages: 2 years, then we delete them.

You can ask to access, correct or delete your data, to restrict its use, to receive it in a readable format (portability), to object to processing based on legitimate interest, and to withdraw your consent at any time. Write to privacy@godotguide.com: we reply within 30 days.

Deleting your account: in the app, Settings → at the bottom of the page → Delete account. We immediately delete the account and all linked data. Notifications already scheduled on your phone and data stored only on the device are removed when you uninstall the app.

If you believe the processing breaks the law, you can lodge a complaint with the Italian Garante per la protezione dei dati personali (garanteprivacy.it) or with the authority of your EU country.

If you are under 14, you may use GoDot only with the consent of a parent or guardian.

If we change this policy we update the date at the top; for important changes we will let you know in the app.

Gianmarco Violante

Via Santa Maria del Casale, 46 – 72100 Brindisi (BR), Italy

VAT no. IT02495380749

privacy@godotguide.com

We have not appointed a Data Protection Officer (DPO).