English

Privacy Policy

Last updated: [date]

Controller: Tourin, operated by Dolmen [legal name, tax ID and address].

Privacy contact: privacidad@tourin.app

Tourin processes personal data to provide the app, create accounts, display tourist points, validate visits, manage achievements, improve the experience and keep the service secure. This policy follows Chilean Law No. 19,628 as amended by Law No. 21,719, and reflects common international privacy practices such as transparency, minimization, security, access, correction, deletion, portability and objection.

Data we process: name, email, password handled by Supabase, country, date of birth, language, user ID, session data, preferences, recorded visits, achievements, usage statistics, location permissions, approximate or precise location when authorized, technical events and analytics events.

Purposes and legal bases: we use data to create and manage accounts, authenticate users, provide map, stamp, passport, achievement and statistics features; answer requests; prevent abuse; improve stability; and measure app usage. Depending on context, the basis may be service performance, consent, compatible legitimate interest, legal obligation or service security.

Location: Tourin requests location only when needed to show user position, center the map or validate proximity to a tourist point. Users can disable permissions in their device settings. We do not sell location data. Analytics should avoid exact coordinates unless strictly necessary and clearly disclosed.

Analytics: we use PostHog to understand usage, errors and performance. Analytics is provided with a visible opt-out. Where possible, we use internal identifiers, aggregated or pseudonymized data, and avoid unnecessary personal data.

Children and teenagers: users under 14 require consent from a parent or legal representative unless otherwise authorized by law. Users aged 14 to 17 may use the app with enhanced protections, respecting their best interests and progressive autonomy. If sensitive data of teenagers under 16 is processed, consent from a legal representative will be required.

Providers and international transfers: we use providers such as Supabase and PostHog for authentication, database, storage, analytics and infrastructure. These providers may process data outside Chile. We will use contracts, safeguards and appropriate measures to protect data and comply with international transfer rules.

Retention: we keep data while the account is active or as needed for the purposes above. When an account is deleted, we will delete or anonymize data unless retention is required for legal obligations, security, legal claims or minimum necessary records.

Rights: you may request access, correction, deletion, objection, portability, temporary blocking and withdrawal of consent by contacting privacidad@tourin.app. We will respond within applicable legal timelines. You may also complain to the Chilean Personal Data Protection Agency where applicable.

Security: we apply reasonable technical and organizational measures, including access controls, authentication, Supabase RLS where applicable, separation of private data and vendor review. No system is perfect, but we work to reduce risks of loss, unauthorized access or disclosure.

Changes: we may update this policy. Material changes will be communicated in the app or through reasonable means. The current version will remain permanently available.