Flaneo Privacy Policy

Version 1.1 · Effective: 3 October 2026 · Last updated: 3 October 2026

This policy explains what Flaneo collects, why, and what you can do about it. It covers the website flaneo.app (including the waiting list) and the Flaneo mobile app. It is written to comply with Argentina’s Personal Data Protection Act (Law 25.326), the EU/UK GDPR where they apply, and Apple’s App Store requirements. We tried to keep it short and honest; if anything is unclear, write to us.

1. Who is responsible

Flaneo is made and operated by Igor Kostrubin, an individual entrepreneur (monotributista) registered in Buenos Aires, Argentina. For data protection purposes this person is the data controller (“we”).

Contact: support@flaneo.app · Postal address: available on request.

2. The short version

3. What we collect, why, and on what basis

3.1 Website and waiting list (flaneo.app)

Data Why Legal basis Where it is kept For how long
E-mail address, interface language, the campaign link you came from (UTM), referrer, time of sign-up To send you the beta invitation and launch news (a handful of e-mails, no newsletter) Your consent A private Google Sheet (Google LLC) Until the public launch plus 12 months, or until you ask us to remove you
Standard server logs (IP address, browser type, requested page) Security and abuse prevention Legitimate interest Cloudflare (hosting) A few days
Your language choice So the site opens in your language next time Legitimate interest Only on your device (browser storage); never sent to us Until you clear your browser data

The website sets no tracking cookies. Providing your e-mail is voluntary; without it we simply cannot add you to the list. You can leave the list at any time by writing to support@flaneo.app.

3.2 The app

Data Why Legal basis For how long
Account identifier. A random anonymous account is created when you first open the app. If you choose Sign in with Apple, Apple gives us a user identifier and, only if you allow it, your e-mail (which may be Apple’s private relay address). To keep your walks and subscription across reinstalls and devices Performance of our contract with you Until you delete the account
Preferences. Language, interests, walking pace, voice, units, home city, onboarding state, interface toggles. To build walks you will like and show the app in your language Contract Until you delete the account
Walks. City, district, the stops in order, planned route, requested and estimated duration, when you started and finished, which stops you visited or skipped (as timestamps), the rating you gave, and what the walk cost us to generate (tokens and audio characters). To run the service, show your history, and keep our costs under control Contract; legitimate interest (cost control) Until you delete the account
Place feedback. Likes/dislikes of places, “already visited” marks, error reports about a place with your note. To improve your next walks and fix mistakes in our database Contract; legitimate interest Until you delete the account (error reports may be kept without your identifier)
Location. Used on your device to show you on the map and advance the audio. When you generate a walk, your position rounded to about 600 m is sent to our server once, to pick nearby places, and is kept only inside a one-way hash used for caching. No coordinate is stored, no track is recorded, no background location is requested. To build a walk around where you are Your consent (the iOS location permission), which you can withdraw in Settings at any time Not stored
Purchases. Apple (later Google) processes the payment; we never see card details. Through RevenueCat we receive a pseudonymous app user id, the product bought, purchase/renewal/expiry events, price and currency. To unlock Flaneo Pro and keep accounting records Contract; legal obligation (accounting) Subscription state: until you delete the account. Billing events: 10 years (Argentine accounting law), unlinked from your account when you delete it
Usage analytics. Pseudonymous events (screens opened, actions taken, app version, device model, OS version, coarse country) via PostHog, EU cloud. To understand which features work and fix what does not Legitimate interest; you can turn analytics off in Settings 12 months
Crash reports. Device model, OS version, app version, stack trace, memory state at the moment of a crash, via Sentry. To fix bugs Legitimate interest 90 days
Support. Whatever you write to support@flaneo.app. To answer you Legitimate interest Until the request is resolved plus 12 months

We do not collect your name, phone number, contacts, photos, health data, or precise location history. We do not ask for App Tracking Transparency permission because we do not track.

3.3 AI processing

To build a walk, our server sends to an AI provider (Anthropic; Google as a fallback) only: your interests, the requested duration and pace, your language, and a list of candidate places from our database with their identifiers. No account identifier, e-mail or precise location is included. The provider’s response is a selection and ordering of those places; the AI cannot add a place that is not in our database. Narration texts and audio (Google Cloud Text-to-Speech) are generated in advance for places, not for individual users, and contain no personal data. Every narration in the app is labelled as AI-generated together with its sources and verification status.

4. Who else sees data (processors)

We use the following providers under data-processing agreements. None of them may use the data for their own purposes.

Provider Role Data Location
Supabase Database, authentication, file storage Account, preferences, walks, feedback, subscription state EU (Frankfurt, eu-central-1)
Fly.io Application server Requests in transit EU (Frankfurt, fra)
Cloudflare Website hosting, CDN, e-mail routing Request metadata, e-mails to support@flaneo.app Global
Google (Sheets) Waiting-list storage E-mail and sign-up details from the website USA/EU
Apple Sign in with Apple, App Store purchases Apple user id, purchase receipts USA
RevenueCat Subscription management Pseudonymous app user id, purchase events USA
Anthropic, Google (Gemini) Route selection (AI) Interests, duration, candidate places—no identifiers USA
Google Cloud Text-to-speech Place narration text—no personal data USA/EU
PostHog Product analytics Pseudonymous usage events EU
Sentry Crash reporting Device and crash data EU (Germany)

We may also disclose data if the law requires it, or to protect our rights, your safety or others'. We do not sell or rent personal data and never share it with advertisers.

International transfers. Some providers are in the United States or the EU. Where data leaves Argentina or the EU we rely on the provider’s standard contractual clauses (or, for the EU, the European Commission’s adequacy decision for Argentina and the provider’s own safeguards).

5. Retention and deletion

6. Your rights

Depending on where you live, you have the right to access the data we hold about you, correct it, delete it, object to or restrict certain processing, receive a copy in a portable format, and withdraw consent at any time (this does not affect processing before the withdrawal). To exercise a right, write to support@flaneo.app from the address you want us to reply to; we may ask you to confirm you control the account. We answer within the deadline set by the law that applies to you and in any case within 30 days (Argentina: access requests within 10 calendar days, corrections within 5 business days).

Providing data is voluntary, but without the data described as “contract” above we cannot provide the service.

Argentina. La AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, en su carácter de Órgano de Control de la Ley N° 25.326, tiene la atribución de atender las denuncias y reclamos que interpongan quienes resulten afectados en sus derechos por incumplimiento de las normas vigentes en materia de protección de datos personales. (The Agency for Access to Public Information, as the supervisory body under Law 25.326, is empowered to handle complaints from anyone whose rights are affected by a breach of data-protection rules.) www.argentina.gob.ar/aaip

EU/UK. You may lodge a complaint with your local data protection authority.

7. Children

Flaneo is not directed at children under 13 (or the higher age your country sets for consenting to data processing, 16 in parts of the EU). We do not knowingly collect data from them; if you believe a child has created an account, write to us and we will delete it.

8. Security

Data travels encrypted (TLS). Every database table is protected by row-level security so that a user can only ever read their own rows; API keys for AI and speech services live on our server, never in the app. Access to production data is limited to the operator. No system is perfectly secure; if a breach affects you we will tell you and the relevant authority as the law requires.

9. Changes

We will post changes here with a new date. For material changes we will tell you in the app or by e-mail (waiting list) before they take effect.

10. Contact

support@flaneo.app · Igor Kostrubin, Buenos Aires, Argentina.