Privacy Policy

This Privacy Policy explains how Nitrosoft LLC ("Nitrosoft," "we," "us," or "our") handles personal information when you use Guidera, our mobile application, website at guidera.one, and related services (collectively, the "Service"). Guidera is a product of Nitrosoft LLC.

This policy describes our current practices. A feature may use only the providers and data needed for that request. If you do not agree with this policy, do not use the Service. You may contact us at privacy@guidera.one.

1. Information We Collect

Account and profile information

We collect identifiers and profile details such as your name, email address, phone number, profile photo, date of birth, language, country, time zone, and preferences you choose to provide. Clerk handles authentication credentials and sessions. When you use email-and-password sign-in, Clerk processes the password credential; Guidera does not receive your raw password. Apple, Google, or Facebook may provide the account details you authorize them to share.

Travel and preference information

We collect trip destinations, dates, itineraries, traveler counts, saved items, search parameters, budgets, expenses, packing information, and travel preferences. Optional profile fields may include dietary or allergy information, accessibility needs, passport nationality for informational visa guidance, and emergency-contact details.

Content, communications, and imported material

We process AI prompts and responses, community posts, comments, messages, groups, events, reports, support requests, photos, audio or voice input, receipts, boarding passes, tickets, vouchers, and other documents you choose to submit. Uploaded material may contain information about other people; submit it only when you have authority to do so.

Location and device information

With device permission, Guidera may access precise or approximate foreground location for maps, nearby results, destination context, and an explicit current-location update used for nearby SOS alerts. The submitted iOS app does not claim continuous background location monitoring. We also process IP address, device and operating-system details, app version, locale, push token, network state, diagnostics, crash data, performance data, and feature interactions.

Subscription and provider-interaction information

Apple and RevenueCat provide transaction identifiers, product, entitlement, trial, renewal, and subscription-state information. Guidera does not receive your full App Store payment-card number. When you search for travel or follow an external-provider link, we may process destinations, dates, traveler counts, selected options, referral parameters, and click-attribution information.

Local Guide identity verification

If you apply to become a Local Guide, Didit may collect and process government-ID, selfie, biometric comparison, device, and fraud-prevention information under its own privacy terms. Guidera receives verification status, session identifiers, and related application results needed to review the application. Identity verification is not required for ordinary traveler use.

2. How We Use Information

• Provide accounts, trips, search, comparison, AI, import, expense, and community features.
• Personalize itineraries, suggestions, destination context, and app settings.
• Operate subscriptions, enforce feature access, restore purchases, and prevent abuse.
• Provide maps, translations, safety information, emergency tools, and support.
• Moderate content, investigate reports, enforce blocks, and protect users and the Service.
• Measure reliability and product use, debug failures, secure systems, and control provider costs.
• Comply with law, resolve disputes, and communicate material service or policy changes.

3. AI Processing and Data Sharing

Guidera uses third-party AI processors to generate requested features. Depending on the feature and available configuration, we may send the content you submit and the minimum relevant context to Google (Gemini), Anthropic (Claude),Perplexity, OpenAI, or xAI. Context can include prompt text, trip and preference information, destination or location context, images of menus, signs, tickets, documents or receipts, and audio selected for transcription or live assistance.

These providers act under their own service terms and data-processing commitments. We use business or API services under the applicable data terms and do not intentionally submit customer content for public-model training. Provider retention and use can vary by service and configuration. Avoid including unnecessary sensitive information in AI requests. AI results can be inaccurate, incomplete, or outdated; confirm important travel, visa, safety, health, legal-rights, price, and provider information with official or primary sources.

4. Service Providers and Other Recipients

We disclose information to processors only as needed to provide, secure, and measure the Service. The categories and current providers include:

• Clerk — authentication, account identity, credentials, and sessions.
• Supabase — PostgreSQL database, Storage, Realtime, and Edge Functions.
• RevenueCat and Apple — subscriptions, purchases, entitlements, and account-subscription management.
• Sentry — crash, error, and performance diagnostics.
• Mixpanel — product analytics and feature usage.
• Google — Gemini AI, Maps, Places, translation, vision, and related location services used by a requested feature.
• Anthropic, Perplexity, OpenAI, and xAI — AI generation, web-informed answers, fallbacks, or transcription when enabled for a requested feature.
• Mapbox — maps, geocoding, routing, and distance information.
• Didit — Local Guide identity verification and fraud prevention.
• Resend — transactional, invitation, moderation, and support email.
• Expo — app build/update infrastructure and push-notification delivery.
• Vercel and Iubenda — website hosting, security logs, and cookie-consent tooling.
• Travel and affiliate providers — search, availability, content, and external handoff through providers that may include SerpAPI, Kiwi.com/RapidAPI, Duffel, LiteAPI, Expedia/RapidAPI, Viator, and CJ Affiliate, depending on the search and availability.

Guidera is a discovery, planning, comparison, and referral service. We do not sell or issue flights, stays, cars, or experiences. When you leave Guidera, the external travel provider controls the information you submit to it, payment, final availability, total price, taxes, fees, cancellation, refund, and fulfillment under its own privacy policy.

We may also disclose information when required by law; to protect rights, safety, and security; in a corporate transaction with appropriate safeguards; or when you direct or consent to the disclosure. Community content and the profile fields you make public can be visible to other users subject to privacy, visibility, report, and block controls.

5. Sale, Advertising, and Affiliate Links

We do not sell personal information for money. Guidera may earn compensation when you follow or transact through certain travel-provider or affiliate links. We do not treat an external click as proof that you completed a booking. If our practices become subject to a legal definition of "sale" or "sharing" for cross-context behavioral advertising, we will provide the notices and opt-out mechanisms required by law.

6. Retention and Account Deletion

We retain account and Service data while your account is active and as needed for the purposes described above. Retention varies by data type, feature, security need, provider obligation, backup cycle, and legal requirement. We may retain limited records to meet tax, accounting, fraud-prevention, dispute, abuse, security, or legal obligations. De-identified or aggregated information may be retained when it can no longer reasonably identify you.

You can request deletion in the app at Profile > Settings > Account > Delete Account or follow the instructions at guidera.one/delete-account. The completed in-app workflow removes the Guidera identity and user-owned operational data from Clerk, Supabase Database and Storage, and associated service mappings as documented by the Service. Provider logs, security records, backups, and records held by Apple or another independent provider may remain for their applicable retention period. Deleting Guidera does not cancel an App Store subscription; manage or cancel it through Apple.

7. Security

We use safeguards designed to protect information, including encrypted transport, access controls, row-level authorization, restricted server credentials, provider authentication, monitoring, rate limits, and deletion controls. No system is completely secure, and we cannot guarantee absolute security. Report a suspected security or privacy issue to privacy@guidera.one.

8. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information; object to certain processing; withdraw consent; opt out of certain sale, sharing, targeted advertising, or profiling; and appeal a denied request. You may change profile and privacy settings in the app, disable location, camera, microphone, photo, or notification access in device settings, and unsubscribe from eligible marketing messages.

Contact privacy@guidera.one to exercise a right. We may verify your identity and authority before acting. We respond within the period required by applicable law and do not discriminate against you for exercising privacy rights. EEA/UK users may complain to their local data-protection authority. California and other U.S. state residents may exercise the rights available under applicable state law.

9. Legal Bases

Where GDPR or similar law applies, we process information as necessary to perform our contract with you, based on consent (including device permissions and optional features), for legitimate interests such as security, moderation, reliability, and product improvement balanced against your rights, and to comply with legal obligations. You may withdraw consent at any time, without affecting earlier lawful processing.

10. International Processing

Nitrosoft and its providers may process information in the United States and other countries where they operate. We do not claim that all Service data is stored only in the United States. Where required, transfers rely on recognized safeguards such as adequacy decisions, contractual protections, or Standard Contractual Clauses.

11. Children

The Service is not directed to children under 18, and we do not knowingly collect their personal information. Contact us if you believe a child provided information so we can investigate and take appropriate action.

12. Website Cookies

The website uses necessary technologies and may use analytics or similar technologies according to your choices and applicable law. See the Cookie Policyand cookie controls for details. Mobile-app permissions are controlled separately in the app and device settings.

13. Changes to This Policy

We may update this policy as the Service, providers, or legal requirements change. We will post the updated date and provide additional notice when required. Material changes apply prospectively from their effective date unless law permits otherwise.

14. Contact

Nitrosoft LLC
Guidera Privacy
Email: privacy@guidera.one
Support: hello@guidera.one
Website: https://guidera.one