Privacy Policy

• •Device identifier: When you use OURTOR without registering, we create an account identified only by a random identifier created when you install the app. It holds no name or email address. It is deleted with the app, so reinstalling without having added an email address starts a new account.
• •Name: Asked for, with your email address, when you create an account. Shown on your profile and next to what you share, such as posts and comments.
• •Email address: Asked for only when you create an account, which you need for things that are shared or kept for you: posting, commenting, adding friends, creating and planning, and your profile. Exploring needs none. It lets you restore your account on a new device or after reinstalling, and lets us contact you about the Service.
• •Profile information: Optional details such as your home town, the name you give your guide, and the eras, themes and places you are interested in (your "Travel DNA"), gathered as you use the Service.

• •Your device's Internet Protocol address (IP address)
• •Device name, model and type, operating system and app version
• •Screens visited and time spent on our Service
• •Unique device identifiers and diagnostic data

• Service Operation: Provide, operate, and maintain our Service
• Improvement: Improve, personalise, and expand our Service
• Analytics: Understand and analyse how you use our Service
• Development: Develop new products, services, features, and functionality
• Communication: Communicate with you, including for customer service, updates, and marketing purposes
• Transactions: Process your transactions securely
• Artificial intelligence features: Provide the AI-powered features described in section 9, such as your guide's voice and portrait, site chat and AI writing help
• Security: Find and prevent fraud and security issues
• Compliance: Ensure compliance with legal obligations

• •
  Contractual necessity: Processing is necessary to fulfil our contractual obligations to you.
• •
  Legitimate interests: Processing is necessary for our legitimate interests, such as improving our services or protecting against fraud.
• •
  Consent: You have given us consent to process your personal information for specific purposes, including sharing information with the AI service providers named in section 9. That consent is asked for separately and can be withdrawn at any time.
• •
  Legal obligation: Processing is necessary for compliance with our legal obligations.

• •
  Deleting your account in the app: Open Settings → Your Data → Delete Account. If you explore as a guest without an email address, you confirm by typing the confirmation phrase shown on screen. If you have registered an email address, you confirm with your account email.
• •
  Deleting your account online: You can also request account deletion on the web at ourtor.com/delete-account.
• •
  The 30-day grace period: When you request deletion, your account enters a 30-day grace period. During these 30 days, your account is deactivated, and your profile, public posts, and contributions are immediately hidden from other travellers. You can cancel deletion at any point during the 30 days by signing back in and tapping "Cancel Deletion" in Settings. Once the 30 days expire, your account, personal data, Travel DNA, visit history, and authentication credentials are permanently expunged or irreversibly anonymised from our production databases. Secondary system backup snapshots are overwritten in accordance with our regular 30-day backup cycle.
• •
  Withdrawing AI data sharing consent: You can withdraw your permission for any or all optional AI features at any time in the app under Settings → Privacy → AI features (or by tapping "Turn everything off"). Withdrawing consent takes effect immediately on our servers and stops further sharing with third-party AI services.

• •Your guide speaking aloud: we send the words to be spoken, along with the voice and style settings, to ElevenLabs, which returns the audio. If your language is not English, those words go through OpenRouter to be translated first.
• •Chatting with a site: we send your messages, the recent messages in that conversation, the name of the site and city, the eras and themes your Travel DNA leans towards, the countries you visit most, the name you gave your guide, and any photo you choose to attach, directly to OpenAI.
• •Captions for your own narration: if you record narration for a travel story, the audio recording is sent directly to OpenAI (Whisper) to transcribe captions. If you turn this off, captions are made from your script instead.
• •Translating your stories: if someone reads a travel story you made in another language, its captions are translated through OpenRouter. If you turn this off, readers see them in English.
• •Recommendations near you: to choose what to recommend, we send the nearby places we are choosing between, and how far each is from you, through OpenRouter. If you turn this off, they are ranked by distance instead.
• •Sorting what travellers say: the Thoughts you leave at a place, and the topic you file a travel tip under, are processed through OpenRouter to group what travellers say into themes. This is separate from the safety check on anything you publish.
• •Safety checks on content you publish: photos you publish are sent to OpenAI, and comments, Thoughts, and travel tips you publish are sent through OpenRouter (or our standby provider), to be checked automatically for harmful content before they appear.
• •Translating your guide's words: we send the words to be spoken through OpenRouter when your chosen language is not English.
• •AI itineraries and story music: we send your travel preference categories and the names of candidate places through OpenRouter; music is then generated by Suno, reached through AceDataCloud. Writing a story with AI help — finding a moment to tell, drafting or checking a script, suggesting a title or tags — sends that text through OpenRouter as well. When our staff design a relic or fill in a place's details with AI help, those details go through OpenRouter too, and Replicate draws the relic's image and 3D model.
• •Suggesting a new place: its name and position on the map go through OpenRouter to size its area, and to draft a description if you ask. Once you submit it, its name and city are looked up on the web the same way. Without your consent the area starts at a standard size and the place is looked up on Wikipedia and Wikidata only.
• •Guide portraits: we send a description assembled from the options you chose for your guide — its look, character and voice — to Replicate, which draws the portrait, and through OpenRouter for the short blurb shown beneath it. No photograph of you and no free text is included.

• •Approved models and vetted providers: Requests are strictly restricted to approved, vetted AI models and established hosting infrastructure.
• •Model training blocked: Account settings and routing parameters explicitly prohibit providers from using prompts or completions to train foundation models.
• •Public prompt publishing blocked: Automatic logging, sharing, or publishing of prompts and outputs to public prompt libraries is blocked.
• •Non-zero-retention endpoints blocked: Endpoints that require indefinite retention or that do not offer zero-retention or minimal operational logging are excluded from our routing pool.
• •Anonymous and stealth models excluded: We strictly bar anonymous, "stealth", or unverified community models where model provenance or hosting security cannot be verified.

• •No model training by default: Customer data submitted via commercial APIs is not used to train or improve foundation models by default.
• •Standard 30-day retention: Standard API services may retain content on secure servers for up to 30 days solely for the purpose of monitoring for abuse, enforcing safety rules, and complying with legal obligations, after which it is deleted.
• •Service-specific and legal exceptions: Certain specialized services or security investigations may operate under specific retention policies. We do not promise zero retention across all third-party AI services, as standard operational logging and security retention periods apply under each vendor's commercial terms.

• •Safety checks on published content: Automated safety moderation checks on published comments, Thoughts, travel tips, and photos run automatically when you post to keep shared spaces safe for everyone (supporting platform safety obligations such as App Store Guideline 1.2). This check occurs only when you publish.
• •Introductory tutorial narration: A small set of fixed introductory guide narration lines in the first-run tutorial may be synthesized aloud via ElevenLabs (and translated through OpenRouter if using a non-English language) before you have recorded an AI choice. These lines consist strictly of fixed, static app copy featuring the default guide persona; they contain no personal data, no names, and no account identifiers. If you subsequently decline voice features or choose "Keep all of these off", all spoken audio stops immediately, including in tutorials.

• •Standard Contractual Clauses & UK Addendum: Executing the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the European Commission's Standard Contractual Clauses (SCCs) with overseas service providers.
• •Adequacy Decisions & Data Privacy Framework: Relying on UK adequacy regulations or certifications under the UK Extension to the EU-U.S. Data Privacy Framework (DPF) where recipient entities participate in certified frameworks.
• •Technical & Operational Security: Enforcing industry-standard transport encryption (TLS 1.2 or TLS 1.3) and encryption at rest (AES-256) across all international data transmissions.

If you have any questions about this Privacy Policy, please contact us:

If you have a complaint about our use of your personal information, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.