Tripvanto құпиялық саясаты — iOS / Apple App Store

1. Scope and no-login model

This Privacy Policy applies to the Tripvanto mobile application distributed for iOS / Apple App Store.

The current release is designed to work without mandatory user registration or a Tripvanto user account. Core functions do not require the user to provide a name, email address, telephone number, date of birth or password.

2. Information the app may process

• a random or pseudonymous app/installation identifier used to operate the service without a user account; • device and app information such as operating-system version, app version, language, device type and basic technical metadata; • selected museum, exhibit, content, feature and interaction events; • audio-guide usage, quiz/quest progress, favorites or liked exhibits, places and restaurants, and similar preferences, where the enabled feature stores them; • AI-assistant messages or voice-derived text that the user intentionally submits, together with the minimum context required to generate a response; • diagnostic, crash, security and abuse-prevention information, if those systems are enabled; • location only when a location-based feature is used and the user grants the relevant device permission.

3. Information not required for core use

Tripvanto does not require a user account, password, name, email address, telephone number or date of birth for core app use in this release.

Tripvanto does not use the no-login model as a reason to fingerprint the device. Persistent hardware identifiers should not be created or combined for hidden identification.

4. Why information is used

• provide museum experiences, exhibits, audio guides, AI answers, maps, nearby recommendations, quizzes, quests, news, offers and other enabled functions; • remember app preferences and user-selected favorites where needed; • understand aggregated product engagement and improve B2B museum analytics and B2C product experience; • maintain service reliability, security and abuse prevention; • respond to privacy or support requests; • comply with legal obligations.

5. AI assistant

When you send a message to the AI assistant, the content is transmitted for processing so that Tripvanto can generate a response. The message may contain information you choose to provide. Do not submit highly sensitive personal data unless it is necessary for your request.

Tripvanto may use AI and infrastructure service providers as processors or subprocessors. The production configuration, provider contracts and privacy disclosures must match the actual release.

6. Permissions

The app requests device permissions only when required by an enabled function. For example, location may be requested for nearby places or map functions, microphone access may be requested for voice input, and notifications may be requested for app notifications. You can change these permissions in device settings.

Declining an optional permission should affect only the function that requires that permission, unless the feature cannot technically operate without it.

7. Analytics and identifiers

Tripvanto may use pseudonymous event data to understand how the app is used. This can include language, selected museum, feature opens, content interactions, session events and error information.

Tripvanto does not need to know the user's civil identity for this analytics model. Pseudonymous technical data is nevertheless protected according to applicable law and is not described as anonymous unless it has been irreversibly anonymised.

8. Sharing and service providers

Tripvanto may disclose only the information necessary to providers supporting hosting, AI processing, analytics, diagnostics, security, content delivery and technical operations. Tripvanto remains responsible for ensuring that the production configuration and third-party SDKs are accurately disclosed.

Tripvanto does not sell personal and sensitive user data.

9. International processing

Tripvanto is a Kazakhstan company. Information may be processed in Kazakhstan and in other countries where service providers operate. Where cross-border transfer requirements apply, Tripvanto uses the safeguards required by applicable law.

10. Retention and deletion

Information is retained only for as long as necessary for the relevant function, security, legal obligations and dispute resolution. Data may then be deleted or irreversibly anonymised.

Because this release has no conventional user accounts, there is no account-deletion flow. A user may send a privacy deletion request to Tripvanto. We may ask for limited technical information needed to locate pseudonymous records. Truly anonymous or aggregated information may not be capable of being linked back to a specific person.

11. Children

Tripvanto may be used in museums visited by families. The no-login design minimises personal-data collection and does not require a child's name, email address, telephone number or account registration for core use. If Tripvanto later introduces child-directed functions that require additional personal data, the privacy documentation and consent model will be updated before release.

12. Security

Tripvanto uses proportionate technical and organisational measures intended to protect information against unauthorised access, loss, alteration and disclosure. No internet or mobile service can guarantee absolute security.

13. Your rights

Subject to applicable law, you may request information about processing, access, correction, deletion or restriction of personal data, object to certain processing, or withdraw consent where consent is the legal basis.

Privacy requests: [email protected].

14. Changes

We may update this policy when the app, SDKs, providers, permissions or legal requirements change. The current version will be available at https://tripvanto.com and through the applicable app-store privacy link.