Privacy Policy
Tropi Guide · Last updated 20 August 2026
Tropi Guide is a self-guided audio tour app for Madeira. This policy explains what we collect and why. If anything here is unclear, email us and we will explain it.
Who is responsible
The data controller is Hélvio Viveiros Nóbrega, sole trader, Estrada Francisco Álvares Nóbrega, Água de Pena, 9200-209, Portugal.
Contact: tropiguides@gmail.com
What we collect, and why
| What | Why | Legal basis |
|---|---|---|
| Your email address and account identifier, from whichever way you sign in: Apple, Google, Microsoft, or a code sent to your email | To create your account and know which tours you own, on any device you sign in to | Performance of a contract |
| A record of the tours you have bought | To unlock the audio you paid for, and to restore it if you change phone | Performance of a contract |
| Ratings and written reviews you choose to leave | To show an honest average and real opinions on the tour page | Consent. You decide whether to leave one |
| Problem reports and suggestions you send us | To fix what is broken and decide what to build next | Legitimate interest in improving the app |
| Crash and error reports, when something goes wrong in the app | To find out what broke, and fix it before it happens to somebody else | Legitimate interest in an app that works |
| A record of what happened during a tour: which audio points played, which failed, whether a download finished, and how long the tour took | To see whether a tour actually worked. Some failures are silent — an audio point that never plays is not noticed by the person it did not play to | Legitimate interest in an app that works |
| Emails you send us | To answer you | Legitimate interest in supporting our users |
Sign in with Apple
We only see what Apple passes to us: an account identifier and an email address. If you use Apple's Hide My Email option, we receive a relay address and never learn your real one. We do not ask for a password because we never handle one.
Your location
- Your location is processed on your phone and is never sent to us. The app compares where you are against the tour's stops to know when to play a recording, and to show how far a beach or trail is from you. That comparison happens on the device.
- We do not store your location, we do not keep a history of where you have been, and we do not share it with anyone.
- You can refuse location access, or withdraw it later in iOS Settings. The app still works. You tap each stop yourself instead of the audio starting as you arrive.
Reporting a problem or an idea
When you send a report from Support, we receive your message along with the app version, your device platform and its operating system version. Those three are attached automatically because a report is much easier to act on with them.
You may also attach a photograph — a closed sign, a wrong turn. It is entirely your choice, and the app opens your photo library for no other reason. The picture is stored privately, used only to understand what you are reporting, and never published.
If you are signed in, the report is linked to your account so we can reply. If you are signed out, it is not linked to anyone. No location is attached, and nothing else about your device is.
When the app breaks, and how a tour went
Two things are recorded automatically, and both exist for the same reason: an audio tour can fail quietly. A recording that never plays at a viewpoint is not noticed by the one person who would have told us — the person it did not play to.
Crash and error reports. If the app crashes or something fails inside it, we receive the technical details of the failure, the app version, and the model and system version of the phone. We have turned off the option that would attach your IP address and account details. Reports are handled by Sentry, on servers in the European Union.
What happened during a tour. We record when a tour is opened and finished, which audio points played and which failed, whether a download succeeded, which way you signed in, and your phone's language — the last one so we know which language is worth recording next. Each event carries a random identifier for the app installation, and your account identifier if you are signed in.
These records contain no location. We record which audio point played, never where you were. We do not build a route, a trail or a history of your movements, and could not do so from what we hold.
Because a tour is often taken where there is no signal, these notes are written on your phone first and sent when there is a connection again — sometimes hours later. They are deleted after ninety days, automatically.
What stays only on your phone
Downloaded audio, bookmarks, your distance-unit preference, and how far through a tour you are, are stored on your device and are not visible to us. Deleting the app removes them.
What this app does not do
- No advertising, and no advertising identifiers
- No analytics or tracking software that follows you between apps or across the web. The record of how a tour went is ours, stays with us, and never leaves except to the crash-report provider described above
- No cookies or tracking pixels. Tropi Guide is an app, not a website
- No profiling, and no automated decisions that affect you
- No selling, renting or trading of personal data, in any circumstances
- No use of any of this to build a picture of you. We look at these records to see whether a tour is working, not to learn about the person who took it
Payments
Tours are bought through Apple's In-App Purchase system. Apple takes the payment. We never see your card details, billing address, or any part of your payment method. Apple tells us only that a purchase succeeded, so that we can unlock the tour.
We use RevenueCat to receive that confirmation. It is given your account identifier and the product you bought, and nothing else.
Who else processes your data
We use a small number of service providers. They act on our instructions and may not use your data for their own purposes.
| Provider | What for |
|---|---|
| Apple | Sign-in, payments, app distribution |
| Sign-in, if you choose it | |
| Microsoft | Sign-in, if you choose it |
| Supabase | Hosting our database and audio files |
| RevenueCat | Confirming purchases and refunds |
| Sentry | Receiving crash and error reports (servers in the EU) |
Some of these providers operate outside the European Economic Area. Where data is transferred, it is protected by the safeguards required under the GDPR, such as the European Commission's Standard Contractual Clauses.
Reviews are public
If you leave a written review, the comment, the star rating and the first name you choose are shown publicly on the tour page. Your email address and account identifier are never shown. Please do not put anything in a review that you would not want a stranger to read.
Problem reports are not public. Nobody using the app can read them.
How long we keep things
- Your account and purchases: for as long as you have an account, so that what you paid for keeps working.
- Purchase records: deleted with your account. Apple is the seller of record and keeps its own accounting record of the sale, as the law requires of it; that copy is Apple's and is governed by Apple's privacy policy, not ours.
- Problem reports, and any photograph attached to one: normally up to two years, and no longer linked to you once your account is deleted.
- Support emails: normally up to two years.
- Records of how a tour went: ninety days, then deleted automatically. Three months is long enough to see whether a tour is working; longer answers nothing better.
- Crash and error reports: kept by Sentry, for no longer than ninety days.
Deleting your account
You can delete your account from inside the app, at any time, without asking us: Support → Account Settings → Delete My Account.
Exactly what happens, in order:
- Your ratings and reviews are deleted, and each tour's average is recalculated without them.
- Our record of what you own is deleted.
- Your account itself is deleted, including your email address.
- Any problem reports you sent, and the records of how your tours went, stop being linked to you at that moment. What is left cannot be traced back to a person.
- On the phone in your hand: downloaded audio, bookmarks, and how far through each tour you were.
Your purchases remain with Apple, who took the payment. If you sign up again, Restore Purchases gives your tours back.
Your purchases remain with Apple. If you sign up again, Restore Purchases gives your tours back.
Your rights
Under the GDPR you may ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to another provider. You may also object to processing based on legitimate interests, and withdraw any consent you have given.
Write to tropiguides@gmail.com and we will reply within one month. You do not need to give a reason, and it costs nothing.
If you think we have handled your data badly, you can complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or to the authority in the EU country where you live.
Children
Tropi Guide is not aimed at children and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, write to us and we will delete it.
Keeping data safe
However you sign in, there is no password of yours for us to lose — we never receive one. Data is encrypted in transit, access to our database is restricted per user, and tour audio is served through short-lived links that only work for people who own the tour.
No system is perfect. If a breach affects your rights, we will tell you and the CNPD as the law requires.
Changes to this policy
If we change how we use your data in a way that matters, we will update the date at the top and tell you in the app before the change takes effect.
Contact
Questions, requests or complaints: tropiguides@gmail.com