Privacy policy

01Who is responsible

Touri is an app and website by THE PANAMA INSIDERS HOLDINGS, S.A. (trading as The Panama Insider), a company based in the Republic of Panama. We are responsible for the personal data processed through the Touri app and touri.global.

For any privacy matter, write to soporte@touri.global. This policy is governed by Panama’s personal data protection law, Law 81 of 2019. The rules for using the service are in the terms of use.

02What data we process and why

If you use the app without an account

You can listen to the free stories without signing up. Your progress is stored only on your phone. The app creates a random installation ID and sends it with a few usage events (opening the app, downloading an area, starting a purchase) so we can count how many people use Touri. That ID does not carry your name or your email.

If you create an account

• Account data: your email, your password (stored encrypted, never in readable form), the name you type if you type one, and the app language. If you sign in with Google, we receive the basic Google profile details that service shares at sign-in, such as your name and email.
• Age confirmation: we ask for your date of birth to check the minimum age, but we do not store it. We only record that your age was confirmed, and when.
• Your Touri journey: the stamps you earn, the stories you listen to (and in which language), the challenges you answer, the walks you complete, your experience points, level and badges.
• Distance walked: the meters you walk each day with the guide running. We do not store your route or your positions.
• Guide questions: what you ask the AI guide, its answer, the nearest place on the walk, and whether you reported the answer.
• Purchases: what you bought, in which store, the transaction ID, and whether it is active or was refunded. We never see or store your card: Apple or Google take the payment.
• Notifications: your phone’s notification token, its system (iOS or Android) and language, so we can send you alerts.
• App usage: the same usage events as without an account, now linked to your account.

We use this data to provide the service you ask for: keep your progress on any phone, unlock what you bought, answer your questions, alert you, and email you when needed (codes, welcome, deletion confirmation). We also use it to improve Touri with usage statistics and to protect the service from abuse.

Security and abuse

To stop repeated attempts and abuse we use temporary counters that may rely on your IP address. They delete themselves after a few days.

03Your location

Touri uses your phone’s location to show where you are on the map, guide you on foot to each stop, and let you know when you arrive at or pass near a story. We ask through the system permission, and you can refuse or withdraw it at any time in your phone settings.

• Only while you use the app or take a walk. The app does not ask for “always” location access. It uses your location while the app is open, or in the background during a walk. Never when the app is closed.
• Nearby alerts: if you turn on “Alert me when I pass near a story” in Settings, Touri can alert you without starting the walk, again only while the app is open or in the background. On Android you will see a persistent notification while it is on.
• We do not store your positions. Your location is used on your phone. When you ask for a walking route or search for a place, your current position is sent to Mapbox to work it out. On our servers we only keep, if you have an account, the total distance walked per day.
• The AI guide does not receive your location: the app only tells it which place on the walk is nearest.

04The AI guide

The guide answers questions about the area you are exploring. You need an account to use it, and before your first question we ask you to agree.

• Your question is sent to an artificial intelligence provider (Groq) together with the content of the area so it can answer. We do not send it your name, your email or your location.
• Do not include personal details in your questions: they are not needed for an answer.
• We keep your questions and their answers to review the guide’s quality and handle reports. They are deleted if you delete your account.
• Answers are machine-generated and can be wrong. If one is wrong, tap it to report it.

05Notifications

With your permission, Touri sends you notifications when you reach a stop, plus general updates (for example, news about the walk). You can turn them off in the app’s Settings or in your phone settings. When you sign out, we remove that phone’s token from your account.

06Purchases

There are free stories and a pass that unlocks the full walk. Purchases are made with your Apple or Google account and charged by those stores. RevenueCat validates the purchase and tells us what was unlocked for your account. Refunds are requested from Apple or Google, depending on where you bought.

07Who we share your data with

We do not sell your data or share it for advertising. It is only handled by the providers we need to run Touri, each for its own job:

We may also disclose data when a competent authority requires it under the law.

08Data outside Panama

Several of these providers are outside Panama, mainly in the United States. Our database is hosted in the United States. By using Touri, your data is transferred to those countries for the purposes described in this policy.

09How long we keep it

• Your account and everything linked to it (profile, progress, stamps, distance, guide questions, recorded purchases, devices): as long as the account exists. When you delete it, it is erased from our database right away.
• Usage events: when you delete your account they are unlinked from it and remain only as statistics, with the random installation ID.
• Store purchases: Apple, Google and RevenueCat keep their own purchase records under their policies and the obligations that apply to them.
• Abuse counters: a few days.
• Website form: until we do what you asked (for example, tell you about the launch) or until you ask us to delete it.

10Your rights

Law 81 of 2019 gives you the right to access your data, correct it, cancel it (ask us to delete it), object to its processing, and to portability (receive it in a format you can take with you). You can also withdraw your consent at any time, without affecting what was done before.

• To exercise them, write to soporte@touri.global from your account email, saying which right you want to exercise. If needed, we will ask for something else to confirm it is you.
• You can delete your account yourself from the app in seconds: here is how.
• Location and notifications are withdrawn in your phone settings; the website’s analytics cookies, as explained below.

If you believe we did not handle your request properly, you can contact Panama’s data protection authority.

11Children

You must be at least 13 to create an account. We ask for your date of birth when you sign up; if you are under that age, the account is not created (and if it had already been created when confirming the email, it is deleted right then). Without an account you can still listen to the free stories, with progress stored only on the phone.

If you are a parent or guardian and believe a child under 13 gave us data, write to soporte@touri.global and we will delete it.

12The website form

On touri.global you can ask us to tell you about the launch, leave a suggestion, or write to us about something else.

• We store what you send: the message type, your name (optional), your email (required only for the launch alert), your country (optional), language, the message and the date you accepted this policy.
• If you tick “Send anonymously”, the message reaches us without a name or email.
• To stop spam we use Cloudflare Turnstile and store your browser type and a one-way fingerprint (hash) of your IP address. Your IP is not stored as is: only a fingerprint that cannot be turned back into it.
• Your email is only used for what you asked. If you want us to delete it, write to us.

13Cookies and analytics on this website

This website does not use advertising cookies. It stores your cookie choice in your browser so we do not ask again.

• Google Analytics only loads if you click Accept on the cookie notice. It counts visits and shows which pages are used, with the IP anonymized. If you click Reject, it does not load.
• You can change your choice at any time with the Cookies button at the bottom of every page. If you withdraw permission, we delete any Google Analytics cookies that had been set.
• Cloudflare Turnstile, on the form, is needed to protect it from spam and is not used to measure you.

14How we protect your data

Everything travels encrypted (HTTPS). In the database, each person can only read their own data, and what you should not write is written only by the server. Team access to the admin panel requires an email code and a second factor. No system is infallible: if we detect a problem affecting your data, we will tell you as the law requires.

15Changes to this policy

If we change this policy, we will post the new version here with its date. If the change is significant, we will also let you know in the app or by email.

16Contact