Privacy Policy
Last updated 14 August 2026
Guider is a travel planning and travel-memory app operated by Guider24 ("Guider", "we", "us"). Guider24 is the data controller for the personal data described here and decides why and how it is processed. This policy explains exactly what data the Guider app and website collect, why we collect it, our legal basis, who it is shared with, how long it is kept and how you can delete it.
1. Data we collect
- Account data — email address, password (stored hashed by our authentication provider, never visible to us), display name, optional profile photo, optional phone number used only for Travel Circle invitations, and your Guider user ID.
- Trip data — destinations you ask Ari to plan, trip dates, itineraries, hotels you select or type in, notes, and your saved home address if you choose to add one.
- Location data — precise GPS location, collected only while a trip you started is active, to draw your real route, detect arrival at planned places and build your end-of-trip memory. Location is not collected before you start a trip or after you finish it.
- Photos — photos you choose to attach for AI memory generation. They are selected by you from your device; Guider never scans your gallery.
- Travel Circle data — names and phone numbers you enter for people you invite, invitation status, and live location shared with your circle while sharing is enabled.
- Subscription and order data — plan, purchase state, order records and, for physical frame orders, the delivery address you provide.
- Referral data — if you arrive through an influencer referral code, that attribution is stored.
- Technical data — IP address and request metadata used for rate limiting, abuse prevention and error logging.
2. Why we use it
- To create your account and keep you signed in.
- To plan trips, show maps, weather, hotels and nearby services.
- To track your real journey while a trip is active and record actual visits.
- To generate AI travel stories and AI memory images from your verified trip.
- To operate Travel Circle safety features and SOS contacts.
- To process subscriptions and physical frame orders.
- To send notifications you have enabled.
- To prevent abuse of paid third-party APIs.
2a. Legal basis for processing
- Performance of a contract — account data, trip data, subscription and order data: we need these to give you the service you signed up for.
- Consent — precise GPS location, photos you attach, and push notifications. You can withdraw consent at any time in your device or app settings.
- Legitimate interests — technical data used for security, rate limiting, abuse prevention, error logging and improving the product.
- Legal obligation — retention of payment, tax and invoicing records.
3. Third-party services we actually use
- Supabase — authentication, database and backend hosting for your account, trip, circle and order data.
- Google Maps Platform (Places, Geocoding, Routes, Static Maps, Weather) — to resolve places, photos, travel times and weather. Requests are proxied through our servers; your API traffic is not tied to your identity by Google through us.
- Lovable AI Gateway (Google Gemini models) — for Ari chat, trip planning, travel stories and memory image generation. Only trip content, and photos you explicitly attach, are sent. Passwords, tokens and payment credentials are never sent to AI.
- Dodo Payments — our payment processor for web purchases. When you buy a plan on the web, Dodo Payments processes the checkout: it receives your email address, billing name, country, IP address and payment details, and handles payment processing, invoicing, tax compliance, refunds and buyer support. Guider24 never sees or stores your card, UPI or bank details. See Dodo Payments' Privacy Policy.
- Google Play Billing — for subscriptions purchased inside the Android app. Google handles payment details; we only receive purchase and entitlement state.
- Professional advisers and authorities — legal and accounting advisers, and competent authorities where disclosure is required by law.
We do not sell your data and we do not share it with advertisers or data brokers.
4. Location, in detail
Guider requests location permission only when you start a trip or open a live map feature, and explains why beforehand. Location updates stop when you finish the trip. If you turn off "Share location with circle" in Settings, your position is no longer shared with other circle members. You can revoke location permission at any time in your device settings; planning, hotels and memories continue to work without it, but live route tracking will not.
5. Retention
- Account and profile data: kept until you delete your account.
- Raw GPS points: kept for the duration of the trip and for memory generation, then retained no longer than 90 days; summarised trip routes and visited places are kept with your trip history until you delete the trip or your account.
- Trip history and memories: until you delete them or your account.
- Payment, subscription and order records: retained as required by tax and accounting law even after account deletion, detached from your identity.
6. Your rights and deleting your data
You can delete your Guider account at any time from Safety → Profile → Delete account in the app, or from our public page at guider24.com/delete-account. Deletion permanently removes your profile, trips, GPS history, visited places, Travel Circle membership, trusted contacts, saved preferences, subscriptions record and sign-in identity. It cannot be undone. You may also ask us to access, correct, export, restrict or object to the processing of your data, or withdraw consent, by emailing us; we respond within one month. You may also complain to your local data protection authority. Purchase records held by Dodo Payments as payment processor are subject to Dodo Payments' own retention and rights process.
6a. Cookies and international transfers
We use only essential cookies and local storage to keep you signed in and remember your app preferences; we do not run advertising cookies. Dodo Payments sets its own cookies inside the checkout pages. Our providers (Supabase, Google, Dodo Payments) may process data outside your country; transfers rely on standard contractual clauses or equivalent safeguards.
7. Security
All traffic uses HTTPS. Secret API keys stay on our servers and are never shipped to the app. Database access is protected by row-level security so you can only read your own data, and circle data only for circles you belong to.
8. Children
Guider is not intended for children under 13, and we do not knowingly collect their data.
9. Contact
Questions or privacy requests: hello@guider24.com