Privacy Policy — Street Whisperer

Last updated: October 2, 2026.

Website: audience measurement and interactions

This section applies to street-whisperer.com, separately from the app data described below.

With your permission, we use Contentsquare to understand page visits, clicks, scrolling and navigation, including clicks to the App Store and Google Play. Click maps and interaction replays may be produced to improve the website. Contentsquare receives technical information about your device and browser, cookie identifiers and connection information needed for its requests.

The Contentsquare script loads only after you accept. You can reject without losing access to the website, and change your choice at any time using the “Cookies” button. Withdrawal stops collection and removes Contentsquare cookies accessible to the website. Your choice is saved for six months in your browser’s local storage.

Input fields are masked in replays; we do not send app account contents, photos or precise app location to this tool. Paths sent for analysis do not include query parameters or address fragments. To exercise your rights concerning this data, contact contact@street-whisperer.com. See also the Contentsquare privacy policy.

Cookies — change my choice

Mobile application

What we collect

• Your precise location — used to find nearby places and neighbourhoods. Outside a walk, it stops when the app leaves the foreground. During a free or planned walk that you started, it may remain active while the screen is locked until the walk ends, so the app can color crossed streets and signal a nearby story. On iOS, coordinates are queried by the app's mapping services. On Android, they are temporarily sent to our relay, which queries Wikipedia/Wikimedia, Wikidata, OpenStreetMap/Overpass, Nominatim and OpenRouteService. The relay never writes coordinates to its logs and caches results only by geographic cell. For the « My must-sees » list, the app also queries Wikidata directly with these coordinates, on iOS and Android.
• An email address — only if you create an account (by email or with Google), to recognize you across devices.
• Your nickname — chosen and editable in the app. It is public in rankings (territory and number of guided visits) and may personalize your welcome message and selected notifications. Your email address is never used for this purpose.
• A technical identifier — the Supabase identifier of your real or anonymous account. It is used to enforce usage limits and diagnose the service.
• A usage log — which endpoints of our service were called, for which place, in which language, at what time. Always tied to the identifier above, never to a GPS coordinate.
• Your rankings — to build weekly, monthly and all-time rankings, the relay keeps, linked to the technical identifier, the guided visits you completed (place or museum, once per day) and the territory cells you claimed, with their date. Only your nickname and totals are shown publicly.
• Your notebook and walks — places you open, their coordinates and the route you request are stored only on your device so a place can be reopened and a walk resumed. You can clear the notebook and end the walk in the app.
• Your visit photos — taken in the app during a guided visit or an artwork presentation, they are stored only on your device, with the guide's story, so you can find your visits again. They are never uploaded or synced, and can be erased in the app.
• A photo attached to a question — if you attach one, it is sent to our relay and then to OpenAI to get the guide's answer. The relay does not keep it, cache it or write it to its logs.
• The territory area you capture — only while you run a free or planned walk. When a free walk ends, the app locally connects the final point to the starting point and represents the closed area with cells of about 40 metres. The relay receives only unordered cell identifiers, never your raw GPS trail or ordered boundary. Each cell keeps only the technical identifier of its current owner, so another person's passage or closed area can reclaim it.

What we don't do

• No advertising tracking, no sharing for commercial purposes.
• Locked-screen location tracking is active only during a walk you deliberately started and stops when it ends. Outside that mode, location stops as soon as the app is no longer in the foreground.
• Our relay does not store a raw GPS trail or ordered route. It stores only 40-metre territory cells claimed during a walk you deliberately started.

Who this data passes through

• OpenAI — generates narrations and answers questions asked of the guide. The place name, your question and, if you attach one, your photo are sent to it; never your identity.
• Speechify — turns narration text into audio at your request. Only the text to speak is sent; never your identity or location.
• Supabase — hosts accounts, the usage log and the current owner of each territory cell.
• RevenueCat, Apple and Google Play — process in-app purchases and subscription status depending on your device. RevenueCat receives the Supabase technical identifier so the relay can verify the purchased tier and credit purchased packs, keeping their transaction identifier, the credits granted and the remaining balance; none receives your location from us.
• Wikipedia/Wikimedia, Wikidata, OpenStreetMap/Overpass, Nominatim, OpenRouteService and Apple MapKit — services queried with coordinates required for search or routing, without your email address or account identifier.

How long

Usage events are retained for no more than 90 days. A territory cell is retained until another person crosses it or its owner's account is deleted. The account and nickname are kept until the nickname is changed or the account is deleted. Dated visits and claims used for rankings, as well as credit pack balances and purchase history, are kept until the account is deleted. In-app deletion removes the account, nickname, associated events, its cells and sign-in tokens kept by the service. The notebook, active walk and visit photos are local and can be cleared in the app or by deleting it.

Your rights

You may request access, correction, or deletion of your data at contact@street-whisperer.com.