Privacy Policy
Introduction
Speareat ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.
Information We Collect
Location Information
Speareat is a location-based audio tour application. To provide our core functionality, we collect and process your location data:
- When-in-use location only: We collect your precise location only while you are actively using the App. This allows us to show your current position on the map and help you navigate to tour locations.
- No background tracking: We do NOT collect your location when the app is closed or in the background.
You have full control over location permissions and can disable them at any time through your device settings. The app will still function without location access, but the "locate me" feature on the map will be unavailable.
Account Information
If you create an account, we collect:
- Email address — for sign-in and account recovery
- Authentication tokens — stored on your device
- Supabase user ID — to link your account to your data
- For users who sign in with Apple or Google, the identity provider's subject identifier and basic profile (email only)
Creating an account is optional. Free walks are available without signing in.
Newsletter Communications
When signing in, you may opt in to receive Speareat updates via a checkbox. Your consent and its timestamp are stored as a GDPR consent record. You can unsubscribe via the link in every newsletter email.
Usage and Analytics Data
Analytics data is only collected if you give explicit consent. On first launch, the app presents a consent prompt. If you decline, no analytics data is collected or sent to third parties.
We use third-party analytics services to understand how users interact with Speareat:
- Device information: Device type, operating system version, app-generated anonymous identifier
- App usage data: Features used, screens viewed, button taps, time spent in the app
- Tour interactions: Which tours you view, listen to, and complete
- Audio playback data: Play/pause events, listening progress, story completion
- Tour feedback: Your voluntary ratings and optional text comments on food and audio experience (submitted after completing a tour)
- Error and crash reports: Technical diagnostics when the app encounters errors
- Language preferences: Your chosen app language
We do NOT collect: your name, photos, contacts, microphone or camera access, or payment information.
Tour Feedback (Voluntary)
After completing a tour, the app may ask you to rate your experience. This feedback is entirely voluntary — you can dismiss the prompt at any time. If you give a negative rating, you may optionally leave a short text comment explaining what could be improved. If you choose to submit feedback:
- Your ratings and any text comments are sent to Mixpanel as an anonymous analytics event (no personal information is attached)
- Your ratings are stored locally on your device to avoid re-prompting
- The app may ask you to leave an App Store or Google Play review — this uses the native review dialogue provided by Apple or Google, and we have no access to or control over the review you leave
How We Use Your Information
- Core functionality — delivering location-based audio tour content, showing your position on the map, opening external navigation apps
- Account management — authenticating your identity, maintaining your session, processing account deletion requests
- App improvement — understanding which features are most used, identifying and fixing bugs, optimising performance
- Analytics and research — understanding user behaviour, measuring engagement, A/B testing
Third-Party Services
Mixpanel (Analytics)
In the app: Tracks app usage and user behaviour. Only activates if you accept the in-app consent prompt. To withdraw consent, uninstall and reinstall the app, or email support@speareat.com. Mixpanel privacy policy.
On the website: We collect page visit data such as page path, referrer hostname, and any campaign parameters (utm_*) present in the URL. On audio stop pages, we also collect playback progress events. We do not intentionally collect personal information through website analytics. IP addresses are not recorded. No cookies or data are stored on your device — analytics are processed in memory only and discarded when you leave the page.
Sentry (Error Monitoring)
Monitors app stability and detects crashes. Collects error logs, stack traces, device information. Automatic PII collection is disabled. If you are signed in, your anonymous user ID (not your email) is attached to error reports to help diagnose account-specific issues. This operates independently of your analytics consent choice, under our legitimate interest in maintaining app stability. Privacy policy.
Supabase (Backend Services)
Account management, profiles, and entitlement storage. Collects email and user identifier when you sign in. Privacy policy.
Resend (Transactional Email)
Delivers sign-in codes (OTP) via email. Processes your email address to send the code. Data stored in US. Privacy policy.
Apple (Sign in with Apple)
If you choose to sign in with Apple, Apple processes your authentication and shares your email address (or a private relay address) with us. Privacy policy.
Google (Sign in with Google)
If you choose to sign in with Google, Google processes your authentication and shares your email address with us. Privacy policy.
OpenFreeMap (Maps)
Provides map tiles. Collects standard HTTP request data (IP address, tile coordinates). Open-source project using OpenStreetMap data. No user accounts or tracking.
Stripe (Donations — Optional)
When you choose to donate, you are redirected to Stripe's website in your browser. We never see, collect, or store your payment information. Privacy policy.
Data Security
All data transmitted between the app and our servers is encrypted via HTTPS. We collect only what is necessary for app functionality.
Data Retention
- Location data: Processed in real-time on your device only; never stored on our servers
- Account data: Retained until you delete your account via Settings or by emailing support@speareat.com
- Authentication tokens: Stored on your device; cleared on sign-out or account deletion
- Analytics data: Retained by Mixpanel according to their retention policies (typically 5 years)
- Error reports: Retained by Sentry for up to 90 days
- Tour feedback: Ratings stored locally on your device (deleted when you uninstall); anonymous analytics retained by Mixpanel
- App preferences: Stored locally on your device only; automatically deleted when you uninstall the app
Your Rights and Choices
Location Permissions
iOS: Settings → Privacy & Security → Location Services → Speareat.
Android: Settings → Apps → Speareat → Permissions → Location.
We only request "While Using the App" permission. We never request background location tracking.
Analytics Consent
Decline on first launch, or withdraw consent by reinstalling the app. You can also email support@speareat.com to request deletion of previously collected data.
Account Deletion
You can delete your account at any time from Settings → Account → Delete account. This permanently removes your account, email address, and profile from our systems and submits a GDPR deletion request to Mixpanel (removing your analytics profile and event history). Sentry error reports containing your user ID are retained for up to 90 days per their standard retention, after which they are automatically purged. Walk progress and downloads stored on your device are not affected.
You can also request deletion by emailing support@speareat.com.
European Users (GDPR)
If you are in the EEA, you have rights to access, rectify, erase, restrict processing, data portability, and object to processing.
Legal bases per processor:
| Processor | Purpose | Lawful basis |
|---|---|---|
| Supabase | Account / auth | Contract performance |
| Mixpanel | Analytics | Consent |
| Sentry | Crash diagnostics | Legitimate interest |
| Resend | Transactional email (OTP) | Contract performance |
| Newsletter | Marketing | Explicit consent |
Contact support@speareat.com.
California Users (CCPA)
You have the right to know, delete, and opt-out of sale of personal information. Note: we do not sell your data. Contact support@speareat.com.
Children's Privacy
Speareat is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect information from children. Contact us immediately if you believe your child has provided personal information.
International Data Transfers
Speareat is operated from the United Kingdom. Data may be processed in the UK, EU (Supabase, Mixpanel — EU data residency), and United States (Sentry, Resend). By using the app, you consent to these transfers.
Changes to This Policy
We may update this policy from time to time. We will update the "Last Updated" date. Continued use constitutes acceptance.
Contact Us
Email: support@speareat.com
App: Speareat
Developer: Metamaps LTD
Location: United Kingdom
For GDPR or CCPA requests, include "GDPR Request" or "CCPA Request" in your subject line. We respond within 30 days.
Summary (TL;DR)
What we collect:
- Location data (only while app is open, to show your position on the map)
- App usage analytics (anonymous interaction data to improve the app)
- Error and crash reports (to fix bugs)
- Voluntary tour feedback ratings and optional text comments
- Email address (only if you create an account)
What we don't collect:
- Your name, identity, or personal profile
- Background location
- Photos, contacts, or messages
- Payment information
- Microphone or camera data
This privacy policy is designed to comply with GDPR (EU), CCPA (California), and UK data protection laws.
