Privacy Policy

Caywood Creative LLC ("we," "our," or "us") owns and operates the AnyTour mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use AnyTour.

By downloading, installing, or using AnyTour, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree to these practices, please do not use the App.

Geographic Scope: AnyTour is available in the United States and Canada only. AnyTour is not directed at children under 13 and is designed for adults interested in travel, history, and genealogy.

2.1 Location Data
Your location is accessed via explicit iOS permission and used while you browse nearby places in the Explore tab and during active tours. Location coordinates are transmitted to our servers only when you request a tour narration. We do not store location data on our servers after tour generation.

2.2 Microphone and Speech Recognition
If you use the voice question feature, AnyTour accesses your microphone to capture your spoken question. Speech recognition uses Apple's Speech framework, which processes on your device when supported by your device and language. For some languages or devices, Apple's framework may fall back to Apple's own server-side speech recognition service — never transmitted to our servers.

2.3 Purchase and Subscription Information
Subscription purchases are processed entirely through Apple's App Store. We receive confirmation of your subscription status from Apple but do not have access to your payment information.

2.4 Tour History and Saved Places
Tours you have taken and places you have saved are stored locally on your device. This data is not transmitted to or stored on our servers.

2.5 Genealogy and Heritage Data
If you choose to use the Heritage feature, AnyTour allows you to import a GEDCOM file — the universal genealogy file format exported by services such as Ancestry, FamilySearch, MyHeritage, and 23andMe. Your GEDCOM file is parsed entirely on your device. The raw family history data is never transmitted to our servers, never uploaded to any third-party service, and never leaves your device. Parsed ancestor information (names, birth places, immigration dates) is used solely to personalize your tour narration and is stored only in your device's local database. You may remove your heritage data at any time from the Heritage tab.

2.6 Tour Requests and Narration
When you request a tour, we send your location, preferences, and a summary of relevant ancestor information (if Heritage is active) to Anthropic's Claude for narration generation. Tour narration is not retained on our servers. Your device stores a local copy of tours in your history, including narration text and audio, which you can view, replay, or delete at any time from the Tours section.

2.7 Voice Synthesis (ElevenLabs)

2.8 AI Model Training
Your personal data, location, tour requests, and genealogy data are not used to train AI models.

We collect sensitive data (location, microphone) only when you explicitly grant permission through iOS. During onboarding, you must acknowledge this Privacy Policy with a checkbox before using the App. All other consent is implicit in your active use of features (e.g., importing GEDCOM files).

We do not sell, trade, share, or rent your personal information to third parties. Your data is yours, and we maintain strict policies against monetization of user information.

The following service providers process data as part of delivering AnyTour's features, each under their own independent privacy agreements:

• Anthropic (Claude) — for AI tour narration. See anthropic.com/privacy
• ElevenLabs — for voice generation. Tour narration text is transmitted to ElevenLabs and subject to their independent privacy policy. See elevenlabs.io/privacy
• Cloudflare — for secure API routing. See cloudflare.com/privacypolicy
• Apple — for subscriptions and on-device speech recognition. See apple.com/privacy

By using AnyTour, you acknowledge and consent to data transmission to these services. Your use of these services is governed by their independent privacy policies and terms of service. You are responsible for reviewing those policies before using AnyTour.

Genealogy services (Ancestry, FamilySearch, MyHeritage, 23andMe) are not integrated via API. Users export GEDCOM files directly from those services and import them locally into AnyTour. We have no data-sharing relationship with these genealogy platforms.

We expressly disclaim liability for third-party privacy practices, data security standards, or data incidents. Each third-party service operates under its own independent privacy policy and legal obligations.

AnyTour does not maintain a server-side database of user data. All personal data — including tour history, saved places, cached tours, preferences, and heritage/GEDCOM data — is stored locally on your device. You may delete the app at any time to remove all locally stored data. You may remove your heritage data independently from the Heritage tab without deleting the app.

United States Compliance: We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13. If a child circumvents our age screening and provides personal information, we will delete that information promptly upon becoming aware of it. Parents or guardians who believe a child has accessed the App should contact us immediately at [email protected].

Canada Compliance: We comply with Canadian privacy legislation regarding children and youth. The age of digital consent varies by province (13 in most provinces, 16 in Ontario). Users must confirm they meet their province's applicable age of digital consent before accessing the App. We do not knowingly collect personal information from users below the applicable age of digital consent in their province. Canadian parents or guardians who believe a child has accessed the App should contact us at [email protected].

We implement industry-standard security measures including encrypted HTTPS transmission for all data sent between the app and our services. Your API requests are routed through a secure Cloudflare proxy that prevents direct exposure of service credentials. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

United States: Depending on your state of residence, you may have rights under applicable state privacy laws, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), and other state-specific privacy statutes. These rights may include the right to access data we hold about you, request deletion of your data, opt out of certain data processing, and data portability (in jurisdictions where applicable).

Canada: Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws (including the Personal Information Protection Act in Alberta, British Columbia, and Saskatchewan, and the Freedom of Information and Protection of Privacy Act in Ontario), you have the right to access personal information we hold about you, request correction of inaccurate personal information, request deletion of your personal information (subject to legal obligations), and withdraw your consent to our collection and use of personal information.

Because AnyTour does not store personal data on our servers, most data rights can be exercised by deleting the app or removing your heritage data from within the app. For any data-related requests, contact us at [email protected].