Imagecation stores almost nothing about you on our servers. Apple handles identity and payments. Your saved spots and preferences stay on your device, and your location is used on your device, never collected.
Imagecation is operated by an independent developer (a sole individual) based in Vietnam. "We", "us", and "our" refer to Imagecation. Under GDPR we are the data controller for the data described below.
You can reach us about anything in this policy at support@tourtour.app.
Imagecation is built so we cannot see your personal data. Identity comes from Sign in with Apple. Subscriptions run through Apple's StoreKit. The spots you bookmark and the preferences you set are stored on your device. Your location is processed on the device, in real time, for the map, the in-app walking navigation and the golden-hour computation. Our servers store access logs for 90 days and nothing else about you.
This page explains exactly what we hold, why, where, for how long, and how to get rid of it.
| Data | Where it lives | We can read it? | Lawful basis (GDPR Art. 6) |
|---|---|---|---|
| Sign in with Apple opaque identifier | Your device (and your private iCloud, so a new device keeps your identity) | No, only your devices | Contract performance, 6(1)(b) |
| Subscription status | Apple (StoreKit) + Apple-signed receipt on your device | No | Contract performance, 6(1)(b) |
| Saved spots, day plans, app settings | Your device only | No | Contract performance, 6(1)(b) |
| Location (precise, while you use the map or navigate a walk, including in the background during an active walk, only when you allow it) | iOS device memory; route ends go to Apple MapKit | No, never leaves your device except Apple routing | Contract performance, 6(1)(b) + iOS consent prompt |
| Photo-spot catalogue (coordinates, counts, timings) | Ships inside the app, identical for every user | It is not about you at all | Not applicable |
| Server access logs (IP, path, timestamp, response code) | Cloudflare edge | Yes, 90 days, then auto-deleted | Legitimate interest, 6(1)(f) |
The photo spots themselves are not personal data about you. They are an in-app catalogue of places, counts, directions and time windows. No personal profile is created from your use of the app.
Nothing you do in the app is added to that catalogue. It is the same for every user and says nothing about you.
When you tap "Sign in with Apple" in Imagecation, Apple authenticates you and hands the app a single string: an opaque user identifier. If you choose to share your name, the app keeps it on the device to greet you; we never receive it on any server. We do not request your email.
The identifier is stored on your device, and mirrored into your private iCloud so the same identity works on a replacement iPhone. It never reaches our servers. To us it is meaningless, because there is no account on our side it is linked to.
You can revoke Sign in with Apple at any time at Settings → Apple ID → Sign-In & Security → Sign in with Apple.
The map and the light. With your permission, Imagecation uses your location to centre the map where you are and to compute today's golden hour and blue hour for your own sky. That computation happens entirely on the device. If you decline, the app still works. The map opens where you point it and the light times fall back to a labelled city.
In-app walking navigation. Imagecation can walk you to a spot turn by turn inside the app. While a walk is active it uses your precise location continuously, and keeps doing so in the background so guidance carries on with the phone in your pocket. Navigation works only when Location Services is enabled for Imagecation; without it the rest of the app still works.
Where your location goes. Your location is used on your device, in real time. Imagecation holds it in memory, never writes it to disk, never transmits it to our servers, keeps no location history and builds no profile of where you have been. The one exception is routing: to draw a walking route, its start and end points are sent to Apple's MapKit, governed by Apple's privacy policy, the same as any app that uses Apple maps. Revoke or change access any time in iOS Settings → Privacy & Security → Location Services → Imagecation.
Map tiles. Maps are drawn with Apple MapKit and load live from Apple, which means the map needs an internet connection and those tile requests go to Apple under Apple's privacy policy.
Imagecation is unlocked by an auto-renewing subscription handled entirely by Apple via StoreKit. We do not see your card, billing address, name or email. Your device receives an Apple-signed receipt proving the subscription is active, and the app reads that receipt locally.
Manage or cancel any time in Settings → Apple ID → Subscriptions. Refund requests go through Apple's standard process at reportaproblem.apple.com.
A small number of requests leave the app, for example fetching the curated content on the Home screen. Each creates one line in our access log: timestamp, IP address, URL path, HTTP response code. We keep these for 90 days and then they are automatically deleted. Lawful basis: legitimate interest under GDPR Art. 6(1)(f), specifically security and abuse prevention.
We do not log request bodies. We do not link access logs to any user identity. We do not sell, share or enrich them.
Some of these providers process data outside the EU. Those transfers rely on Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
The Imagecation iOS app ships with no analytics SDK, no advertising framework, no crash-reporting SDK and no third-party data sharing. There is no Firebase, no Mixpanel, no Segment, no Amplitude, no Sentry. This marketing website uses no analytics, no advertising and no tracking cookies. Cloudflare, which hosts and protects the site, sets one strictly necessary cookie named __cf_bm to tell human visitors from automated ones, and it may load a script from cdn-cgi on the same domain for the same purpose. That cookie expires within half an hour, builds no profile, and is not used to follow you to other sites.
No automated decision-making or profiling in the sense of GDPR Art. 22 takes place.
Inside the app, Settings → Delete Account wipes your Imagecation data and signs you out. On your device it removes saved spots, settings, caches and the stored Sign in with Apple identifier, and it removes the small private iCloud record that mirrors your identity. That iCloud cleanup is best effort. If your device cannot reach iCloud in that moment, deleting the app from your devices and removing Imagecation under iOS Settings → Apple ID → iCloud → Manage Account Storage covers the rest.
Server access logs (which only contain your IP) age out automatically after 90 days.
Subscription history sits with Apple. Contact Apple Support if you want that erased.
If you are in the EU, EEA, UK, or anywhere else that grants similar rights, you have the right to access, rectify, erase, restrict, object to, and port the personal data we hold about you. In practice that means your matching access-log entries, because that is all we hold.
To exercise any of these, email support@tourtour.app. We respond within 30 days. For data Apple holds (your Apple ID, subscription records), Apple is the direct contact: apple.com/legal/privacy.
You also have the right to lodge a complaint with your national data-protection supervisory authority.
Imagecation is not directed at children under 16. We do not knowingly collect data from anyone under 16, and Sign in with Apple already enforces Apple's age-based account rules. If you believe a child has used the app and you want anything removed, email us and we will help.
When this policy changes, we update the "Last updated" date at the top. Material changes are surfaced in-app before they take effect.
Reach out if anything here is unclear, or if you want to exercise any of your rights.
support@tourtour.app