Caywood Creative LLC ("we," "our," or "us") owns and operates the AnyTour mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use AnyTour.

By downloading, installing, or using AnyTour, you expressly consent to the collection and use of your information as described in this Privacy Policy. If you do not agree to these practices, please do not use the App.

2.1 Location Data
AnyTour requests access to your device's location while the app is in use. Your location is used solely to identify what is around you and generate a personalized tour narration. We do not store your location data on our servers. Location data is transmitted to our tour generation service only at the moment a tour is requested, and is not retained after the tour is generated.

2.2 Microphone and Speech Recognition
If you use the voice question feature, AnyTour accesses your microphone to capture your spoken question. Speech recognition is processed on-device using Apple's Speech framework. Voice audio is not transmitted to our servers or stored.

2.3 Purchase and Subscription Information
Subscription purchases are processed entirely through Apple's App Store. We receive confirmation of your subscription status from Apple but do not have access to your payment information.

2.4 Tour History and Saved Places
Tours you have taken and places you have saved are stored locally on your device. This data is not transmitted to or stored on our servers.

2.5 Genealogy and Heritage Data
If you choose to connect a genealogy service (such as Ancestry, 23andMe, MyHeritage, or FamilySearch), AnyTour accesses your family history data solely to personalize tour narration. This data is accessed directly from the connected service at the time of your tour and is not stored on our servers. We do not retain, share, or sell your genealogy data under any circumstances.

2.6 Tour Narration Requests
When you start a tour, your location coordinates and tour preferences are transmitted to our AI narration service (powered by Anthropic's Claude) via a secure Cloudflare proxy server. This request is not retained after the tour is generated.

2.7 Voice Narration and ElevenLabs

AnyTour collects sensitive data including location information. For data categories requiring explicit consent under applicable privacy law:

• Location data is collected only after you actively grant permission through your device's OS permission dialog
• Microphone access is collected only after you actively grant permission through your device's OS permission dialog
• During onboarding, users are presented with a clear acknowledgment checkbox requiring active confirmation of consent to this Privacy Policy before proceeding to use the App
• Continued use of the App constitutes your ongoing consent to the data practices described in this policy

We encourage users in jurisdictions with strict data protection laws (including the EU, California, and other regions with explicit opt-in requirements) to contact us at [email protected] with any questions before using the App.

We do not sell, trade, or rent your personal information to third parties. We work with the following service providers:

• Anthropic — AI tour narration. anthropic.com/privacy
• ElevenLabs — Voice narration. Your narration text is transmitted to ElevenLabs and subject to their independent privacy policy. elevenlabs.io/privacy
• Cloudflare — Secure API proxy. cloudflare.com/privacypolicy
• Apple — Subscription processing, on-device speech recognition. apple.com/privacy

When you connect a genealogy service, your data is subject to that service's own privacy policy.

Caywood Creative LLC expressly disclaims all liability for the privacy practices, data security standards, or data incidents of any third-party service. Each third-party service operates under its own independent privacy policy and legal obligations.

In the event a third-party platform experiences a data breach or security incident affecting content you have transmitted to that platform, your recourse is against that third-party service directly. We encourage you to review the privacy policies and security practices of all third-party services before using features that transmit data to those services.

AnyTour does not maintain a server-side database of user data. All personal data (tour history, saved places, cached tours, preferences) is stored locally on your device. You may delete the app at any time to remove all locally stored data.

AnyTour is not directed at children under the age of 13. During onboarding, users are required to confirm they are 13 years of age or older before accessing the App. We do not knowingly collect personal information from children under 13.

If a child circumvents our age screening and provides personal information, we will delete that information promptly upon becoming aware of it. Parents or guardians who believe a child has accessed the App should contact us immediately at [email protected]. We are subject to and committed to compliance with the Children's Online Privacy Protection Act (COPPA).

We implement industry-standard security measures including encrypted HTTPS transmission for all data sent between the app and our services. Your API requests are routed through a secure Cloudflare proxy that prevents direct exposure of service credentials. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have rights including:

• The right to access data we hold about you
• The right to request deletion of your data
• The right to opt out of data processing
• The right to data portability

Because AnyTour does not store personal data on our servers, most data rights can be exercised by deleting the app from your device. For any data-related requests, contact us at [email protected].

We may update this Privacy Policy from time to time. We encourage you to review this policy regularly. We will update the "Last updated" date above when changes are made.

For material changes — including changes to what data we collect, how we use it, or who we share it with — we will provide advance notice through in-app notification and/or email where we have your contact information, at least 7 days before the changes take effect. Non-material changes (such as clarifications or formatting updates) take effect upon posting.

Th