Privacy Policy

A. Location Data

We only access your device's location while you're actively using the Map or Explore screens, to show nearby attractions, calculate distances, and power search and directions on the Map — never in the background.

B. Account & Profile Data

• Account Info: Name, email address, and profile photo when you sign up or sign in with email/password, Google, or Apple.
• Onboarding Choices: The home destination and language you pick right after sign-up.

C. Content & Support Data

• Favorites: The attractions you save to your favorites list.
• Purchases & Subscriptions: Your subscription plan, purchase and renewal dates, and a purchase reference from the App Store or Google Play — used to activate and manage your subscription.
• Support Requests: The category and message you submit through "Report Issue" or "Contact Us," linked to your account so our team can respond to you.

D. Device & Notification Data

• Basic device information (platform, app version, language) and a notification token, so we can deliver push notifications to you.
• IP Address: Like any app that connects to the internet, your IP address is automatically visible to our service providers' servers as part of normal traffic (for example, security and troubleshooting) — we don't collect or store it separately ourselves.

E. What Stays on Your Device Only

Some information never leaves your phone and is never seen by us:

• Search History: Your recent searches, stored only on your device.
• Downloaded Guides: The list of attractions you've downloaded for offline listening, along with their file sizes and download dates.
• Offline Audio Protection: Downloaded audio is encrypted using information stored only on your device, so files stay tied to your device and can't be copied out.

We use the data above only to:

• Core Functionality: Show nearby and popular attractions, calculate distances and routes, and confirm that only active subscribers can access audio guides.
• Account & Support: Create and maintain your account, and respond to the support requests you submit.
• Notifications: Deliver push notifications to you.
• Marketing Notifications: We may also send you promotional push notifications about new tours, offers, or updates. These are separate from essential account and service notifications, and you can turn them off anytime from Notifications in the More menu.

We don't use analytics, advertising, or crash-reporting tools of any kind, and we don't build advertising profiles from your data.

We don't sell your personal data. We only share it with the partners that help us run the app:

• Hosting & Storage Partner: Keeps your account, favorites, subscription, and support data securely stored on our behalf.
• Mapping Partner: Receives your location and search terms only while you're using the Map, to show places and calculate routes.
• Push Notification Partner: Delivers our push notifications to your device. It doesn't receive any usage or analytics data from us.
• Google / Apple Sign-In: If you choose to sign in with Google or Apple, they share your name and email with us, as allowed by your privacy settings with them.
• Apple App Store / Google Play: Process every subscription payment directly. We never see or store your card details.
• Legal Requirements: We may disclose information if required by law, regulation, or legal process.
• Business Transfers: If Rafeek is ever involved in a merger, acquisition, or sale of its assets, your information may be transferred as part of that deal. We'll notify you through the app of any such change before it affects your data.

• Grant or revoke location access anytime from your device's system settings.
• Without it, you can still browse and search every destination manually — you just won't see "near me" ordering or your position on the map.
• You can stop all data collection at any time by logging out and uninstalling the app from your device.

• Retention: We keep your account data for as long as your account stays active.

Deleting your account. You can delete your account at any time from inside the app: open the More tab, scroll to the bottom and tap Delete Account. Deletion is immediate and permanent — your account, sign-in, profile name and photo, favorites, free-guide selections, subscription records and notification device tokens are removed and cannot be recovered. Support requests and issue reports you sent are kept for our records with your account reference removed, so they can no longer be linked to you.

If you no longer have the app installed, email contact@rafeek.app from the email address on your account with the subject "Delete my Rafeek account", and we will delete it within 30 days. Full instructions: rafeek.app/delete-account.

Deleting your account does not cancel an active subscription — subscriptions are managed by Apple and Google. Cancel it from your App Store or Google Play settings before deleting your account.

You can ask us at any time to:

• Access: See what personal data we hold about you.
• Correct: Fix any information that's inaccurate.
• Delete: Remove your account and personal data (see Section 5).
• Object: Ask us to stop a particular use of your data.

To exercise any of these, contact us through Help & Support > Contact Us inside the app, or by emailing contact@rafeek.app.

Data sent to and from the app is encrypted in transit (SSL/TLS), and access rules restrict every user to their own data. Downloaded audio is encrypted on your device and only decrypted in memory while a track is playing — a fully decrypted file is never written to disk.

Rafeek is not directed at children under the age of 13, and we do not knowingly collect personal data from anyone under that age.

We may update this Privacy Policy from time to time to reflect changes in the app, the law, or our operations. Any update will be posted here with a new "Last Updated" date.

Questions about this Privacy Policy, or requests about your data, can be sent anytime through Help & Support > Contact Us inside the app, or by emailing contact@rafeek.app.