Last updated: September 2026
This Privacy Policy describes how CityWhispers (“we,” “us,” or “our”) collects, uses, and protects your personal information when you use our mobile application and website (collectively, the “Services”).
We are committed to respecting your privacy, handling your data responsibly, and being transparent about how we use it.
1. Who We Are
CityWhispers develops immersive audio experiences and city walks combining music, sound, storytelling, and location-based content.
Contact: support@citywhispers.me
Website: citywhispers.me
2. Data We Collect
We collect only the data necessary to provide, secure, and improve our Services. Depending on how you use the app or website, this may include:
a) Information You Provide
Authentication information: if you choose to identify or authenticate yourself using your email address, your email address is processed for authentication purposes. CityWhispers uses passwordless email authentication, which may involve sending you a secure sign-in link or verification code.
Contact data: if you contact us by email or through a form, we may collect your name, email address, and the contents of your message in order to respond to your inquiry.
Feedback data: if you submit reviews, comments, feedback, or forms within the app, this information may be stored to help us respond and improve our experiences.
b) Automatically Collected Data
App analytics: we may collect usage information such as app interactions, session information, walk activity, and technical performance data through services such as Firebase and app-store analytics.
Device and technical data: information such as device model, operating-system version, app version, language, country or region, IP address, and technical identifiers may be processed for authentication, security, analytics, performance monitoring, and debugging.
Location data: when you use location-based features of the app, your device location may be used to trigger audio or other content relevant to your position.
Where location processing is performed locally on your device, CityWhispers does not store your precise location history on its servers.
c) Cookies (Website Only)
Our website may use cookies or similar technologies that are necessary for its operation and, where applicable, optional analytics technologies to understand website usage.
Where consent is required by applicable law, optional cookies or similar technologies are used only after obtaining your consent. You can also control cookies through your browser settings.
3. How We Use Your Data
We may use personal data to:
- operate and provide the CityWhispers app and website;
- authenticate users and secure access to the Services;
- send authentication and verification emails;
- provide audio-guided and location-based experiences;
- respond to inquiries and feedback;
- maintain the security, reliability, and technical performance of the Services;
- diagnose technical problems and crashes; and
- understand usage of the Services and improve the user experience.
We do not sell or rent your personal information.
4. Legal Basis for Processing (EU/EEA)
Where the GDPR applies, we process personal data on one or more of the following legal bases:
Performance of a contract: where processing is necessary to provide the Services or features requested by you.
Legitimate interests: where necessary to maintain, secure, troubleshoot, and improve our Services, provided that these interests are not overridden by your rights and interests.
Consent: where we ask for your consent, including for optional analytics, cookies, or other optional processing where consent is required.
Legal obligations: where processing is necessary to comply with applicable legal requirements.
5. Data Storage and Security
We take appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or disclosure.
We retain personal data only for as long as necessary for the purposes for which it was collected, subject to applicable legal requirements.
Some of our service providers may process data outside the European Economic Area, including in the United States. Where required, such transfers are subject to appropriate safeguards under applicable data-protection law.
6. Third-Party Services
We use third-party service providers to operate and improve the Services. These may include:
Google Firebase – for services including authentication, analytics, crash reporting, cloud infrastructure, and other app functionality. When you use email authentication, Firebase Authentication may process information including your email address, IP address, user-agent information, and authentication-related technical data.
Apple – for distribution of the iOS application and related platform services and analytics.
Google – for distribution of the Android application through Google Play and related platform services and analytics.
Payment providers – where purchases or payments are offered, payment processing may be handled by the relevant app store or another payment provider. CityWhispers does not receive your full payment-card details when payment is processed directly by those providers.
These providers process information according to their respective terms and privacy policies.
7. Your Rights
Depending on applicable data-protection law, you may have the right to:
- access personal data concerning you;
- request correction of inaccurate personal data;
- request deletion of your personal data;
- request restriction of certain processing;
- object to certain processing based on legitimate interests;
- receive certain personal data in a portable format;
- withdraw consent at any time where processing is based on consent; and
- lodge a complaint with a competent data-protection authority.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, contact us at: support@citywhispers.me
8. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.
Authentication information may be retained for as long as the associated user account exists. Technical and security information may have shorter retention periods depending on the service concerned.
Aggregated or anonymized information that can no longer reasonably identify an individual may be retained for statistical and analytical purposes.
9. Children’s Privacy
CityWhispers is not specifically directed to children.
Where the Services are used by children or young people, we process personal data in accordance with applicable data-protection requirements, including requirements relating to parental consent where applicable.
If you believe that a child has provided personal information to us in circumstances where consent or authorization was required, please contact us at support@citywhispers.me.
10. Changes to This Policy
We may update this Privacy Policy to reflect changes to our Services, technologies, legal requirements, or data-processing practices.
The latest version will be available at citywhispers.me/privacy. The “Last updated” date at the top of this policy indicates when it was most recently revised.
11. Contact
For questions about this Privacy Policy or the processing of your personal data, please contact:
CityWhispers
support@citywhispers.me
citywhispers.me
Complies with:
- EU General Data Protection Regulation (GDPR)
- French CNIL guidelines
- Apple App Store Review Guidelines (5.1.1 and 5.1.2)