1. Introduction
Guiri ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. This policy complies with the General Data Protection Regulation (GDPR) and Spanish data protection laws.
2. Information We Collect
Personal Information
We may collect the following personal information:
- Name and contact information (email address)
- Country of origin and language preferences
- Family status (marital status, children)
- Location information (city/region in Spain)
- Account credentials and authentication data
Technical Information
- Device information and browser type
- IP address and general location data
- Usage patterns and service interactions
- Cookies and similar tracking technologies
3. How We Use Your Information
We use your information to:
- Provide personalized guides and recommendations
- Create and manage your user account
- Improve our services and user experience
- Communicate with you about service updates
- Ensure security and prevent fraud
- Comply with legal obligations
4. Legal Basis for Processing (GDPR)
We process your personal data based on:
- Consent: When you agree to our data processing practices
- Contract: To provide the services you've requested
- Legitimate Interest: To improve our services and ensure security
- Legal Obligation: To comply with applicable laws
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances:
- With your explicit consent
- With trusted service providers who assist in operating our service
- When required by law or to protect our legal rights
- In connection with a business transfer or merger
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is completely secure.
7. Your Rights Under GDPR
You have the right to:
- Access: Request copies of your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your personal data
- Restriction: Limit how we process your data
- Portability: Receive your data in a structured format
- Object: Object to our processing of your personal data
- Withdraw Consent: Withdraw consent at any time
8. AI Model Training and Data Usage
When you use the Ask Guiri feature, your questions and our AI assistant's responses are processed by third-party AI service providers.
- Free Tier Models: Free model providers may use prompts and responses to train and improve their models.
- Premium Tier Models: Premium users have access to paid models with different privacy protections.
- No Public Publishing: We configure providers to avoid publication to public datasets where available.
- Your Choice: You can upgrade to premium or avoid the Ask Guiri feature if desired.
Note: We use OpenRouter as our AI service provider. See OpenRouter Privacy Policy.
9. Conversation Data Storage
We store conversation history to provide personalization and history access.
- What We Store: Conversation text and file metadata (not raw uploaded file content).
- Auto-Archiving: Conversations are archived after inactivity and categorized by life moments.
- Access: You can view archived conversations in History.
- Deletion: Conversation data is deleted when you delete your account.
10. AI Quality Evaluation and Analytics
We use analytics and evaluation services (such as Langfuse) to improve response quality.
- What is processed: Questions, responses, and anonymized profile context for quality scoring.
- What is NOT included: Name, email, credentials, or other direct identifiers.
- Purpose: Improve helpfulness, accuracy, and personalization.
- Automated evaluation: AI-based scoring may be used.
- Legal basis: Legitimate interest under GDPR Article 6(1)(f).
11. Legal Information Processing
Our assistant may reference Spanish legislation and public BOE data.
- Source data: Public BOE Open Data API resources.
- AI interpretation: AI-generated summaries may include limitations.
- No personal legal profiling: No automated legal decision-making about your individual situation.
- Data freshness: Data is updated periodically.
12. Data Retention
We retain personal information only as needed for service operation, legal obligations, and dispute resolution.
13. International Data Transfers
Data may be processed outside the EEA with appropriate safeguards.
14. Cookies
We use cookies and similar technologies for experience, analytics, and personalization. You can manage cookies in your browser.
15. Subscriptions, payments, and authentication
In-app purchases and subscriptions. When you purchase a subscription or make in-app purchases through our apps on Apple platforms, Apple Inc. acts as the payment processor. We do not receive your full payment card number. Apple processes payment data under Apple's Privacy Policy. We may receive subscription status, product identifiers, and renewal dates from Apple to provide and validate entitlements for the Service.
Sign in with Apple and other sign-in methods. If you use Sign in with Apple, Google, or similar providers, authentication is handled by that provider. We receive only the account information and identifiers those services share with us (for example, email or name when you permit it), consistent with each provider's terms and privacy policy.
16. Children's privacy
The Service is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at support@guiri.app and we will take steps to delete it.
17. Contact Us
For privacy questions, data protection requests, and general support, contact us at support@guiri.app.
You may also lodge a complaint with the Spanish Data Protection Authority.