Privacy Policy
Last updated: [Date]
This policy explains what personal data CityRats processes when you use our app and website, why we process it, and what rights you have. The controller is [Company legal name], [Address] — see the Impressum.
1. Data we process
- Account data: email address, display name and, for creators, payout details you provide.
- Location data: your device location while a tour is running, so we can unlock stops as you reach them. Location is processed on your device wherever possible and is never shared with other users.
- Purchase data: which tours you unlocked. Payments are processed by Apple and Google; we never receive your card details.
- Content you create: tours, stop descriptions, photos, video and audio.
- Technical data: device type, app version and crash diagnostics.
2. Purposes and legal bases
- Providing the app and your purchased tours — Art. 6(1)(b) GDPR (contract).
- Keeping the service secure and preventing abuse — Art. 6(1)(f) GDPR (legitimate interest).
- Optional analytics or marketing — Art. 6(1)(a) GDPR (consent), withdrawable at any time.
- Legal and tax record-keeping — Art. 6(1)(c) GDPR (legal obligation).
3. Recipients
We use processors for hosting, crash reporting and email delivery: [List of processors]. Apple and Google act as independent controllers for payments. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses.
4. Retention
Account data is kept until you delete your account, after which it is erased within 30 days except where longer retention is legally required (for example, invoices for 10 years).
5. Your rights
- Access, rectification and erasure of your data (Art. 15–17 GDPR).
- Restriction of processing and data portability (Art. 18, 20 GDPR).
- Objection to processing based on legitimate interest (Art. 21 GDPR).
- Withdrawal of consent at any time, without affecting past processing.
- Complaint to a supervisory authority — competent authority: [Supervisory authority].
To exercise any right, email support@cityrats.app.
6. Children
CityRats is not intended for children under 16. We do not knowingly collect their data.
7. Changes
We update this policy when the service changes. Material changes are announced in the app before they take effect.
Questions about this page? Write to support@cityrats.app. We reply within 2 business days.