Privacy Policy

Last updated: May 5, 2026

Kumquat ("we", "our", or "the app") is an iOS application that generates AI-powered travel guides. We are committed to protecting your privacy. This policy explains what data is collected, why, and how it is used.

1. Information We Do Not Collect

We do not require you to create an account or provide any personal information to use Kumquat. We do not collect, store, or transmit:

• Your name, email address, phone number, or any identifier from your iOS account
• Your precise or approximate location
• Your contacts, photos, calendar, or other on-device data
• Advertising identifiers (IDFA) — we do not request App Tracking Transparency and we do not track you across apps or websites
• Personal content from your guides beyond what you typed in the request

2. What Is Sent to Our Backend

When you generate a guide, the following data is written to a Firebase Firestore document:

• The city you entered
• Trip dates (if provided)
• Style, group, pace, and optional wake-up time selections
• Optional dietary constraints, interests, and free-text notes you provided
• An anonymous Firebase user ID (assigned by Firebase Anonymous Authentication, not linked to your Apple ID, email, or any personal info)
• If you have an active subscription: an Apple-signed StoreKit transaction (JWS) so our backend can verify premium status. This contains the subscription product ID, transaction ID, and purchase/expiration dates — no payment details, no Apple ID, no name. The token is verified against Apple's root certificate on each request and is not stored on our side.

A Cloud Function then sends this request to Google's Vertex AI to generate the guide content. The result is written back to your document so the app can display it. Documents are scoped to your anonymous user ID — no other user can read them. Documents may be retained for up to 24 hours for delivery reliability and are then automatically deleted.

3. Place Enrichment

To enrich each recommended place with photos, ratings, and reviews, the app sends the place name and address (no personal data) to a backend Cloud Function that queries Google Places. Photos are proxied through our Firebase Storage so your device never contacts Google directly. Place data is cached server-side for up to 30 days to reduce repeated lookups.

4. How We Use Information

• To generate your travel guide and enrich each place with publicly available information
• To monitor app performance and understand which features matter
• To verify active subscriptions and unlock premium features

5. Third-Party Services

Kumquat uses the following third-party services:

• Firebase Authentication, Firestore, Cloud Functions, Storage, Analytics (Google LLC) — backend infrastructure and anonymous usage analytics. See Firebase Privacy Policy.
• Google Vertex AI / Gemini — generates the guide content from your trip prompt. See Google Cloud Privacy Notice.
• Google Places API — provides photos, ratings, and reviews for recommended places. See Google Privacy Policy.
• Apple StoreKit — in-app subscription processing. Apple signs each transaction; we receive only the signed transaction object (product ID, transaction ID, purchase/expiration dates) so our backend can verify your subscription. We do not receive or store your payment details, Apple ID, or name. See App Store Privacy.
• Apple MapKit — in-app maps and place suggestions. Map tiles are loaded directly from Apple. See Apple Privacy Policy.

6. Anonymous Usage Analytics

We use Firebase Analytics to collect anonymous, aggregated usage statistics so we can understand which features matter and where the app falls short. This includes:

• App launches, foreground/background events, app version, OS version, device model, country (from IP), preferred language
• Custom events: when you complete onboarding, generate or receive a guide, hit the paywall, start or complete a subscription
• Per-event parameters such as city name, trip duration, paywall trigger, and product ID — but no name, no email, no IDFA, no location

Firebase Analytics may set an anonymous app-instance identifier (IDFV-derived) that is scoped to this app only and is not used for cross-app tracking. Per Apple's App Tracking Transparency definitions, this is not "tracking" and we do not show the ATT prompt.

You can opt out of analytics by disabling it in iOS Settings → Privacy & Security → Analytics & Improvements → Share With App Developers.

7. On-Device Storage

Generated guides, pin selections, visited markers, custom places you add, and onboarding preferences are stored on your device using SwiftData and UserDefaults. They never leave the device unless you explicitly share a guide using iOS share sheets.

8. Data Sharing

We do not sell, trade, or share your personal information with third parties, except as described above (Firebase, Google Cloud, Apple) and as required by law.

9. Data Retention

Firebase Analytics data is retained for 14 months by default. Pending guide generation requests are deleted within 24 hours. Place enrichment cache entries expire after 30 days. You can request deletion by contacting us.

10. Children's Privacy

Kumquat is not directed at children under 13. We do not knowingly collect personal information from children.

11. Your Rights

Depending on your location, you may have rights to access, correct, or delete data associated with your device. To make a request, contact us at the address below.

12. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected by updating the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the updated policy.

13. Contact

If you have any questions about this privacy policy, you can reach us at:
siringulec1@gmail.com