Privacy Policy

We collect the information needed to provide PlaceSage and to keep it secure. The exact information depends on how you use the app.

• Account information, such as your user ID, email address, password credentials, email verification status, registration date, and social sign-in identifiers from Apple or Google when you choose those sign-in methods.
• Purchase and subscription information, such as the app store, subscription product and billing period selected, purchase and transaction identifiers, purchase date, renewal or expiry information, and entitlement status that Apple, Google, or RevenueCat makes available to us. Apple and Google process your payment details; PlaceSage does not receive your full payment-card details.
• Landmark scan information, such as photos you upload or capture and AI-generated landmark names and descriptions.
• Location information, such as current device coordinates when you grant location permission and image GPS metadata when present in a photo.
• Device, usage, advertising, and diagnostics information, such as app version, device type, operating system, IP address, device or app identifiers where available, ad impressions and interactions, logs, crash reports, performance data, feature flag events, analytics events, and anti-abuse signals.

• To create and manage accounts, authenticate you, verify email addresses, manage sessions, and support account deletion.
• To verify purchases, provide subscription benefits, restore eligible purchases, determine entitlement and renewal or expiry status, and respond to billing or subscription support requests.
• To upload, validate, resize, store, and retrieve scan images so the service can identify landmarks and show your saved discoveries.
• To identify landmarks, generate descriptions, resolve map coordinates, reverse geocode places, and save discoveries to your personal map.
• To prevent abuse, investigate errors, secure the service, and comply with legal obligations.
• To provide analytics, feature flags, crash reporting, customer support, service messages, and app review prompts.
• To show ads or sponsored placements where advertising components are enabled.

When you submit a landmark scan, PlaceSage sends the image and any location you provide to our backend. We validate and resize images, extract GPS metadata if it exists, remove image metadata from the processed image, store the processed image using our cloud infrastructure, and process the image with AI and location services.

PlaceSage may use OpenAI API services and other cloud and location services to identify landmarks, find coordinates, retrieve public place information, and generate descriptions. We do not knowingly opt in to using your scan content to train OpenAI models.

AI and map outputs can be incomplete, delayed, or inaccurate. Do not rely on PlaceSage as your only source for safety-critical, legal, travel, accessibility, or emergency decisions.

When advertising is eligible in the mobile app, PlaceSage uses Google AdMob and the Google Mobile Ads SDK. Ads may use contextual information and process data needed for ad delivery, frequency capping, aggregated reporting, measurement, security, and fraud prevention.

Depending on your device, settings, and region, Google and advertising vendors shown in the consent form may process information such as your IP address and approximate location, device or app identifiers, ad impressions and interactions such as taps or video views, and diagnostics and performance information.

Where required, Google's User Messaging Platform asks for your choices before we initialize the Google Mobile Ads SDK or request an ad. PlaceSage does not currently request Apple's App Tracking Transparency permission, so the app does not request access to the IDFA.

You can review, change, or withdraw your advertising choices in the app under Profile > Legal > Privacy and cookie settings. Withdrawing consent does not affect processing that took place before withdrawal and may cause ads to be suppressed. Your access to PlaceSage's core features does not depend on accepting advertising consent.

Learn more in Google's Privacy Policy and its explanation of advertising technologies.

We use service providers to operate PlaceSage. They may process personal data only as needed to provide their services to us, unless their own terms state they act independently.

• Amazon Web Services for hosting, image storage, email infrastructure, maps, place search, reverse geocoding, and related cloud services. See the AWS GDPR page.
• OpenAI for AI processing of landmark scans and descriptions. See OpenAI's enterprise privacy page and our data processing addendum.
• PostHog for analytics, feature flags, product usage measurement, and service improvement. See PostHog's privacy policy and our data processing agreement.
• Sentry for crash reporting, diagnostics, replay or error context where enabled, and reliability monitoring. See Sentry's privacy policy.
• Cloudflare Turnstile for bot detection and anti-abuse checks during registration. See Cloudflare's Turnstile privacy policy.
• Apple and Google for optional social sign-in, app store distribution, in-app purchases, payment processing, and subscription management. Apple and Google process store-account and payment details under their own privacy notices.
• RevenueCat for in-app purchase and subscription infrastructure, including linking store purchase information to your PlaceSage account, verifying entitlements, restoring eligible purchases, and synchronising subscription status. See RevenueCat's privacy policy.
• Google AdMob and advertising vendors identified in the consent flow for ad delivery, measurement, security, and fraud prevention where ad placements are enabled.

Where UK GDPR or EU GDPR applies, we rely on different legal bases depending on the processing activity.

• Contract: to provide the app, accounts, landmark identification, saved maps, subscription purchases and benefits, and support.
• Consent: for device permissions such as camera, photo library, and precise location where your device asks for consent, and for advertising identifiers, device storage, or ad-related processing where consent is required.
• Legitimate interests: to secure, debug, measure, improve, and protect PlaceSage, provided those interests are not overridden by your rights.
• Legal obligation: where we must retain, disclose, or process information to comply with law.

PlaceSage is designed as a personal discovery app. We do not sell your personal data. We share personal data with service providers, with authorities or other parties where required by law or to protect rights and safety, and as part of a business transfer such as a merger, acquisition, financing, or sale of assets.

We keep personal data for as long as needed to provide PlaceSage, maintain security, resolve disputes, and comply with legal obligations. Saved scans, associated images, generated descriptions, and map entries are generally kept while your account remains active, unless you delete a saved place or delete your account.

Account deletion currently blocks and marks the account as deleted. Some records may remain in backups, logs, fraud-prevention records, or legal records for a limited period. We may retain aggregated or de-identified information that no longer identifies you.

• You can choose not to grant camera, photo library, or location permissions, but some features may not work without them.
• You can delete individual saved places in the app where the feature is available.
• You can request account deletion from the app.
• Where available, you can review, change, or withdraw your advertising choices under Profile > Legal > Privacy and cookie settings.
• Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data, and to withdraw consent where processing is based on consent.
• You can contact us to exercise privacy rights or raise a concern.

We are based in the United Kingdom and use providers that may process data in the United Kingdom, European Economic Area, United States, and other countries. Where required, we rely on appropriate safeguards such as adequacy regulations, standard contractual clauses, data processing agreements, or equivalent transfer mechanisms.

We use technical and organisational measures designed to protect personal data, including encrypted transport, access controls, provider security controls, logging, and monitoring. No service can be guaranteed to be completely secure.

PlaceSage is intended only for people who are at least 18 years old, or the age of legal majority in their country if higher. We do not knowingly collect personal data from children. If you believe a child has provided personal data to PlaceSage, contact us so we can review and delete it where required.

We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify you through the app, website, or other appropriate means.

For privacy requests, contact privacy@astraprospera.com. For general support, contact contact@placesage.com.