Last updated: July 29, 2026
Welcome to Odisea AI. Odisea.ai UG (haftungsbeschränkt) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our website ("Site") and our mobile applications ("App") for iOS and Android.
We may collect information about you in a variety of ways. The information we may collect on the Site and App includes:
Our mobile applications (iOS and Android) may request specific permissions to provide functionality. Requested permissions can differ by platform and release version. You can revoke permissions at any time through your device settings.
Purpose: To show your position on the map, discover nearby landmarks, and provide location-based features.
Data Collected:Your device's current location (latitude and longitude).
How We Use It: Location data is used to:
Storage: Location data is processed in real time for core features and may be stored only when required to deliver features you explicitly use.
Control: You can revoke location permissions at any time through your device settings. Note that some features may be limited without location access.
Website tour discovery:On the tours page, our hosting infrastructure may provide Odisea with an approximate city, region, and coordinates derived from the request's IP address. We use this coarse area only to order nearby tour suggestions; the feature does not save the raw IP address or derived area to a user profile or browser storage. Precise browser location is requested only after you select Use my location, and is processed to return nearby results. You can instead choose a city manually, and the complete tour catalog remains available without sharing location.
Current iOS status: The current iOS App Store release does not request Camera, Photo Library, Microphone, or background location permissions. As a result, this iOS release does not collect user photos/videos/audio through in-app capture features.
Other platforms/features: On platforms or features where media capture is available, photos/audio are only collected when you explicitly choose to create or upload them for that feature.
Control: You can deny media permissions through your device settings. The app remains usable without optional media-capture features.
Note: In the current iOS App Store release, the app does not request Location Always, Camera, Photo Library, or Microphone permissions. You can use the app without granting optional permissions, though some features may be limited.
We use the information we collect to provide, maintain, and improve our services, including to:
Odisea does not use advertising or marketing cookies. Odisea's own browser storage is used only when it is necessary to provide authentication, remember an explicit language or privacy choice, or support a feature you deliberately use, such as saving a draft. Optional Mapbox storage is described below and is not enabled on marketing pages before you allow it.
odisea_lang cookie may be stored for up to one year after you explicitly select a language.odisea_mapbox_consentcookie remembers for up to six months whether you allowed Mapbox maps. It is used only to apply and remember your privacy choice.Optional analytics stays off unless you accept it. After consent, we use PostHog Cloud EU to measure public-site page views, permitted interactions, and errors. PostHog may also create a masked session replay for a 20% sample of eligible sessions. Authentication and dashboard routes are excluded. Input, textarea, and editable-field text is masked; iframes, video, audio, and canvas content is blocked; request headers and bodies are not recorded.
With the same consent, we use Ahrefs Web Analytics for aggregated website analytics. Our own public map-view measurement remains separate and uses only an in-memory identifier that disappears when the page is closed and is never written to browser storage.
You can reject analytics without losing website access and change your choice at any time with the persistent Cookie settingsbutton. Withdrawing consent stops new PostHog collection, clears its local analytics state, and reloads the page so Ahrefs is no longer loaded.
The complete browser-storage inventory, including purposes, providers, and durations, is available in our Cookie Policy.
We do not share your personal information with third parties except under the circumstances described in this policy. We do not sell your personal information or share it with third parties for their own advertising purposes. We only use your data for our internal purposes to improve and provide our services.
We may share information in the following situations:
We use Supabase for authentication and as our database service. When you create an account or log in, Supabase processes and stores necessary information such as:
Supabase adheres to strict privacy and security standards. For more information, you can refer to Supabase's privacy policy.
Our app uses Google Sign-In to provide a secure and convenient way to create an account and log in. When you use Google Sign-In, we may receive information from your Google account, such as your name and email address, to create your Odisea AI profile. Google's privacy policy applies to your use of this service. You can review it at https://policies.google.com/privacy.
Our Site and App use Mapbox services for map rendering and location features. Map-related requests may include location context and technical metadata required to deliver maps, geocoding, and navigation functionality.
Mapbox GL JS uses browser local storage entries whose names begin with mapbox.eventData. Mapbox states that these entries include a randomly generated identifier used for aggregate usage statistics and local telemetry metadata, and are not used for advertising or end-user profiling. Odisea disables Mapbox's optional detailed performance-metrics collection; billing-related map events still occur. Marketing pages do not load an interactive Mapbox map until you explicitly allow it. You can reopen the map privacy controls to stop Mapbox and remove those entries from your browser.
For more information, you can review the Mapbox GL JS browser storage disclosure, the Mapbox Privacy Policy and Mapbox Terms of Service.
To provide our AI-powered features, we utilize various third-party AI models and services. When you use these features, the content you provide (such as text prompts) may be sent to these services for processing. We do not share personal user account data with these providers, and we recommend you do not include sensitive personal information in your AI queries. As we continually work to improve our services, the specific AI providers we use may change over time.
Our app uses ElevenLabs to provide text-to-speech functionality. When you use this feature, the text you provide is sent to ElevenLabs to be converted into audio. For more information on their data practices, please review the ElevenLabs Privacy Policy.
We use Sentry for error monitoring and crash reporting to help us identify and fix issues within the App. Sentry may collect device information, IP addresses, and details about errors that occur. For more information, see Sentry's Privacy Policy.
We use TelemetryDeck for privacy-friendly App product analytics. We send app-defined events and context that help us understand onboarding, tour, audio, offline-download, purchase, and reliability flows. Depending on the feature used, that context may include app and operating-system versions, device type, selected language, broad account or subscription state, timing and outcome categories, and coarse location or region when location is available. We do not send names, email addresses, user-created content, request or response bodies, or full error messages. TelemetryDeck uses an installation identifier that is hashed on the device and again by its service, and states that it does not store IP addresses. For more information, see TelemetryDeck's Privacy Policy.
The current iOS App also sends the app-defined product and reliability events described above to PostHog Cloud EU. These events can include an anonymous installation identifier and App session identifier, app build and distribution channel, device and operating-system context, selected language, onboarding state, broad account and subscription state, tour, stop, audio, download, purchase, and location-permission interactions, elapsed timings, and broad outcome or failure categories. When location is available, analytics coordinates are rounded to two decimal places and may be accompanied by country or administrative-region information.
The PostHog iOS SDK stores its anonymous installation identifier and a limited queue of pending events on the device so events can be retried after an offline period. PostHog may process the request IP address as technical network metadata. We do not use this integration for advertising or cross-app tracking, and we do not send names, email addresses, precise analytics location, typed or spoken content, URLs, request or response bodies, or full error messages. Person profiles, automatic screen and app lifecycle capture, element autocapture, session replay, surveys, and feature flags are disabled in the iOS integration. For more information, see PostHog's Privacy Policy.
We use RevenueCat to manage in-app subscriptions. When you make a purchase, RevenueCat processes subscription information on our behalf. It does not process or store payment card information, which is handled directly by the Apple App Store or Google Play Store. You can review RevenueCat's Privacy Policy for more details.
We use LiveKit to power real-time audio and video communication features in our App. LiveKit processes the data transmitted during these sessions to enable the service. For more details on their data practices, please see the LiveKit Privacy Policy.
We use Resend.com to send our newsletter and other important communications. For more detailed information about how Resend.com handles data, please refer to their privacy policy at https://resend.com/legal/privacy-policy.
We retain your personal data only for as long as is necessary to provide our services to you and for our legitimate and essential business purposes, such as maintaining the performance of the App, making data-driven business decisions about new features, complying with our legal obligations, and resolving disputes. We will retain your user account data for as long as your account is active.
If you request account deletion, we delete your account and associated user data. We may retain limited records where required by law (for example, accounting, fraud-prevention, and security obligations).
You can request account deletion directly in the mobile app via Settings > Delete Account, or through our account deletion page.
We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage.
Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
Depending on your location and subject to applicable law, you have certain rights regarding your personal data. These may include the right to:
To exercise any of these rights, please contact us at the email address provided below.
You can also request account deletion directly via our account deletion page, or in the app via Settings > Delete Account.
Our services are not intended for users under the age of 13. We do not knowingly collect personal information from children under 13.
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date.
If you have any questions about this Privacy Policy, please contact us via our contact page or email us at contact@odisea.ai