Privacy Policy
This policy explains what Data NT LLC ("we") collects when you use Andar, why, who we share it with, and your choices. We don't sell your personal information.
What we collect
- Account: your email address, sign-in times, and one-time codes (stored only as irreversible hashes).
- Travel profile: name, home country, languages, interests, budget and pace, your autonomy settings, and optionally an emergency contact's name and phone number that you add. The contact is stored on your device and copied into each Emergency session you start.
- Telegram alerts: if your contact opts in to Telegram alerts from our bot, we store their Telegram chat ID and the name you gave them, only to send them your safety alerts. They can opt out at any time by sending /stop, and you can unlink them in the app.
- Trips and bookings: itineraries, the items you book or approve, providers and prices.
- Location: your precise location while you use the app, to show safety guidance, plan rides and, if you turn on "Alert me when I enter a caution zone after dark", to trigger those alerts. The app does not use your location in the background. During an Emergency share, your location is sent to our servers so your contact can see it.
- Conversations with Dora: the messages you send and Dora's replies. Voice input is transcribed on your device; audio is not sent to us unless on-device speech isn't available and you use server transcription. Hands-free mode uses your Bluetooth glasses or earbuds as a microphone and speaker; nothing else from the glasses reaches Andar.
- Look & ask photos: when you ask Dora about something you are looking at, the photo you take (with your phone camera or connected smart glasses) is sent with your question to our AI provider to produce the answer. Andar does not store the photo; your conversation history keeps only a "[photo]" marker. The photo is re-encoded on your phone before sending, without location metadata.
- Google Calendar (optional): if you sync a trip to Google Calendar, we store your Google account's email address, the ID of the "Andar trips" calendar Andar creates, which trips you synced and when, and Google's access tokens (encrypted). Andar can only see and change the calendar it created, nothing else in your Google account.
- Subscription: your plan, trial dates and the purchase records Apple or Google send us to verify your subscription. We never receive your card details.
- Technical data: device and app version, IP address and diagnostic logs needed to run and secure the service.
- Usage analytics (Android): which screens you open and when the app is opened, with an anonymous app-instance identifier and general device information, collected through Google Analytics for Firebase. We never send your name, email, user ID, trips, messages or location to analytics.
How we use it
- To provide Andar: sign you in, plan trips, get ride and booking options, run Dora, and send safety alerts.
- To run Emergency features: share your live location with the contact you choose, alert them on Telegram if they opted in, and let you send them the link on WhatsApp. WhatsApp messages are sent by you from your own phone; Andar doesn't send or read them.
- To manage your subscription and free trial, prevent fraud and abuse, keep the service secure, and fix problems.
- To understand which features are used and improve the app (usage analytics).
- To comply with law. We don't use your data for advertising, and we don't use your conversations to train AI models.
Who we share it with
- Service providers that process data for us under contract: Microsoft Azure (hosting, database, email delivery of sign-in codes), Telegram (emergency alerts to contacts who opt in), and xAI, whose AI model (Grok) writes Dora's replies from your messages, trip context and any look & ask photo you send.
- Google, only if you sync a trip to Google Calendar: the trip's items (titles, times, places with map links, notes, prices and booking status) are written to the "Andar trips" calendar in your Google account. Places, ratings and reviews shown in Andar come from Google Maps.
- Travel platforms you choose (for example ride-hailing apps, restaurants, tour and travel sites), with only what's needed to search or book.
- Your emergency contact, only when you start an Emergency share or report you're not okay.
- Apple and Google, to process and verify your subscription. On Android, Google Analytics for Firebase processes the anonymous usage analytics described above for us; it is not used for advertising.
- Authorities when required by law or to protect someone's safety.
Retention
We keep your account data while your account is active. Chat history keeps the most recent messages per conversation. Emergency session data is deleted 30 days after the session starts unless needed for safety or legal reasons. Telegram invite links expire and are deleted after 7 days; Google Calendar connection data is kept while you stay connected and deleted when you disconnect; a contact's Telegram link is kept until they send /stop, you unlink them, or you delete your account. When you delete your account we delete or anonymize your personal data within 30 days, except records we must keep by law (for example purchase records).
Google user data
Andar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar access only to keep your "Andar trips" calendar in step with your trips; we don't read your other calendars, sell the data, use it for advertising, or use it to train AI models.
Your choices and rights
- Turn location and notifications on or off in your phone's settings; the app keeps working with reduced safety features.
- Delete your account in the app (You → Account) or by emailing us.
- Disconnect Google Calendar any time (You → Google Calendar): we revoke Andar's access and delete what we stored about the connection; you choose whether the "Andar trips" calendar stays in your Google account. You can also remove Andar's access at myaccount.google.com/permissions.
- Depending on where you live (for example the EU/UK under the GDPR, or California under the CCPA), you may have the right to access, correct, delete or export your data, and to object to or restrict processing. Email admin@data-nt.com; we'll respond within the time the law requires.
Security and international transfers
Data is encrypted in transit and stored with Microsoft Azure in the United States. Sign-in codes and refresh tokens are stored only as hashes. No system is perfectly secure; tell us right away if you think your account was compromised. If you use Andar from outside the United States, your data is transferred to and processed in the United States.
Children
Andar is for adults 18 and over. We don't knowingly collect data from children; contact us if you believe a child has created an account and we'll delete it.
Changes
If we change this policy in a material way we'll tell you in the app or by email before the change applies.