Privacy Policy — WonderVoice
Last updated: 7 October 2026
1. Data controller
The controller of the personal data collected through the mobile application WonderVoice (the "App") is:
- GARGIULO LUIGI — sole proprietorship
- VAT / Tax code: 11111041213
- Privacy contact email: galusolutions@gmail.com
(the "Controller", "we").
The Controller has not appointed a Data Protection Officer (DPO), as there is no legal obligation to do so; you can nonetheless contact us on any matter relating to personal data at the address above.
2. Who this policy is for
This policy describes how we collect and process the personal data of users who download and use the App. It applies exclusively to the WonderVoice App and not to any third-party services that may be connected (Google, Apple, etc.), which have their own policies.
3. What data we collect
We collect only the data necessary to provide the service. The App does NOT collect geographic location (GPS), and does NOT access the camera, microphone, contacts or photo gallery.
3.1 Account data (authentication)
Access is via Google Sign-In or Sign in with Apple. From the provider you choose we receive and store:
- user identifier (ID),
- email address. With Sign in with Apple you can choose to hide your email: in that case we receive only an Apple private relay address.
We do not receive or store your Google or Apple account password. We do not request your name from Apple, and your Google profile photo is neither downloaded nor stored.
3.2 Travel preferences (provided by you)
In the preferences section you may optionally indicate:
- year of birth,
- country of birth,
- interests (e.g. art, history, nature, food…),
- preferred types of places (e.g. museums, parks, restaurants…),
- dietary preferences,
- style and level of detail of the guides, language,
- free-text descriptions of your interests and exclusions.
Your preferences, including the free-text descriptions, are saved on our servers and linked to your account, so that they are available on all your devices and can be used to personalise the content you request.
3.3 Content you generate
To create itineraries and audio guides we process the data you enter and the content produced:
- destination, travel dates and times, attractions indicated,
- custom names you assign to your itineraries,
- generated audio-guide texts and related audio files.
3.4 In-app purchase data
To manage purchases and subscriptions we process:
- product purchased, transaction identifier and purchase token provided by the store (Google Play / App Store),
- date, amount and currency,
- token balance associated with your account.
Purchase validation takes place server-side; the payment receipt is not retained after verification. Some purchase references are stored in encrypted form. We never process your credit card data, which is handled exclusively by Google/Apple.
3.5 Push notifications
If you consent to notifications, we register a notification token (Expo, delivered through Firebase Cloud Messaging on Android and the Apple Push Notification service on iOS), the platform (Android/iOS), the device name and the App version.
3.6 Technical and usage data
- Activity log: functional events (login, itinerary/audio-guide generation, purchases, errors) with associated technical details, to operate and improve the service.
- Error reports (Sentry): in case of a crash or error we collect diagnostic information (error type, technical context) associated with your ID and email so that we can assist you and fix problems.
3.7 Data stored only on your device
A local copy of your preferences, the itinerary/audio-guide cache, settings and downloaded audio files are saved on the device; they are not, in themselves, transmitted to us except in the cases described above.
On startup the App reads your system language setting to choose the initial interface language; this information stays on the device and is not transmitted to us. You can however set the language manually in Settings.
3.8 Partner codes
If you enter a partner code (a promotional code from one of our partners, such as a travel agency), we store the code, the date you entered it and whether the welcome bonus has been credited, linked to your account.
When you make your first purchase, we create a commission record for the partner, used to calculate and pay the partner's commission. It contains the partner, the code, the product, its list price, the commission and the store order identifier. It does not contain your account identifier or email, and the partner does not receive any of your personal data.
4. Why we process data and on what legal basis
| Purpose | Data involved | Legal basis (art. 6 GDPR) |
|---|---|---|
| Create and manage your account | Account (§3.1) | Performance of a contract (art. 6.1.b) |
| Generate personalised itineraries and audio guides | Preferences, content (§3.2, §3.3) | Performance of a contract (art. 6.1.b) |
| Manage purchases, tokens and subscriptions | Purchases (§3.4) | Performance of a contract (art. 6.1.b) |
| Apply partner codes and their welcome bonus | Partner codes (§3.8) | Performance of a contract (art. 6.1.b) |
| Calculate and pay partner commissions | Commission records (§3.8) | Legitimate interest (art. 6.1.f) and legal obligation for accounting (art. 6.1.c) |
| Tax/accounting obligations on purchases | Purchases (§3.4) | Legal obligation (art. 6.1.c) |
| Send you push notifications | Notification tokens (§3.5) | Consent (art. 6.1.a) |
| Security, fraud prevention, error fixing | Technical data (§3.6) | Legitimate interest (art. 6.1.f) |
| Improve the service | Activity log (§3.6) | Legitimate interest (art. 6.1.f) |
Providing account data and the information needed to generate content is essential to use the App: without it the service cannot be provided. Optional preferences only serve to personalise results. You can withdraw consent to push notifications at any time from your device settings, without affecting the rest of the service.
5. AI-generated content
Itineraries and audio guides are produced by artificial-intelligence models (see §7). The data you enter (destination, preferences, etc.) is sent to our AI providers solely to generate the requested content. Our AI providers, under their terms for API use, do not use this data to train their models. We do not use your content to train our own AI models. Generated content may contain inaccuracies: see the Terms of Service for the relevant reliability limits.
6. Who we share data with
We do not sell your personal data. We share it only with the providers ("processors") needed to deliver the service, each contractually bound to process it according to our instructions and the GDPR.
| Provider | Role | Data processed | Location / transfer |
|---|---|---|---|
| Supabase | Backend, database, storage | All account, preferences, content, purchase and audio data | European Union (Ireland) |
| OpenAI | Text generation and speech synthesis | Destination, preferences, attraction names, guide text | USA (with safeguards, see §7) |
| ElevenLabs | Premium speech synthesis | Audio-guide text | USA (with safeguards, see §7) |
| Google / Firebase | Authentication, push notifications (FCM) | Account email/ID, notification token | EU/USA (with safeguards, see §7) |
| Apple | Authentication (Sign in with Apple), push notifications on iOS (APNs) | Apple user ID, email or private relay address, notification token | EU/USA (with safeguards, see §7) |
| Sentry | Error reporting and diagnostics | User ID and email, technical error data | EU (servers in Germany) |
| Google Play / Apple | In-app payment processing | Purchase transaction data | Per Google/Apple policies |
Partners whose codes you use are not processors and receive no personal data about you: they only receive the total of their commissions.
We may also disclose data to judicial or public authorities where required by law.
7. Data transfers outside the European Union
Some providers (in particular OpenAI, ElevenLabs and some Google and Apple services) may process data in the United States. Such transfers take place with adequate safeguards under Articles 44 et seq. of the GDPR, namely:
- the EU-US Data Privacy Framework adequacy decision (where the provider adheres to it), and/or
- the Standard Contractual Clauses (SCC) approved by the European Commission, with supplementary measures where necessary.
Data stored by Supabase resides within the European Union (Ireland). You can ask us for more information about the safeguards applied at the contact in §1.
8. How long we keep data
- Account data, preferences and generated content: for the entire duration of your account. On account deletion they are removed (see §10).
- Purchase data: for the time necessary to manage the relationship and to meet legal tax/accounting obligations (10 years for accounting records), even after account deletion.
- Error reports (Sentry): 90 days.
- Notification tokens: until deactivation or account deletion.
- Partner code entered: for the duration of your account; removed on account deletion.
- Commission records: 10 years, for accounting purposes. On account deletion the store order identifier is removed, so the record no longer refers to a purchase that can be linked to you.
At the end of the stated periods, data is deleted or anonymised.
9. Your rights
As a data subject, under Articles 15-22 GDPR you have the right to:
- access your data and obtain a copy;
- request its rectification if inaccurate;
- request its erasure ("right to be forgotten");
- request restriction of processing;
- object to processing based on legitimate interest;
- obtain the portability of your data in a structured format;
- withdraw consent at any time (for consent-based processing), without affecting the lawfulness of prior processing.
To exercise these rights write to galusolutions@gmail.com. We will respond within one month. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it) or with the supervisory authority of your country of residence.
10. Account and data deletion
You can delete your account and the associated data yourself directly from the App: Settings → Delete account. Deletion permanently removes your profile, preferences, itineraries, audio guides, audio files, notification tokens, the partner code you entered and the activity log. If you signed in with Apple, we also revoke the App's access to your Apple ID (you can also manage it in your Apple ID settings, under Sign in with Apple).
You can also request deletion by writing to galusolutions@gmail.com.
Some purchase-related data may be retained for the time required by tax obligations (see §8), in minimised form. Partner commission records are kept without the store order identifier (see §8).
11. Data security
We adopt appropriate technical and organisational measures to protect data: encrypted communications (HTTPS), token-based authentication, database-level access controls (Row Level Security), encryption at rest of certain sensitive purchase-related data. No system is, however, 100% secure.
12. Minors
The App is not intended for children under 16 years of age (or the minimum age for digital consent in your country). We do not knowingly collect data from children below that age. If you believe a minor has provided us with data without the consent of a parent or guardian, contact us: we will delete it.
13. Cookies and tracking technologies
The App is not a website and does not use third-party advertising or profiling cookies. It uses only local storage on the device (necessary for operation) and the technical tools described in this policy. We do not carry out behavioural advertising.
14. Changes to this policy
We may update this policy over time. In case of material changes we will inform you through the App or other appropriate means. The date at the top indicates the last revision.
15. Contact
For any question about this policy or the processing of your data: galusolutions@gmail.com — GARGIULO LUIGI.