Privacy policy

• • No user account: you do not need to sign up or log in.
• • No tracking cookies or trackers, neither on the website nor in the app. The website uses anonymous, cookie-free audience measurement (Vercel Web Analytics): page views and totals, no identifier, no cross-site tracking.
• • No advertising, and no data sold or shared for advertising. Nothing you do in the app is used to target anything.
• • No profile: we do not know who you are, and we do not try to find out.

Only two things leave your phone, and only if you ask them to: a question put to James, and a photo you choose to send. Both are described below.

The app's map is ours: we draw the OpenStreetMap basemap, the DROTe official orthophoto, the relief and the places ourselves, from archives we host. There is no Google Maps in the app any more, and no Google Places. Downloading an area for offline use copies those archives onto your phone and sends nothing. This version does, however, still embed the Google Maps SDK: it starts when the app launches and may send Google technical and usage data (identifiers, interactions, crash and performance data), although no Google map is shown; it will be removed in a coming version.

If you allow it, your location is used only to show you on the map, on your device. The app never stores or transmits it: today's data is requested for fixed island coordinates, and no request carries where you are. You can refuse or revoke this permission at any time in your device settings; the map remains usable.

When you ask James a question, the question, the six previous turns on screen, the island, the language and an anonymised hash of a random install code go to our own service on Cloudflare. That service builds the answer from what the app publishes and has it written by a model from Anthropic, which receives the question and the conversation for that.

• • No account, no name, no location. The install code is drawn at random on your phone and only leaves it as a hash; it only counts your twenty questions a day, and our service keeps just a re-hash of it, renewed daily, for thirty-six hours.
• • The question is kept for 180 days, with no identifier, no IP address and not the answer, so that we can see what visitors look for and what the app does not know.
• • No advertising use, and nothing is used to recognise you from one visit to the next.
• • You can turn James off in Settings; the app then calls nothing at all.

The website's Share page — the one the app's invitations open too — asks you for no name, no email address and no account. Your files go from your phone, as they are, to our private storage (Cloudflare R2, European Union); we get one email about it. Nothing is published automatically, and nothing appears on the site or in the app before we have looked at it.

What we keep beside the files: the place you gave, the Instagram handle you left if you left one, the date, your file names, and the fact that you gave permission. A photo often carries the place and time it was taken in its metadata: we read those in your browser to suggest a place, and the file is sent as it is; if that bothers you, strip the metadata before sending.

The permission you tick lets us publish the photo on the app, the site and social media, crediting the handle you gave. To withdraw it, or to ask us to delete what you sent, write to hello@visitportosanto.app.

Version 1.0.6 sends no notification and never asks for that permission: the Alerts section of Settings does not exist in this version. The day it does, this page will say so first.

Your favourites, your bucket list, the chosen language, the map type, the downloaded areas and the last of today's data are stored on your device only (Hive, shared_preferences). They are never transmitted; you can erase them from Settings › Reset, and they disappear if you uninstall the app.

To work, the website and the app rely on a few services:

• • islands-api (ours) — on the website as in the app, today's data (weather, sea, tides, trails, events) are plain public files read for fixed island coordinates; the request carries no identifier, no position and no parameter.
• • Cloudflare — hosts our map archives, our photo storage and the James service.
• • Anthropic — writes James's answer from what our service gives it.
• • Vercel — hosts the website and measures its audience anonymously and without cookies.
• • External links — Instagram pages, webcams, hotel and operator websites and itineraries open in Safari or in the corresponding app, outside the app; they are governed by their own privacy policies.
• • The website's home video — hosted on the website itself, with no third-party player.

When these services are used, your IP address may be visible to the provider concerned, as with any Internet connection.

Data controller: Carl De Oliveira.

For any question about this policy, to ask for a photo to be taken down or for anything about you to be erased, write to us at hello@visitportosanto.app.