FermataPrivacy Policy — Pocket Guide
This policy applies to the iOS application "Pocket Guide" (問導遊), developed by Fermata ("we", "us"). Our principle is simple: we collect only what is necessary to provide the service, and we never sell your personal data.
1. Information We Collect
1.1 Anonymous identifier
There is no sign-up. The app uses Firebase Anonymous Authentication, which means we never ask for — and never receive — your name, email address, or any other contact information. Firebase simply assigns your installation a randomly generated anonymous identifier, which we use solely to manage service quotas and prevent abuse.
1.2 Images and voice
The app's core feature is real-time spoken narration: images from your camera (photos you take, and live camera frames while you hold to record) and voice questions you ask are sent directly from your device to our third-party AI service provider (currently Google's Gemini API) to generate live tour-guide responses.
- Your images and voice are never stored on our servers — our backend only issues short-lived access tokens and never sees or handles your photos or audio. The only exception is a feedback report you actively choose to submit (see section 1.4).
- Images and voice are used only to generate the narration in that moment, never for advertising or marketing.
- Our AI provider's handling of this data is governed by its own privacy policy and API terms (currently the Google Privacy Policy).
- If you allow location access, your approximate GPS coordinates are attached to narration requests so explanations can reflect where you are. If you submit a feedback report, the coordinates of that session are included.
1.3 Usage records
To manage service quotas and prevent abuse, we record how many narration sessions you start and when (stored in Google Firestore). These records contain counts and timestamps only — no photo or conversation content.
1.4 Feedback reports
When you actively rate a narration (thumbs up or thumbs down), the image frames and the conversation transcript of that narration session are uploaded to us and used to improve the service. Your original voice recordings are never uploaded — only the text transcript of the conversation. Feedback reports are tied to your anonymous identifier and are covered by the deletion process in section 5.
2. Device Permissions
- Camera — to photograph what you want explained. No images are captured without your action.
- Microphone — to receive your spoken questions, active only during a narration session.
- Location — to make narration aware of where you are. Read as a one-shot when you start a narration; never tracked in the background.
- Speech Recognition — to convert your voice to text on your device (live captions and voice feedback). Only the resulting text is uploaded, and only where this policy says so.
You can revoke these permissions anytime in iOS Settings; the related features will stop working.
3. How We Use Information
We use the information we collect only to:
- provide real-time image recognition and spoken narration;
- verify requests and manage service quotas;
- keep the service secure and prevent abuse;
- improve service quality, using de-identified statistics only.
We do not sell or rent your personal data, and we do not use it for third-party advertising.
4. Third-Party Services
- Google Firebase (authentication, database, anonymous usage analytics & crash reporting) — Privacy and Security in Firebase
- AI model provider (image analysis & voice narration) — currently the Google Gemini API (Google Privacy Policy)
If we switch or add service providers, we will update this page before the change takes effect.
5. Data Retention & Deletion
- Usage records are tied only to your anonymous identifier and are retained while the service operates.
- You can delete your data at any time directly in the app (Settings → Advanced → Delete My Data). This immediately deletes your feedback, submitted reports (including images and transcripts), and custom quota settings. To prevent abuse, today's usage count is kept until the end of the day. You may also email us for deletion requests.
- Deleting the app removes the anonymous identifier from your device; it cannot be re-associated with you afterwards.
6. Children's Privacy
This app is not directed at children under 13. If we learn that we have collected personal information from a child without parental consent, we will delete it promptly.
7. Security
All network traffic is encrypted (HTTPS / WSS). Access to the AI service uses short-lived tokens with usage and expiry limits, minimizing exposure.
8. Changes to This Policy
We may update this policy from time to time. Material changes will be announced in the app or on this page, and take effect when posted here.
9. Contact
Questions about this policy or your data: support@fermatalabs.co