TouriX Privacy Policy

Last updated: July 13, 2026

1. Who we are

This Privacy Policy explains how Trac-X SARL AU ("TouriX", "we", "our", "us") collects, uses, stores, and shares personal data when you use the TouriX mobile application and related services.

This policy applies to:

The TouriX iOS and Android applications
TouriX backend APIs and connected services
In-app and web pages that reference this policy

If you do not agree with this policy, do not use the app.

2. Data we collect

2.1 Data you provide directly

Account data: name, email, password (for email sign-in), and account identifiers.
Social sign-in data: if you use Google or Sign in with Apple, we receive the data you authorize (such as email and name, and identity token data needed for authentication).
Profile data: profile photo, caption/bio, nationality, language, date of birth, gender, visited countries, and travel preferences.
User content: posts, comments, messages, AI prompts, uploaded media (images, videos, files), and related metadata.
Booking and travel data: reminder details, destinations, dates, locations, and booking-related content you enter.
Support communications: information you send when contacting support.

2.2 Data collected automatically

Device and app data: device type, OS version, app version, language, diagnostics, and service logs.
Identifiers: internal account IDs and push-notification identifiers (for example, OneSignal subscription/player identifiers).
Usage data: feature interactions and operational events required to run and improve the app.
Location data: we do not continuously track your location. When you allow location access, we may read your current location only while the app is open, and only when a feature you use needs it (for example maps, nearby places, navigation, visit/token checks on your device, or to answer a request that depends on where you are). Much of this processing happens on your device. While the app is actively running, we may occasionally check your city with our servers (about once every 20 minutes) so local recommendations stay accurate. We do not use location when the app is closed or in the background, and we do not stream continuous realtime GPS tracking to our servers.

2.3 Purchase data

In-app purchase metadata: product IDs, purchase status, transaction verification data received from Apple/Google for entitlement checks.
Other payment metadata: if alternative payment options are enabled, we process limited payment status/order metadata needed to complete transactions.

We do not store full payment card numbers from App Store purchases.

3. How we collect data

We collect data:

Directly from you (forms, profile setup, uploads, prompts, messages, settings)
Automatically from your device and app usage
From integrated providers when you choose those features (for example, Apple/Google sign-in, maps, notifications, and AI services routed via our backend)

4. How we use data

We use personal data to:

Create and manage your account
Provide app features (feed, booking, navigation, AI features, notifications)
Personalize your experience (including profile and context-aware responses)
Operate and secure the service, detect abuse, and troubleshoot issues
Process purchases and verify entitlements
Comply with legal obligations
Improve our product quality and reliability

We do not sell personal data to third parties for their own marketing.

TouriX includes AI-powered features, mainly:

AI Vision and AI chat (photos you share in AI chat, prompts, and conversation)
AI tour planning (itinerary generation using travel preferences such as traveling solo or with family)

All AI requests are received by TouriX servers first. Depending on the feature, we then process them using:

AI Vision & chat: Vultr inference infrastructure and models from Google Gemini and OpenAI
AI tour planning: Vultr and OpenRouter, using travel preferences you provide (for example traveling solo or with family)

When you use AI features, the following data may be sent for processing:

Your text prompts and chat messages
Conversation context/history needed to answer coherently
Photos you share in AI chat for analysis
Relevant location context from your request (when needed to answer)
Travel preferences used for tour planning (for example companion type such as solo or family)

Accepting the Terms of Service and this Privacy Policy at signup creates your account. That acceptance is not by itself permission to process your data for AI.

Permission for AI processing is required to complete profile setup and use TouriX.

During Complete Profile, we explain in the app:

what data may be sent
that it goes to TouriX servers, then to the AI providers named above
an example of how a request is processed

You must agree to this AI data sharing before you can finish Complete Profile and use the app. If you do not agree, you cannot complete setup or use TouriX.

We only send AI requests after this permission is granted.

Example: a landmark photo you share in AI chat with “what is this?” may be sent for AI Vision; choosing “Family” when planning a tour may be sent with your tour request.

We share data only as needed to operate the app, including with:

Cloud / backend infrastructure providers
Authentication providers (Apple, Google)
Push notification providers (for delivery and subscription management), such as OneSignal
Maps / location providers (routing, geocoding, places)
Vultr (inference infrastructure for AI features)
OpenRouter (AI processing used for tour planning)
Google (Gemini models used for AI Vision / chat)
OpenAI (models used for AI Vision / chat)
Payment platforms (Apple / Google stores and enabled payment processors)
Travel / content partners needed for search, recommendations, and booking-related features

We also may disclose data:

When required by law or valid legal process
To protect rights, safety, and platform security
As part of a merger, acquisition, or asset transfer (with appropriate safeguards)

We require processors to protect data and use it only for contracted purposes.

7. Data retention

We retain personal data for as long as needed to provide the service and meet legal, security, accounting, and dispute-resolution obligations.

When you request account deletion, we delete or anonymize data according to our deletion workflows, except where retention is legally required.

8. Security

We use reasonable technical and organizational safeguards, including encrypted transport (HTTPS/TLS), access controls, and secure storage mechanisms for sensitive app data where supported.

No system is perfectly secure. You are responsible for keeping your credentials confidential.

9. Your rights and choices

Depending on your location, you may have rights to:

Access your personal data
Correct inaccurate data
Request deletion
Restrict or object to certain processing
Request portability where applicable
Lodge a complaint with a competent data protection authority

You can also:

Manage permissions (camera, photos, microphone, location, notifications) in device settings
Delete your account in-app (Profile → Settings → Personal details → Account deletion)

For rights requests, contact us using the details below.

10. Children

TouriX is not directed to children under the minimum legal age in the relevant jurisdiction. If we learn we have collected personal data from a child without required authorization, we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version and revise the "Last updated" date. Continued use after updates means you accept the revised policy, to the extent permitted by law.

12. Contact us

For privacy requests or questions:

Email: support@tourix.get-consult.com
Address: N364 Technopark Casablanca Sidi Maarouf, Casablanca, Morocco
Phone: +212 666-908-100