Privacy Policy

Last updated: 9 June 2026

This Privacy Policy explains how Heritage Passport ("we", "us") collects and uses your personal information. We comply with India's Digital Personal Data Protection Act, 2023 (DPDP) and applicable provisions of GDPR for EU visitors.

1. Data we collect

Account: email, display name, optional photo.
Activity: heritage site check-ins, GPS coordinates at check-in time, photos you upload, voice recordings, squads, follows.
Device: push notification subscription, language, basic browser info, error logs.

2. How we use it

Run core features: check-ins, stamps, XP, streaks, leaderboards, receipts.
Send notifications you opt into (squad activity, streak reminders).
Generate AI guides, voice intros, and translations on your request.
Prevent fraud, abuse, and GPS spoofing.

3. Sharing

We do not sell your data. We use these processors: Lovable Cloud (hosting, database, auth), ElevenLabs (voice generation), Google (sign-in). They process data only on our instructions.

4. Your rights

You can view, correct, export, or delete your data at any time from Settings → Account. EU/UK users may also lodge a complaint with their supervisory authority. Indian users may contact the Data Protection Board.

5. Retention

We keep your account data until you delete it. Anonymous aggregate statistics (e.g. total site visits) may be retained indefinitely.

6. Children

Heritage Passport is not directed to children under 13. For users under 18 in India, parental consent is required per DPDP.

7. Contact

Email privacy@heritagestamp.app for any data request.