The short version

• No account needed. You can play and buy without one. An account is optional: sign in with Google or Apple only if you want your packs on other devices and in a browser.
• Your passport stamps and settings stay on your phone. Nothing about where you walk or what you look at leaves it.
• No ads, no ad networks, no analytics SDK, no tracking across apps or websites.
• The only data that leaves your phone is what a purchase needs, your account if you choose to sign in, and, if you use a class code, an anonymous seat record (below).

What stays on your phone

Every site, its guided tour and your progress run entirely on the device. Your passport stamps, walking speed and narration setting are stored locally and are deleted when you delete the app.

Purchases

Purchases are handled by the App Store or Google Play and processed through RevenueCat, which receives an anonymous install id (a random UUID generated on your phone) and your purchase status so your sites survive a reinstall. We never see or store payment-card details.

Accounts (optional)

If you choose Sign in with Google (Android and the web) or Sign in with Apple (iPhone and the web), the sign-in service (Supabase Auth, in the United States, shared by Adelyons Software apps) receives from Google or Apple your email address (or Apple’s private relay address), a provider account id and, if the provider sends it, your name. Farstep links to that account: the anonymous install id of each app install you sign in on, and any web unlock codes you claim. We use this only to unlock what you bought wherever you sign in. It is never sold, shared or used for advertising, and we send no email because of it. You can delete it at any time (Delete your account data).

Purchases on the web

Packs bought on farstep.adelyons.com are paid through Stripe, which handles the card and the email address you give it; we never see card details. We store an unlock code, what it unlocks, the Stripe session id and a one-way hash of the email address (so the code can be sent to you again), plus your account id if you were signed in. The unlock code is emailed once to the address you gave Stripe, and again only if you ask on the page.

Class codes (Classroom licence)

A teacher with the yearly Classroom licence can create a class code. Our server (Supabase, in the United States) then stores the code, the teacher’s anonymous RevenueCat install id, the seat limit and the licence’s expiry date. When a student device enters the code, the server stores that device’s anonymous install id (a random UUID) and when it was first and last seen, so the class can count its 35 seats. No names, emails, ages, accounts or locations are collected, and nothing about what a student does in the app leaves the device. Seat records are used only to run class codes; they are never sold or shared. A teacher can reset seats or delete the class at any time in Settings → Classroom, or ask us to by email: see Delete class data.

A Classroom licence bought on the web is a Stripe subscription on your account. We store the Stripe subscription and customer ids, the subscription’s status and renewal date, and your account id; Stripe holds the card, the billing email and the invoices. A class code made on the web is stored against your account id in place of an install id, and a student browser that enters it gets a seat under a random id kept in that browser. The class page shows how many seats are in use, never who.

Narration

Guided tours are read by recorded narrator clips that ship with the app; a language without clips falls back to your phone's built-in text-to-speech. Both happen on the device; Farstep sends no audio or text anywhere.

Children and schools

Farstep is not directed to children under 13, and it collects no names, contact details or other directly identifying information from anyone. When a school uses a class code, the only thing stored about a student device is the anonymous seat record described above, used solely to operate the class code on the school’s behalf. Schools and teachers can have it deleted at any time.

Your rights

Delete the app to delete what’s on your phone. Delete your account data in the app (Settings → Account → Delete account) or on Delete your account data, which also covers class-code records. Where the GDPR or the CCPA applies, you have rights of access, correction, deletion and portability; we do not sell personal information and never have.

Changes & contact

We may update this policy; material changes will be reflected by a new effective date here. Questions or requests: dev@adelyons.com.