1. Data collection
Thaïa only collects data necessary for the app to function: your GPS location (to display nearby cultural sites), your email address and your display name (if you create an account), the first name you give the companion (even as a guest), your language preferences, your subscription history (if you subscribe to Thaïa+ or Premium) and your device's IP address (to apply the assistant's usage limits, see section 7). If you report a problem to us from within the app, we also receive your message, your email address and, where applicable, the photo or video you choose to attach. No data is sold to third parties.
2. Location usage
Your GPS location is used exclusively to display nearby museums and cultural sites, calculate distances and generate itineraries. To display maps and calculate routes, coordinates are sent to our mapping provider; they are not associated with any account identifier. If you turn on the "Even when the app is closed" option (off by default), the app uses background location (the "Always" permission) solely to detect when you pass near a remarkable place and send you a local notification: your position is then processed on your device and is never sent to our servers. We do not keep your positions on our servers and do not sell them to anyone. You can turn this option off, or disable location access, at any time in the app or in your device settings.
3. Artificial intelligence
Thaïa's companions, in writing and by voice, are powered by artificial intelligence, voices included. Thaïa relies on an artificial-intelligence model provider, based in the United States, for chat, photo identification, the voice guide and itineraries. Depending on the feature, this can include the photos you scan or show your companion, your voice (voice mode), your messages and, if it is turned on, your taste profile (section 4); we send only the minimum necessary. In line with this provider's terms, this data may be retained temporarily by it (up to 30 days, for security) then deleted, and is not used to train its models. The app is designed to describe places and artworks, not people. When location access is allowed, your location may accompany your exchanges with the assistant so its answers can be placed; it falls under the same retention terms.
4. Data storage
Your favorites, visit history and preferences are stored locally on your device, as well as on our secure servers if you have an account. By default (a setting you can turn off at any time in "My preferences"), Thaïa also keeps a profile of your tastes in order to personalize its recommendations. To avoid re-downloading the same content, the app keeps an image and audio cache on your device: this cache never leaves the device and disappears when you uninstall the app. If you delete your account, the associated data is erased from our servers. For any other erasure request, write to us at contact@thaia-app.com.
5. Security
Communications between the app and our servers are encrypted via HTTPS. Your sign-in session is kept on your device, and access to your data on our servers is restricted to your account.
6. Legal bases, retention and your rights
We process your data to provide the service you request (account, favorites, itineraries, assistant, subscription); with your consent for location, microphone, camera and background location, consent you can withdraw at any time in your device settings; and on the basis of our legitimate interest in measuring app usage, fixing crashes and preventing abuse. Retention periods: your account data, for as long as the account exists; inactive guest accounts, 60 days; usage measurements, 12 months; the address you leave on our website to be told about the launch, until you ask us to delete it. Some providers, including our AI model provider, process data outside the European Union, notably in the United States. In accordance with the GDPR, you can at any time access your data, correct it, delete it, request its portability, object to its processing or ask for it to be restricted, by writing to contact@thaia-app.com. You can also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
7. Cookies and trackers
The Thaïa mobile app uses no advertising cookies and does no cross-app advertising tracking. To improve the service, we record which features you use, your journey through the app, the app version, your device's operating system, a random installation number (used to count devices, not to identify you) and, for the questions you ask the AI assistant, a topic category computed on your device — never the text of your questions. Some of these records mention a cultural place or a city (itinerary, favourite, proximity alert), never your location. When you are signed in, these records are linked to your account; they are automatically deleted after twelve months. To prevent abuse, your device's IP address is used to apply the assistant's usage limits. To detect and fix crashes and slowdowns, we use a third-party diagnostics tool, which receives technical data about your device, the app and the error. When you report a problem to us from within the app, your account identifier and your email address are attached to the report so that we can reply to you, as is the photo or video you add to it. No advertising identifier is used. On our website, audience measurement is only turned on with your consent.
8. Third-party providers
Thaïa relies on a small number of providers, solely to operate the service. None of them is allowed to use your data for its own commercial purposes. A database host: account, favorites, itineraries and preferences; our AI model provider (section 3): processing of the photos, voice and messages sent to the assistant; your phone's speech recognition (Apple or Google): transcription of the messages you dictate in the chat, on the phone when it allows it; a mapping provider: map display, geocoding and route calculation, which receives coordinates with no account identifier; a diagnostics tool: crash detection and bug reports; a subscription manager: Thaïa+ and Premium subscriptions; Apple: subscription billing; an email service: keeping the address you leave on our website to be told about the launch, and sending the messages from our forms. The app also consults public, open knowledge bases; as with any website you visit, they receive your device's IP address and the search parameters, which may include a geographic area. Payment itself is handled by Apple: we never have access to your banking details. We will tell you the identity of any of these providers on request at contact@thaia-app.com.
9. Changes
This privacy policy may be updated. The date of its last update appears at the top of this page.
10. Contact
Data controller: Thaïa, a société par actions simplifiée with share capital of €20.00, registered office at 12 rue de Bretagne, 95300 Pontoise, France, registered with the Pontoise trade and companies register under number 108 623 307. For any questions regarding the protection of your data, contact us: contact@thaia-app.com