Privacy policy

Last updated: 22 April 2026

Wozani is an audio-tour app for museum visitors, published by Wozani (info@wozani.app). This policy explains what we collect, why, and what you can do about it. It covers the mobile app and the web version at wozani.app.

If something here is unclear or you want to exercise one of the rights below, email info@wozani.app and we'll reply within 14 days.

What we collect

• Account basics. If you sign up, we store the email address you used, a display name, and a hashed password. Authentication is run by Supabase Auth on our behalf. You can also sign in with Google instead of a password; if you do, Google shares your name, email address, and profile photo with us to set up your account.
• Profile content. Anything you add to your profile: bio, avatar, selected interests. You can edit or clear any of this from the Profile tab.
• Content you create. Tours, stops, commentaries, ratings, flags and uploaded audio or images. We treat these as public by default once you publish them, because the point of the app is to share them. Drafts are only visible to you.
• Usage signals needed to run the app. Which tracks you have started and how far you got (used to unlock ratings and to resume playback), which commentaries you have upvoted or flagged, and which museums you have opened.
• Diagnostics. When the app crashes, we send a stack trace to Sentry along with an opaque user ID so we can correlate repeated crashes from the same account. We do not send keystrokes, screen contents, or network payloads.
• Device information. The OS version and app version, so we can reproduce bugs on a comparable device.
• Product analytics, only if you opt in. Analytics are off by default. If you turn them on (from Profile, or the first-run prompt), we use PostHog (hosted in the EU) to record product events, such as which museums and tours you view, start, or complete, the ratings you submit, and content you create, tied to your account once you sign in. You can switch this back off at any time.

We do not collect precise location, contacts, microphone audio, camera images you have not explicitly uploaded, or any advertising identifier. We do not use advertising SDKs.

Why we collect it

• To give you an account and let you sign back in.
• To let you create tours, leave ratings, and reuse commentaries.
• To stop obvious abuse (spam signups, flagged content, account takeovers).
• To figure out why the app is broken when it is broken.
• To understand how the app is used so we can improve it, but only if you have opted in to analytics.

We do not sell your personal data. We do not share it with third parties for their own marketing.

Who processes it on our behalf

• Supabase, database hosting, authentication, file storage. Data is held in the EU region.
• Sentry, crash reporting.
• Cloudflare, DNS and the marketing site at wozani.app.
• Google, only if you choose "Continue with Google" to sign in. It verifies your identity and passes us your name, email, and profile photo; what Google does with your own account is governed by Google's own privacy policy.
• PostHog, product analytics, active only while you have analytics turned on. Hosted in the EU.

These are sub-processors. They only see what the app sends them and cannot use it outside of providing the service.

Your rights

You can, at any time:

• See what we have. Use "Export your data" in Profile → Privacy & data. You'll get a JSON file you can save or share.
• Delete it all. Use "Delete account" in the same screen. That erases your profile, your tours, your ratings, your flags, and the account itself. It cannot be undone. A signed-in site administrator cannot delete their own account through the app, drop us a line so we can hand the role off first.
• Correct something. Edit it in the app, or email us and we'll help.
• Complain. If you think we are mishandling your data, you can raise it with your national data protection authority. In Belgium that is the Autoriteit voor Gegevensbescherming / Autorité de protection des données.

Retention

• Accounts are kept until you delete them.
• Diagnostics in Sentry roll off after 90 days.
• Deleted content is removed from the live database immediately and from encrypted backups within 30 days.

Children

Wozani is not aimed at children under 13 and we do not knowingly create accounts for them. If you believe a child has created an account, email us and we'll remove it.

Changes

We will update this page when the app changes in ways that affect what we collect. The "Last updated" date at the top always reflects the current version. Material changes will also be mentioned on the profile screen on your next launch.