1. Scope & Data Controller
This policy covers the City GuidePass mobile app (com.cityguidepass.app) on iOS and Android, used for Ho Chi Minh City and Da Nang (Vietnam), Dublin (Ireland) and Singapore.
Data Controller: L&A Technology Co., Ltd.
Contact: contact@cityguidepass.com
2. No Account, No Ads, No Tracking
- The app has no sign-up or login.
- The app shows no advertising.
- The app contains no analytics or tracking SDKs.
- The app has no in-app purchases. City passes and activation codes are bought outside the app.
3. Pass Activation
When you unlock a city, the app sends the following to that city's server:
- Your activation code
- A random installation ID generated by the app (not a hardware ID or advertising ID)
- The city / project ID
- Your device time zone
Purpose: to bind the pass to one device, prevent sharing, and enforce the pass validity period.
The access token returned by the server is stored only on your device, in secure storage.
Activation logs are kept on the server and retained only for security and fraud monitoring.
4. Location
- Location access is optional and is requested only while the app is in use.
- It is used to show your position and nearby points of interest on the map.
- When you ask for directions to a point while online, your current coordinates and the destination are sent to Mapbox (Directions API) to calculate the route.
- Your location is not sent to or stored on City GuidePass servers.
5. Camera
The camera is used only to scan the QR code of an activation pass. No photos or video are stored or sent.
6. Offline Content
- Tours, audio and images you download are stored on your device.
- You can remove them from the in-app Downloads screen, or by uninstalling the app.
- Downloading content sends standard HTTP requests (including your IP address and user agent) to the city's content server and CDN.
7. Third-Party Processors
- Mapbox — map display and directions (online only). The Mapbox SDK may send anonymous usage / telemetry data to Mapbox under Mapbox's own policy: https://www.mapbox.com/legal/privacy.
- Hosting / CDN providers of the content servers.
No data is sold or used for advertising.
8. Your Rights & Deletion
You can ask for access to, or deletion of, your activation records by emailing contact@cityguidepass.com with your activation code.
Data stored on your device is deleted by removing downloads in the app or by uninstalling the app.
Data Protection Officer — City Guide Pass
Email: contact@cityguidepass.com
9. Children
The app is not directed at children under 13, and we do not knowingly collect data from them.
10. Effective Date & Updates
Effective date: 2026-10-31. Last updated: 2026-10-31.
We may update this policy when the app changes or when required by regulations. The "Last updated" date above will change accordingly.