AnyTour Privacy Policy

Caywood Creative LLC ("Caywood Creative," "we," "our," or "us") owns and operates AnyTour (the "App") and the related sponsored-benefit claim service. By using AnyTour, you acknowledge the practices described in this Privacy Policy. Where consent is required, AnyTour asks for it before collecting or transmitting the affected information.

AnyTour is currently offered through the App Store in the United States and Canada. Eligible users may use the App while traveling elsewhere, subject to local law and service availability. Additional local rights may apply based on where you live or use the App.

2.1 Location and destination information

When you grant location permission or choose a destination, AnyTour uses coordinates and location or place information to identify nearby places and generate a tour. The App sends the location needed for that request to Anthropic through our Cloudflare Worker. Caywood Creative does not store the request location in its server-side account database. Anthropic may retain API inputs and outputs under the processor terms described in Section 6.

Tour records saved on your device may include the tour's location name and coordinates. You can remove those local records from the App or by deleting the App.

2.2 Microphone and speech recognition

If you ask a voice question, AnyTour uses the microphone after you grant permission. Apple's speech-recognition framework converts your speech to text. AnyTour does not send the raw microphone audio to Caywood Creative's servers. The recognized question text is sent to Anthropic as part of the tour conversation.

2.3 Camera questions

If you choose the camera-question feature, AnyTour captures the image you take, reduces its size, and sends the image and question to Anthropic so it can describe or discuss what you photographed. The image is held temporarily for the request and is not saved by AnyTour to your photo library or server-side account database. Anthropic may retain API inputs and outputs under the processor terms described in Section 6. Do not photograph sensitive documents, private spaces, or people who have not agreed to be photographed.

2.4 Purchases and subscriptions

Apple processes subscriptions and consumable-pack purchases. Caywood Creative does not receive your payment-card information. For subscriptions, the App receives the information needed to determine current entitlement status. For consumable packs, the server stores the Apple transaction identifier, product, granted balance, and related ledger records needed to verify the purchase and preserve the balance.

2.5 Tour history, saved places, and cached audio

Tour history, saved places, tour transcripts, preferences, and travel-journal information are stored locally on your device. Audio generated for a tour may also be cached locally for replay or offline use. Caywood Creative does not place those local records in the server-side account database.

2.6 Heritage information

If you import a GEDCOM file, AnyTour parses the file on your device. The raw GEDCOM file is not uploaded to Caywood Creative or an AI provider. Parsed ancestor records remain in the App's local database. When Heritage personalization is active, a limited summary of relevant ancestor context may be included in a narration request sent to Anthropic. You can remove locally stored Heritage information in the App.

2.7 Narration and question requests

To generate a tour or answer a question, AnyTour sends the request content to Anthropic through a Cloudflare Worker. Depending on the features you choose, this may include coordinates, destination or place information, tour preferences, recognized or typed questions, conversation context, limited ancestor context, and a camera image.

Caywood Creative does not retain these request bodies in its application database. Anthropic states that commercial API inputs and outputs are not used for model training by default and are normally deleted from its backend within 30 days, subject to its safety, legal, feedback, and contractual exceptions.

2.8 Voice narration

For supported audio narration, AnyTour sends narration text to Cartesia to produce synthesized audio. The text may include location details, tour content, a question response, and limited ancestor context already included in the narration. Raw GEDCOM files, raw microphone audio, and camera images are not sent to Cartesia.

Caywood Creative has disabled Cartesia's organization-level model-training contribution control for text-to-speech input text and output audio. Cartesia confirmed that, while this control remains disabled, it does not use those inputs or outputs to train, enhance, evaluate, label, classify, or otherwise improve its models. Cartesia processes this content to provide synthesized narration and for permitted security, support, and service-operation purposes. Cartesia has not committed to a fixed retention period; it states that it handles deletion on a per-customer basis, follows applicable regulations, and will accommodate Caywood Creative's deletion requests.

2.9 Limited server-side accounts

AnyTour creates a limited server-side account when you use Sign in with Apple to purchase or restore a consumable pack or to claim sponsored access. AnyTour uses Apple's stable per-app user identifier. Although an Apple identity token may contain other fields, AnyTour's server authentication uses only that identifier and does not create a separate AnyTour username or password.

The server may retain:

• Apple's stable per-app user identifier;
• StoreKit product and transaction records needed to verify a consumable purchase;
• credit-ledger records showing source, minutes granted, minutes reserved or used, remaining balance, expiration, and closure reason;
• temporary tour-funding reservation records used to prevent duplicate spending and restore minutes after failed generation;
• the partner and campaign associated with a sponsored benefit;
• hashed claim-link tokens, claim state, and claim, expiration, or closure timestamps; and
• security and audit records concerning claims, funding, and administrative actions.

AnyTour does not collect a sponsored recipient's booking record, ticket, itinerary, partner-customer number, proof of residence, name, or email address through the claim flow. The participating partner decides eligibility and privately distributes the claim link.

2.10 Sponsored-access claim page and branding

A participating organization may include a time-limited AnyTour narration benefit with a qualifying real-world service. The claim page displays the partner's approved name, logo, accent color, qualifying-service description, benefit amount, activation deadline, and benefit duration or fixed expiration. Sign in with Apple is required to bind the benefit to the correct AnyTour account.

The raw claim token is not stored in the account database. The server stores a cryptographic hash used to validate it. After a successful claim, the claim page removes the raw token from the page address and memory. To preserve the success screen during a refresh in the same Safari tab, it stores only the partner presentation, remaining minutes, and recorded expiration in session storage. Closing that tab ends the browser session and removes that receipt under normal browser behavior.

Partner branding may appear in the App while the sponsored benefit remains active.

2.11 Technical and security information

Cloudflare and other infrastructure providers may process ordinary network and security information, such as IP address, request time, response status, and security-event information, to deliver and protect the service. Caywood Creative may retain limited audit records needed to investigate fraud, enforce single-use claims, secure balances, and document administrative actions.

We use information only as reasonably necessary to:

• generate and deliver tours, answers, and audio;
• authenticate limited accounts and verify StoreKit purchases;
• create, reserve, spend, restore, expire, or close narration balances;
• activate and administer sponsored benefits;
• show approved partner attribution while a benefit is active;
• provide customer support and investigate errors;
• protect claim links, accounts, services, and users from fraud or misuse;
• prepare aggregate campaign reports; and
• comply with legal obligations and enforce applicable terms.

Caywood Creative does not sell personal information or use it for third-party behavioral advertising.

Participating partners receive aggregate campaign information, such as links allotted, claims completed, total minutes granted or used, active or expired benefit counts, campaign dates, and campaign status. Partner reports do not include a recipient's name, email, Apple identifier, internal user identifier, location, tour content, travel history, or booking record.

Authorized Caywood Creative administrators may access claim-level operational records containing opaque internal identifiers, claim status, timestamps, remaining minutes, and closure information when needed to support the program, investigate a problem, or end an individual benefit as permitted by the applicable terms. Those internal records are not a partner customer list.

We do not collect a sponsored recipient's payment information, partner booking documents, government identification, customer roster data, or proof of the real-world purchase. Partner organizations are responsible for their own bookings, admissions, customer records, and eligibility decisions.

Business contact information submitted by a prospective or participating partner through AnyTour's partnership, branding, billing, or review workflows is business-to-business information used to administer that relationship. It is not linked to the recipient's consumer AnyTour account.

The following providers process information to deliver AnyTour:

• Anthropic processes narration requests, questions, limited ancestor context, and optional camera images.
• Cartesia processes narration text and returns synthesized audio.
• Cloudflare provides the secure Worker, database, file storage, delivery, and security infrastructure.
• Apple provides App Store billing, StoreKit transaction services, Sign in with Apple, device permissions, and speech recognition.

We select and configure service providers to process information for the service purposes described here and require them to protect information consistent with applicable agreements and law. Their published policies and applicable processor terms also govern their handling of information.

Stripe, QuickBooks Online, BoldSign, and business-email providers may process a partner organization's billing, signature, or business-contact information in the separate business relationship. They do not receive sponsored recipients' AnyTour account data through the consumer claim flow.

• Local tour, saved-place, Heritage, preference, and cached-audio records remain on your device until you delete them in the App, clear applicable storage, or delete the App.
• AnyTour does not retain AI request bodies in its application database. Anthropic's standard commercial API retention is normally up to 30 days, with longer retention possible for safety enforcement, legal requirements, feedback, or different contractual terms.
• Cartesia has not specified a fixed retention period for narration text, generated audio, request logs, or backups. It states that deletion is handled on a per-customer basis under applicable regulations and that Caywood Creative may request deletion.
• Pack transaction and credit-ledger records are retained while needed to preserve the purchased balance, prevent duplicate credit, process disputes, maintain security, or meet legal and accounting obligations.
• Sponsored claim, credit-ledger, campaign-association, expiration, closure, and audit records are retained while the account or program record is active and afterward for a limited period needed for security, dispute handling, contractual reporting, and legal obligations.
• Temporary funding reservations expire automatically if a tour does not complete, after which the minutes are released according to the funding rules.
• The successful-claim receipt in Safari session storage lasts only for that browser-tab session under normal browser behavior.

We will not keep personal information longer than reasonably necessary for the purposes described above, except where law requires or permits additional retention.

You may:

• deny or withdraw device permissions in iOS Settings;
• use Text mode instead of synthesized audio;
• choose not to use voice questions, camera questions, Heritage personalization, or sponsored access;
• delete local tour, saved-place, or Heritage records using available App controls;
• voluntarily end sponsored access, which permanently forfeits its unused sponsored minutes; and
• request access to, correction of, or deletion of server-side account information, subject to applicable law.

If AnyTour has created a limited server-side account for you, open Settings, find Account, and select Delete Account. After you confirm, AnyTour asks you to authenticate again with Sign in with Apple. Deletion takes effect when the server confirms the request. The App then removes its locally cached account credentials and signs out of that limited account. The server deletes the account, purchases and usage records, credit balances, and other account-linked records that Caywood Creative is not required to preserve. A sponsored campaign's redemption record may remain after its link to your account is removed because it is also part of the partner's campaign record. Deletion permanently forfeits remaining pack and sponsored balances, does not remove tour history, saved places, or Heritage data stored only on your device, and does not cancel an Apple subscription.

For privacy requests, contact [email protected]. We may need to verify your identity before acting on a request.

The claim page discloses the applicable activation deadline and benefit period before you claim. New benefits generally expire based on the duration recorded at claim time; certain legacy benefits may use a fixed expiration date. Unused sponsored minutes are forfeited when the benefit expires, is exhausted, is voluntarily ended by the recipient, or is ended individually by an authorized AnyTour administrator as permitted by the applicable terms. Ending a campaign ordinarily stops new claims and does not, by itself, remove valid benefits already claimed.

AnyTour is not directed to children under 13. A person must meet the minimum age required to consent to the App's data practices and enter this agreement under the law that applies to that person, or use the App only with legally valid parent or guardian authorization where permitted. We do not knowingly collect personal information from a child in violation of applicable law. If you believe a child has provided information unlawfully, contact [email protected].

We use HTTPS, server-side credentials, hashed claim tokens, access controls, and other administrative and technical safeguards designed to protect information. No transmission or storage method is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or information about the use and disclosure of personal information, and to appeal or complain about a response. Contact [email protected] to exercise a right. We will respond as required by applicable law.

We may update this Privacy Policy. We will provide notice of a material change through an in-app notice and/or email at least fourteen days before it takes effect, plus any longer notice required by law. The posted policy will state its update and effective dates. Nonmaterial corrections may take effect when posted.

This Privacy Policy is governed by applicable law, including applicable United States federal and state privacy law and Canadian federal or provincial privacy law based on the circumstances. Nothing in this policy limits a right that cannot legally be waived.

Caywood Creative LLC
7901 4th Street N, Suite 300
St. Petersburg, Florida 33702
United States
321-534-3898
[email protected]
https://anytour.app