Privacy Policy

This policy explains how Antratel Pty Ltd (ABN 24 122 328 492), 28 Crystal Street, Waterloo NSW 2017, Australia (“we”, “us”), handles personal information in Self Guide App: the website selfguideapp.com, the Android app on Google Play, the iPhone app on the App Store, our partner programme, and the emails you exchange with us. Our contact for anything in this policy is [email protected].

1. What we collect

When you use a guide

• Your location. While a tour is running, the app or the browser reads your position, direction of travel and speed from your phone. This starts only after you start a tour and allow location access, and it stops when you stop the tour. In our Android and iPhone apps it continues while the screen is off; on Android a notice stays in the status bar while it does, and your iPhone shows that location is in use.
• A record of each tour. When a tour starts and ends we record the guide, the time, where it started and ended, the device identifier of your browser or app, your IP address, your browser or app details, and the access link used. It lets us help you if you write to us later, and see how the guides are used.
• Detailed diagnostic logs. When diagnostics are switched on, mainly on test links we issue and in test versions of the app, the guide also records every position, heading and speed, and which story played and when. We use these logs to find out why a story started too early, too late or not at all. They are deleted automatically after 30 days.
• Your progress. Which places you have already heard and your guide settings. They are stored on our server against your access link, the device and the guide, and on the phone itself; your place in a podcast is kept on the phone. Progress belongs to the device, so on another device the guide starts again from the beginning.

Your access link

• The link’s code, the type of pass, and its dates: when it was bought, the last day it can first be opened, when it was first opened and when it ends.
• The purchase details: the payment reference, the amount, any discount or promotional code, and the partner (if any) whose link or code you used.
• What we need to keep one link on one device at a time: a random device identifier stored by your browser or app, and a device fingerprint made from technical characteristics of the phone (such as screen size, pixel density, time zone, platform, number of processor cores, memory and language), and whether the link has been opened in our app.

When you buy

• On the website, you give us your email address so we can send your link. It is kept in a cookie in your browser until the purchase is finished, and in our record of the payment link for 120 days. Payment is taken by Square on its own page: card details never reach us; we receive the confirmation of the payment, the amount and the email address attached to it.
• In the Android app, payment is taken by Google Play. Google does not tell us who you are: we receive an order number, the pass bought and Google’s confirmation. If you choose to give us an email address so we can also send your link there, we keep it with your link.
• Through a marketplace, voucher or one of our partners’ payment links, we receive the email address and order details needed to send your link.

When you write to us

Your email address, what you write, and anything you send us, such as a screenshot.

When you visit our website or open pages in our apps

• Server and network records. Our server and Cloudflare, our content delivery and security network, record the usual request details: IP address, approximate country, browser, time and page.
• Our own cookies and browser storage, which make the site work: your access link and device identifier, the email typed at checkout, your language and the guide you came from, whether you use our app, and a partner’s code if you arrived through a partner’s link (kept for 30 days). Your browser or app also stores your settings and progress on the phone.
• Google Analytics (Google) and Yandex Metrica (Yandex) measure how our pages are used: pages viewed, where visitors come from, device and browser, approximate location from the IP address, and actions such as starting a tour, starting a simulation or clicking a price. Yandex Metrica also makes click maps and session recordings (“Webvisor”): a replay of how a page was used, with mouse movements, taps and scrolling. We have set them not to record what you type into forms or the code of your access link. See section 4.
• Embedded YouTube videos. Pages that show our videos load them from YouTube, which can set its own cookies and receive your IP address when the page opens.
• QR codes and partner links. When you scan one of our QR codes at a place, or arrive through a partner’s link, we record the time, the guide, the place or partner code, the page, the language and the country. These records contain no other personal information.

If you are one of our partners

• The details you give when you apply: business name, business type, city, contact person, phone or WhatsApp, email, website, the language of your guests and your preferred code.
• Your payment details: your PayPal email address, or your ABN, bank name, BSB, account number and account name.
• Your guest discount setting, the visits and sales made through your link or code, the commission, the payouts we make, and the agreement you accepted.
• To stop automated sign-ups, the IP address used to apply is held in memory for an hour.

Partners never see their guests’ names, email addresses or locations, only the number of visits and sales and the commission.

If you try to sign in to our admin console

Every sign-in attempt is recorded with the time, the result, the IP address and the browser (never the password typed), and an address that enters a wrong password three times is blocked.

What we do not collect

We do not ask customers for their name, and we do not collect your contacts, photos, files, microphone or camera. The apps ask for permission to use your location (including in the background while a tour is running) and, on Android, to show notifications. The Android app may also ask to be allowed to appear over other apps, used only in car mode to open navigation from the car screen, and to keep running if the phone pauses unused apps. In-app purchases on Android go through Google Play.

2. Why we use it

• To run the guides: to know which place you are passing and which way you are facing, and so what to play and when.
• To deliver and protect what you paid for: to send your link, check it, keep it on one device at a time and stop it being shared.
• To fix and improve the guides and answer your questions and complaints.
• To take payments, give refunds and keep the accounts that tax law requires.
• To run the partner programme: to approve partners, count their sales, pay their commission and contact them about it.
• To understand how our website and apps are used and make them work better, through our own records and Google Analytics and Yandex Metrica.
• To keep our systems secure, for example by blocking repeated wrong passwords and automated sign-ups.
• To meet our legal obligations.

We do not sell or rent your information, we do not pass it to data brokers, and we do not use it to show you advertising.

We email you about your purchase, your link and anything you ask us. We do not send customers marketing emails unless they have agreed to receive them, and every marketing email has a way to unsubscribe.

3. Who else receives it, and where

We use these service providers. Each handles your information under its own terms and privacy policy, and some are outside Australia:

• Square — card payments on our website (Australia and the United States).
• Google — Google Analytics, Google Play billing for purchases in the Android app, YouTube for embedded videos, and Gmail, where we receive partner applications and some of our email (the United States and other countries).
• Yandex — Yandex Metrica, including session recordings and click maps (Russia, and possibly other countries).
• Cloudflare — content delivery, map files and protection against attacks for our domains (the United States and other countries).
• SmarterASP.NET — the hosting company whose servers run the site and store our records (the United States).
• Yahoo — the email service we use to send your access link and our other emails (the United States).
• PayPal and our bank — to pay partners their commission (Australia and, for PayPal, other countries).
• Apple and Google as app stores — when you download or update our apps, under your account with them.

We also share information when the law requires it, with our professional advisers (such as our accountant) where they need it, and with a business that takes over Self Guide App.

Overseas. Because of the providers above, your information is likely to be sent to, or stored in, the United States and Russia, and may be handled in other countries where these providers operate. The laws of those countries may protect personal information less than Australian law does, and authorities there may be able to access it under their own laws. We cannot control how these providers handle it beyond our choice of provider and settings.

4. Cookies, analytics and how to opt out

• Our own cookies are needed for the site to work — without them your access link cannot be recognised. They last from the end of your visit up to one year.
• Google Analytics sets cookies (names starting with _ga). You can block it with Google’s opt-out browser add-on at tools.google.com/dlpage/gaoptout.
• Yandex Metrica sets cookies (names starting with _ym). You can block it with Yandex’s opt-out add-on, described at yandex.com/support/metrica/general/opt-out.html.
• YouTube may set cookies on pages that show our videos.
• In a web browser you can also block or delete cookies in its settings, or use a content blocker; blocking our own cookies stops your access link from working. Our apps show the same pages, so these tools also run inside the apps, where the opt-out add-ons are not available.

5. How long we keep it

• Detailed diagnostic logs — 30 days, then deleted automatically by the server.
• Records of tours and of access links (including device identifiers and IP addresses) — kept while your access runs and for 12 months after it ends, so that a customer who writes to us later can be identified and helped. Then the tour records are deleted, and the access link record keeps only what our purchase and tax records need (the date, the pass, the amount and the payment reference) without device data or IP addresses.
• Progress stored on our server — deleted 12 months after the access it belongs to ends.
• Access links themselves stop working when the pass ends. A purchased link that has never been opened can no longer be started 6 months after purchase; demo, partner and voucher links after 365 days.
• Checkout records with your email address — 120 days, then deleted automatically.
• Purchase, refund and payout records, and partners’ details — as long as Australian tax law requires (generally five years after the year they relate to), and for partners at least while the partnership lasts.
• Emails — as long as we need them to help you and for our records.
• Analytics data — for the periods set in Google Analytics and Yandex Metrica, after which those services delete it.
• Admin sign-in records — as long as we need them to protect the console.

6. Your choices and rights

• Anonymity. You can use the free demo without telling us who you are. To buy a pass you need an email address to receive the link.
• Access and correction. You can ask what personal information we hold about you and ask us to correct it.
• Deletion. Write to us from the email address you bought with, or quote your access link, and we will delete your tour records, progress, diagnostic logs and the device data of your link, within 30 days, and confirm it by email. We keep only what the law requires us to keep, such as the record of the payment. Deleting the data of an active link ends the access it carries, so tell us if you want to wait until it ends. Information already sent to Google Analytics or Yandex Metrica is held by them; you can use their tools to manage it.
• On the phone itself, uninstalling the app, or clearing the site’s data in your browser, removes what it stored there.
• Complaints. Write to [email protected]. We will reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

7. Children

The guides are written for adult travellers and are not directed at children under 13. We do not knowingly collect personal information from them.

8. Security

We take reasonable steps to protect the information we hold. The site and the apps talk to our servers over HTTPS. Access link codes are random and very hard to guess, and the admin console is protected by a password and blocks repeated wrong attempts. Card details never reach us, and customers have no password for anyone to steal. No system is completely secure, so please keep your access link private: anyone who has it can use your pass. If a data breach is likely to cause you serious harm, we will tell you, and the Office of the Australian Information Commissioner where the law requires.

9. Changes to this policy

If this policy changes, the date at the top changes with it. We announce significant changes on this page, and we email partners about changes that affect them.

10. Contact

Antratel Pty Ltd (ABN 24 122 328 492), Self Guide App
28 Crystal Street, Waterloo NSW 2017, Australia
[email protected]