Privacy policy and account deletion
Last updated: October 25, 2026
Tellura is an audio guide app for walking around a city. If you have a question about your data, write to vlntn.nzrnko@gmail.com.
The first time you open Tellura, the app creates a guest account for you. It is a random id, not tied to your name, email or phone number. We use it to keep your settings, saved places, ratings and listened places on our server. After you sign in, your saved places, ratings and listened places come back when you reinstall the app or sign in on a new phone; what you did as a guest on that phone is added to your account. If you bought the earlier one-time Tbilisi unlock, signing in with Google keeps the purchase on your account across reinstalls and phones; as a guest, “Restore purchase” with the same Google Play account brings the purchase back, and once a purchase belongs to a signed-in account, sign in with that account to use it on another phone. The walks you open with a purchase, the city you buy and the walks left to open are kept on your Tellura account. If you are a guest and reinstall the app without signing in, you lose them. You cannot use the app without it.
If you choose to sign in with Google (on iPhone, Apple sign-in will be added later), Google shares your email address and name with us, and we link them to your account. If you choose to sign in with your email instead, we send a one-time sign-in code to that address and keep the address on your account; we use it only to sign you in. Signing in is optional: everything in the app works as a guest.
We store what you do in the app that you would expect to find again: your interface and narration language, your interests, places you saved, places you listened to and how far, your ratings of places and walks. This is linked to your account.
If you send feedback from the app, we store your message, the topics you picked, the app version, the platform (Android or iPhone), the app language and how many walks you finished. It is linked to your account so we can tell repeat feedback apart. Sending feedback is optional.
Tellura asks for your location to show where you are on the map and which places are near you. This happens on your phone.
Your location leaves the phone only when you ask for walking directions to a place. Then the app sends your current position and the place to our server, which asks Mapbox for a walking route and returns it. We do not store your position. Location is optional: if you do not allow it, the app still works, without the “you are here” dot and directions from where you stand.
Voice commands are optional. When you use one, your phone’s own speech recognizer turns your speech into text. On Android this is usually a Google service, on iPhone it is Apple’s. Your voice recording never reaches our server.
The app then sends the recognized text, the language and the recognizer’s confidence to our server, which works out the command (for example “what next” or “something nearby”) and sends it back. We do not store the text.
The app records what happens in it so we can see what works: for example, that the app was opened, a place was opened, a story was played and how much of it was heard, a walk was started or finished. Each event carries your account id, a random id for the current app session, the app version, the interface and narration language, and the country code from your phone’s region setting (for example “GE”). The country code comes from your phone’s settings, not from your location or IP address.
These events never contain your email, your name, your location, anything you said, or what you typed. They are stored on our server and deleted with your account.
When the app crashes or hits an error, it sends a report to Sentry so we can fix it. A report contains the error, your phone model and system version, the app version, the app session id, the interface and narration language, and whether you use a guest or a signed in account. It does not contain your account id, email, name or location, and the app never sends screenshots or screen recordings.
Tellura sells in-app purchases: one walk or three walks to open as you choose, and a city purchase, which opens all walks of one city. They open the walks and the in-depth stories in them. The walks and the city you opened, and the walks left to open, are kept on your Tellura account; if a purchase is refunded, what it opened is closed again. Google Play processes the payment, and we never see your card details. We receive and store the purchase token, order id, product and time of the purchase, and use them only to unlock the content on your account. With a purchase, the app also sends Google Play a one-way hash of your Tellura account id, so the purchase stays tied to that account. When a purchase is refunded or charged back, we keep a record of it, without any link to your account, to stop the purchase from being used again. This record holds the purchase token, the order id, the time of the refund and the refund codes Google reports, and it stays after you delete your account. Everything else in this section is deleted with your account.
To draw the map, the app downloads map images from Mapbox. Like any website, Mapbox sees your IP address and which part of the map you are looking at.
Downloaded walks and audio, and some app settings, are kept on your phone and are not sent anywhere.
All data between the app and our servers travels encrypted (HTTPS).
We keep your account and everything linked to it until you delete the account. Crash reports are kept by Sentry for up to 90 days.
You can delete your account and all data linked to it in the app at any time. See how to delete your account.
Tellura is not made for children under 13, and we do not knowingly collect data from them.
If this policy changes, we will update this page and the date at the top.