Privacy Policy for WhimTrav

Last Updated: November 22, 2024

1. Introduction

Welcome to WhimTrav ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application WhimTrav (the "App") and our website at whimtrav-app.web.app (the "Website").

WhimTrav is an intelligent RV travel navigation app with AI-powered voice assistance, comprehensive campground data, and community-driven validation features designed to help RV travelers plan trips, navigate safely, and discover high-quality campgrounds.

2. Information We Collect

2.1 Location Information

WhimTrav requires access to your device's location services to provide core navigation functionality:

• Precise Location (ACCESS_FINE_LOCATION): We collect your real-time GPS location to provide turn-by-turn navigation, display your position on the map, help you find nearby RV-friendly locations, and enable RV-safe route planning with height/weight restriction warnings.
• Background Location (ACCESS_BACKGROUND_LOCATION): We may access your location while the app is in the background to continue providing navigation instructions during active route guidance.
• Location-Based Search: Your location is used to search for campgrounds, gas stations, restaurants, and dump stations within proximity to your current position.

2.2 Voice and Audio Data

WhimTrav uses voice recording for AI-powered voice assistance and trip planning:

• Microphone Access (RECORD_AUDIO): When you use the voice assistant feature, we record your voice commands to process them through Google's Gemini AI service. Voice recordings are transmitted to Google for natural language processing and AI trip planning. Voice recordings are not permanently stored by WhimTrav.
• Trip Planning Commands: Voice data may include trip destinations, camping preferences, and travel queries used to generate personalized trip recommendations.

2.3 Account Information

When you sign in to WhimTrav using Google Sign-In or email/password authentication, we collect:

• Your email address
• Your name and profile picture (if using Google Sign-In)
• A unique user identifier (Firebase UID)

2.4 RV Profile and Preferences

During onboarding, we collect information about your RV and travel preferences to enable personalized features:

• RV Specifications: RV type, year, make, model, length (feet), height (feet), weight (pounds), fuel type
• Travel Preferences: Camping style (boondocking, partial hookups, full hookups), location type preferences (rural, suburban, urban), budget range, internet needs
• Trip Planning Preferences: Typical trip duration, average miles per day, maximum driving hours per day, scenic route priority
• Personal Information: Age, traveling with kids/pets, accessibility needs, activity interests (hiking, fishing, museums, etc.)
• Dining Preferences: Fast food, casual dining, or fine dining preference

2.5 Usage Information

We collect information about how you interact with the App and Website, including:

• Search Queries: Campground searches, place searches, destination preferences
• Navigation Data: Routes you've navigated, destinations visited, trip plans created
• Community Validation: Locations you've validated with shield icons
• Campground Interactions: Campgrounds you've viewed, scored, or marked as favorites
• App Features Used: Voice assistant usage, trip planning requests, map interactions

2.6 Campground Data and Enrichment

WhimTrav stores and processes campground data to provide intelligent recommendations:

• Campground Database: We maintain a database of 50,000+ campgrounds from multiple sources (OpenStreetMap, Recreation.gov, State Parks, KOA, BLM)
• Smart Enrichment Data: When a campground scores below 40/100, we automatically enrich it using Google Places API. Enriched data (amenities, ratings, photos, contact info) is cached in our Firestore database
• Quality Scores: We calculate and store quality scores (0-100 points) for each campground based on data quality, amenities, ratings, and distance

2.7 Community Forum Data

If you use the WhimTrav Community Forum on our website, we collect:

• Forum Posts: Threads you create, replies you post, comments you make
• Validation Activity: Locations you validate on the map
• Voting Activity: Upvotes and downvotes on forum threads

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Core Navigation Services

• Turn-by-Turn Directions: Provide real-time navigation with voice guidance
• Map Display: Show your location on the interactive map
• RV-Safe Routing: Check routes for height and weight restrictions using your RV specifications
• Rerouting: Automatically recalculate routes if you deviate from the planned path

3.2 AI-Powered Trip Planning

• Multi-Day Trip Planning: Analyze your trip requests and generate personalized multi-day itineraries with overnight stops, campgrounds, and fuel stops
• Personalized Recommendations: Use your RV profile, camping style, and preferences to suggest appropriate campgrounds and routes
• Scenic Route Alternatives: Offer scenic route options based on your scenic priority preference

3.3 Intelligent Campground Discovery

• Campground Scoring: Calculate quality scores (0-100 points) for campgrounds based on data quality, amenities, ratings, and distance
• Smart Data Enrichment: Automatically enhance low-quality campground data (scores < 40/100) using Google Places API
• Search Optimization: Use dual-API search (Mapbox + Google Places) to provide comprehensive place discovery

3.4 Voice Assistant

• Natural Language Processing: Process voice commands through Google Gemini AI to understand your requests
• Hands-Free Operation: Enable voice-controlled navigation, search, and trip planning
• Conversational Assistance: Support continuous conversation mode for multi-turn interactions

3.5 Community Features

• Location Validation: Track and display community validations (shield icons) to help users identify trustworthy locations
• Forum Participation: Enable community discussions, location reviews, and RV travel tips
• Data Quality Improvement: Use validation data to identify and prioritize high-quality campgrounds

3.6 Account Management

• Authentication: Verify your identity and manage your user account
• Profile Storage: Store your RV specifications and preferences for personalized features
• Cross-Platform Sync: Sync your profile and validations between mobile app and website

3.7 App Improvement

• Usage Analytics: Understand how users interact with features to improve the app
• Error Tracking: Identify and fix bugs and performance issues
• Feature Development: Inform decisions about new features based on user behavior

4. Third-Party Services

WhimTrav integrates with the following third-party services that may collect and process your data:

4.1 Google Maps Platform

We use Google Maps for:

• Map display and interactive mapping
• Turn-by-turn navigation and routing
• Google Directions API for route calculation
• Distance Matrix API for distance calculations

Google's privacy policy applies: https://policies.google.com/privacy

4.2 Google Places API

We use Google Places for:

• Place search fallback when Mapbox returns no results
• Smart campground enrichment for low-scoring campgrounds
• Extracting amenities, ratings, photos, and contact information

4.3 Google Gemini AI

Voice commands and trip planning requests are processed through Google's Gemini AI service. Your voice data and text queries are transmitted to Google for natural language processing and AI-powered trip planning. Google's privacy policy applies: https://policies.google.com/privacy

4.4 Mapbox Search Box API

We use Mapbox Search Box API as our primary place search provider for:

• Generic POI searches (restaurants, gas stations, etc.)
• Address geocoding and reverse geocoding
• Location-based search within map bounds

Mapbox privacy policy: https://www.mapbox.com/legal/privacy

4.5 HERE Maps Truck Routing API

We use HERE Maps for:

• Professional truck routing to check RV height/weight restrictions
• Commercial-grade restriction database validation
• RV-safe route planning

HERE privacy policy: https://legal.here.com/privacy

4.6 OpenStreetMap (OSM) Overpass API

We use OpenStreetMap's Overpass API for:

• Bridge and tunnel height/weight restriction data
• Community-maintained campground data
• Cross-validation of restriction warnings

OpenStreetMap is a community project. Data usage is governed by the ODbL license: https://www.openstreetmap.org/copyright

4.7 Firebase Services

We use Firebase for:

• Firebase Authentication: User sign-in via Google or email/password
• Cloud Firestore: Store user profiles, campground data, enrichment cache, and community validations
• Firebase Hosting: Host our website and community forum
• Firebase Analytics: (Optional) Understand app usage patterns

Firebase privacy information: https://firebase.google.com/support/privacy

4.8 OpenWeatherMap API

We use OpenWeatherMap for real-time wind and weather data display. Your location is sent to OpenWeatherMap to retrieve weather conditions.

OpenWeatherMap privacy policy: https://openweathermap.org/privacy-policy

5. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information:

5.1 Data Storage Locations

• Cloud Firestore: User profiles, RV specifications, preferences, campground data, enrichment cache, and validation records are stored in Google Cloud Firestore (us-central region)
• Firebase Authentication: Account credentials are managed by Firebase with industry-standard security
• Local Device Storage: Temporary route cache and map tiles may be stored locally on your device

5.2 Security Measures

• Encryption: All data transmission uses industry-standard HTTPS/TLS encryption
• Authentication: User accounts protected by Firebase Authentication with OAuth 2.0 (Google Sign-In) or secure password hashing (email/password)
• Access Control: Firestore security rules restrict data access to authenticated users and appropriate permissions
• API Key Protection: Third-party API keys are restricted by domain, IP, and usage quotas

5.3 What We Don't Store

• Real-time Location: Your GPS location is used in real-time for navigation but is not permanently stored on our servers
• Voice Recordings: Voice data is transmitted to Google Gemini for processing and is not retained by WhimTrav
• Navigation History: We do not maintain a permanent log of routes you've navigated

6. Data Retention

• Location Data: Real-time location is not stored permanently. Route data may be cached temporarily on your device for navigation continuity
• Voice Data: Not retained by WhimTrav; processed by Google Gemini according to their retention policies
• Account Data: User profile, RV specifications, and preferences are retained as long as you maintain an active account
• Enrichment Cache: Campground enrichment data is cached permanently in Firestore to improve performance and reduce API costs
• Community Validations: Location validations are stored permanently to provide trust signals to the community
• Forum Posts: Community forum threads and replies are retained unless you delete them or close your account

7. Your Rights and Choices

You have the following rights regarding your information:

7.1 Permission Controls

• Location Permissions: You can disable location access in your device settings, though this will limit navigation functionality
• Microphone Permissions: You can disable microphone access in device settings, which will prevent use of the voice assistant
• Background Location: You can revoke background location permission to prevent navigation when app is not active

7.2 Account Management

• Profile Editing: You can update your RV specifications and preferences at any time in the app Settings
• Account Deletion: You can delete your account at any time, which will remove your account information, profile data, and validation history from our systems. See our Data Deletion page for instructions.
• Data Access: You can request access to the personal information we hold about you by contacting privacy@whimtrav.com

7.3 Marketing Communications

• WhimTrav does not currently send marketing emails. If we introduce marketing communications in the future, you will be able to opt out

7.4 Data Portability

• You can request a copy of your data in a machine-readable format by contacting privacy@whimtrav.com

8. Children's Privacy

WhimTrav is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at privacy@whimtrav.com and we will delete the information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page with an updated "Last Updated" date
• Displaying an in-app notification on your next app launch
• Sending an email notification if the changes are significant (for users who have provided email addresses)

You are advised to review this Privacy Policy periodically for any changes. Your continued use of WhimTrav after changes are posted constitutes your acceptance of the updated Privacy Policy.

10. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information with:

10.1 Service Providers

We share data with third-party services as described in Section 4 (Third-Party Services):

• Google Maps, Google Places, Google Gemini AI
• Mapbox Search Box API
• HERE Maps Truck Routing API
• OpenStreetMap Overpass API
• Firebase (Authentication, Firestore, Hosting, Analytics)
• OpenWeatherMap

10.2 Legal Requirements

• When required by law, regulation, subpoena, or legal process
• To comply with government requests or investigations
• To enforce our Terms of Service or other agreements

10.3 Safety and Security

• To protect the rights, property, or safety of WhimTrav, our users, or others
• To detect, prevent, or address fraud, security, or technical issues
• To respond to emergency situations that threaten life or safety

10.4 Business Transfers

• In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity

11. International Data Transfers

WhimTrav is based in the United States. Your information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from your country.

By using WhimTrav, you consent to the transfer of your information to countries outside your country of residence, including the United States. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy, including:

• Using service providers that comply with international data protection frameworks (e.g., Google's compliance with GDPR, CCPA)
• Implementing standard contractual clauses where required
• Ensuring data is encrypted during transfer and storage

12. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

12.1 Right to Know

You have the right to request that we disclose:

• The categories of personal information we have collected about you
• The categories of sources from which we collected your information
• The business or commercial purpose for collecting your information
• The categories of third parties with whom we share your information
• The specific pieces of personal information we have collected about you

12.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions. See our Data Deletion page for instructions.

12.3 Right to Opt-Out of Sale

WhimTrav does not sell your personal information. We do not and will not sell your data to third parties.

12.4 Right to Non-Discrimination

You have the right to not receive discriminatory treatment for exercising your CCPA rights.

12.5 How to Exercise Your Rights

To exercise your CCPA rights, contact us at privacy@whimtrav.com with the subject line "California Privacy Request". We will verify your identity and respond within 45 days.

13. Contact Us

14. Consent

By using WhimTrav (mobile app or website), you consent to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use WhimTrav.

When you first sign in to the WhimTrav app, you are required to accept this Privacy Policy during the onboarding process. Your continued use of the app and website after any updates to this Privacy Policy constitutes your acceptance of the changes.