Privacy policy

Version 2026-09-23

Who is responsible

Horiza is published by Aidalys, which is the controller of the personal data described here. For anything in this document, write to support@horiza.app.

What we collect

• Your sign-in identifier (Apple or Google) and your e-mail address.
• The name you give us, your public handle, and your guide preferences.
• Your tours, your walks, the stops you confirm, and the position that confirmed each of them.
• Photos you take in the app, and what you publish on community walls.
• Your friends, the trusted contacts you choose, and your device's notification token.
• Your credit balance and purchases and, for a printed order, the delivery name and address you enter.
• What you write to support, and the reports you file.

What we use it for

We use this data to run Horiza: writing and narrating your tours, following your walks, delivering your orders, keeping your account and wallet straight, and notifying you (performance of our contract). We keep billing records because the law requires it (legal obligation). We moderate published content and protect the service against fraud and abuse (legitimate interest). We do not profile you for advertising, and we sell nothing about you to anyone.

AI in Horiza

Your request — the place, your themes, what you typed — is processed by AI models to write and narrate your tour. Photos submitted for publication, and those of a keepsake you ask for, go through an automated safety screen, and a human reviews what the screen or other walkers report. No decision with legal effect on you is fully automated.

What we cannot read

The photos in your private albums are end-to-end encrypted on your phone: what we store is unreadable to us. Losing your phone, your Apple or Google account and your recovery code means losing those photos for good — that is the price of a lock we hold no key to.

One exception, and you are the one who triggers it: when you ask for a keepsake (a film, a book, a print), your phone hands our servers, for that keepsake only, the keys of the photos you chose, sealed to a one-time key that stops working after 15 minutes. Our servers open those photos for as long as it takes to make the keepsake; no readable copy of them is kept, only the finished keepsake is — and a print goes to the printer.

What you send through the feedback channel is read by our team so we can answer you; it is encrypted under a key of your own account, destroyed if you erase your account.

Your location

Location is read while you walk a tour, to know when you reach a stop; a confirmed stop keeps the position that confirmed it. It is not shared with other walkers unless you yourself turn on progress sharing with a trusted contact — and then only with them, for as long as it is on.

Who helps us run Horiza

• Google Cloud hosts Horiza in the European Union; Firebase signs you in and delivers notifications.
• Google's AI models write, narrate and illustrate tours, and screen published photos.
• Apple and Google process store payments; we see the receipt, never your card.
• Our print partner receives, for a printed order only, the photos to print and the delivery address.
• Public knowledge bases (Wikipedia, Wikidata) are queried about places, never about you.

Some of these providers process data outside the EU. Where they do, the transfer rests on a European Commission adequacy decision (including the EU-U.S. Data Privacy Framework) or on standard contractual clauses.

How long we keep it

Your account and what you made with it are kept while the account exists. Technical logs live a few weeks, long enough to diagnose an incident. Billing records are kept as long as tax law requires. Deleting your account destroys the encryption keys protecting your personal data: what remains in our systems becomes unreadable, including to us. A photo you had shared with a trip crew was addressed to them too — your copy dies with your keys, theirs remains theirs.

Your rights

• Read what we hold about you and export it, from Settings (articles 15 and 20 of the GDPR).
• Delete your account and your data, from Settings (article 17).
• Correct your name and preferences in the app; write to us for anything else (article 16).
• Object to a processing, or ask us to restrict one (articles 18 and 21).

Write to support@horiza.app for any of these. You can also complain to the Belgian Data Protection Authority or to the supervisory authority of your own country.

Measurement and diagnostics

If you accept — and only then — the app measures which screens you open, how long they take to load, and its crashes, using Google Firebase (Analytics, Performance, Crashlytics). We use this to fix what breaks and to see what gets used; it is never sold and never feeds advertising. The legal basis is your consent (Art. 6.1.a), which you can withdraw at any time in Settings; everything stays off until you accept.

Children

Horiza is for walkers aged 16 and over. We do not knowingly keep an account for anyone younger; one that turns out to be is deleted.

Changes to this policy

When this policy changes in a way that matters, the app tells you and shows the new dated version.