Privacy policy

Last updated: 15 October 2026

This policy explains what personal data RoomTour (the iPhone app and the tour pages on this website) processes, why, who we share it with and how you can exercise your rights under the General Data Protection Regulation (GDPR) and Spain’s data protection act (Organic Law 3/2018, LOPDGDD).

This is a translation for convenience. If it ever differs from the Spanish version, the Spanish version applies.

Data controller

Aniol Comas
Contact email: hola@roomtourapp.com

What data we process

Your account

• Your email address and user ID, through Firebase Authentication (Google). If you sign in with Apple, you can use the private relay email Apple offers you.
• The answers you give when you start (what kind of user you are, how many properties you handle, where you advertise and what holds you back today), so we can tailor the app.
• Your plan (free or paid) and when it expires.

Your tours

• The photos you capture, the 360° panoramas generated from them, the approximate floor plan, and the camera orientation and position inside the property that the iPhone works out (ARKit). We don’t use your GPS location.
• The title or address you type for each property and the text of the tour.

Purchases

• Payments are handled by Apple (App Store). We never see your card. RevenueCat receives an identifier linked to your account and the status of your subscriptions so it can switch on the paid plan.

AI features

• When you ask for a room name suggestion or for listing copy, we send scaled-down versions of the panoramas and the tour data needed to Anthropic’s API, which writes the reply. Under its commercial terms, Anthropic does not use this data to train its models.

Tour views

• Each time someone opens a published tour we add one to a counter. We use no cookies and store neither the IP address nor any visitor identifier: only the total, also per day, for the report the advertiser can send to the property's owner. That report shows only numbers, never data about who viewed the tour.

Messages from the contact form

• Some tours have a “Contact” button. If you use it, we store the name, phone or email and message you type, and the date, and show them only to whoever published that tour (the agency, agent or owner) so they can reply. That person decides what to do with them and is responsible for how they use them; we keep them on their behalf. We don't store your IP address.

Feedback and preferences

• If you send us feedback from the app or the web dashboard, we keep the text, the app version and your user ID so we can reply. If you email us, we process your email address and your message.
• If you tap “Notify me” on or vote for a feature that doesn’t exist yet, or tell us what you would pay for, we keep which feature interests you and your answer.
• Your answers to the welcome questionnaire (what you do, how many properties you list…) and the step where you stopped, so we understand what our users need.

App errors and crashes

• If the app crashes, or a capture or upload doesn’t complete, we record a technical report: the error, the screen, the app and iOS versions, the iPhone model and your user ID. We use Firebase Crashlytics (Google) and our database. It never includes your photos or the content of your tours.

Why, and on what legal basis

Who else processes your data

Only the providers we need to run the service, acting as data processors:

• Google (Firebase): sign-in, database, storage for photos and tours, and cloud functions, on servers in the European Union; Firebase Crashlytics for crash reports.
• RevenueCat (USA): subscription management.
• Anthropic (USA): AI features, only when you use them.
• Apple: App Store payments and Sign in with Apple.

Transfers outside the European Economic Area rely on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.

Tours you publish are public to anyone with the link: anyone who has the link (or the QR code) can view them. We ask search engines not to index them. We don’t sell your data or use it for advertising.

How long we keep it

For as long as your account is active. You can delete a tour at any time, which removes its photos and published files. If you delete your account in the app (Settings → Delete account) we delete your account, your tours, your photos and your profile. Contact-form messages are deleted when whoever published the tour deletes them, deletes the tour or deletes their account. Feedback is kept for up to 2 years; email us if you’d like it deleted sooner. Billing records are kept for as long as the law requires.

Your rights

You can ask to access, correct, delete, object to, restrict or port your data by writing to hola@roomtourapp.com. If you think we haven’t handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Cookies

Neither the app nor the tours use cookies. This site’s fonts are served from our own domain, so opening its pages doesn’t connect your browser to third-party services.

If you choose a language in the web dashboard, your browser remembers that choice in its local storage. It stays on your device: it isn’t sent to us and can’t identify you.

Children

RoomTour is meant for professionals and adults. It is not aimed at children under 14.

Changes

If we change this policy in a meaningful way, we’ll let you know in the app.