Skip to content

Last updated 14 September 2026

Privacy policy

TourPulse is an Android app for tour operators. It has no accounts and no server of its own. The member data you enter stays in the app's private storage on your phone. This page describes exactly what the app does with data, in the same terms as our Google Play Data safety declaration.

Data you enter, stored only on your phone

  • Members: full name, name in Arabic script, passport ID, birth date, gender, and optionally phone number and email address.
  • Tours: title and description.
  • Check-ins: sessions, who was marked present or absent, when, and whether by QR scan or by hand.

None of this is transmitted to us or to anyone else. The app has no server and, since version 2.0.0, no networking code beyond the two Firebase services below. If you use the phone's Call or Email actions from a member profile, the number or address is handed to your phone's dialler or mail app, nothing more.

Data sent to service providers

The app uses two Google Firebase services. They receive no member data.

  • Firebase Crashlytics receives crash reports: the stack trace, device model, Android version, app version and a random installation identifier.
  • Firebase Analytics receives anonymous usage events, such as which screens are opened and which features are used, tied to a random app instance identifier. Advertising ID collection is switched off in the app's configuration.

Google processes this data under the Google privacy policy. We use it to fix crashes and to see which features matter.

Camera

The camera is used only while the scanner is open, to read QR codes. Frames are analysed on the device and never stored or sent anywhere.

Storage, backups and security

  • The database is a standard app-private file. Android's app sandbox prevents other apps from reading it. It is not separately encrypted, so we recommend a screen lock on the phone.
  • If Android Backup is enabled on your phone, Android may include the app's data in the backup of your own Google account, encrypted by Android with your device credentials. You control this in Android settings under Backup.
  • Excel files you import are read once and not kept. The template you download is written to the folder you choose.

Deleting data

Delete a member, a tour or a session inside the app and it is removed from the database. Uninstalling the app deletes everything it stored. For diagnostic data held by Firebase, write to privacy@tour-pulse.app and we will request its deletion.

Your responsibilities

You enter your travellers' data into the app, so you are the controller of that data under laws such as the GDPR. Make sure you have the right to hold it, keep the phone secure, and delete data you no longer need.

Your rights

Because the data lives on your phone, you exercise access, correction, erasure and portability directly in the app. For anything Google Firebase holds about your installation, contact us and we will help. Residents of the EEA and UK may also complain to their supervisory authority.

Children

TourPulse is a tool for tour professionals and is not directed at children. Member records may describe travellers of any age; those records stay on the operator's phone.

Changes

When this policy changes we update the date at the top and, for material changes, note it in the app's release notes on Google Play.

This website

tour-pulse.app asks before it stores anything. Nothing is written to your browser until you choose, and nothing is written at all if you decline.

  • If you decline, or before you answer: Google Analytics still counts the visit, but with no identifier of any kind. It cannot tell whether you have been here before, and nothing is stored on your device.
  • If you accept: Google Analytics stores two cookies, _ga and _ga_FGGYY2Z7P1. They hold a randomly generated number, not your name or your email address. They let Google recognise the same browser across pages and across later visits, which is what turns separate hits into a journey. They expire after two years.

Either way, Google Analytics receives which page you viewed, which link you clicked, an approximate country derived from your IP address, and your browser, device type and language. Your IP address is truncated by Google and is not retained. It never receives your name, your email address, or anything you type.

None of this is used for advertising, and no data from this site is shared with advertisers. It is entirely separate from the app, which sends nothing but crash reports and anonymous usage events as described above.

Changing your mind. Select Analytics choice in the footer of any page. That clears the stored answer, stops the cookies being used and asks again. Your browser's own settings can clear the cookies at any time as well.

Contact

privacy@tour-pulse.app. See also the data safety page, which mirrors the Google Play declaration line by line.