FLÂNEUR

wander · lore · hunt

Last updated: 24 May 2026.

Who we are

Flâneur (“the app”, “we”) is an iOS and Android mobile application that lets you walk curated city-tour courses. Published by Orange Wheel Advisory ApS, based in Denmark. Contact: [email protected].

What data we collect

We try to collect as little as possible. Here is everything the app touches.

1. Your device’s location

Why: to detect when you arrive at a waypoint on a course (this is how the app unlocks content as you walk).
When: only while you have a course open in a tour mode. Location is not collected when you are browsing menus or when the app is in the background.
Where it goes: stored on your device only. The app does NOT send your location to any server.

2. Your anonymous account

When you first open the app, we create an anonymous account in our backend (Supabase). This account has a random UUID and no personal information — no email, no name, no phone.
The anonymous account is what stores which courses you have unlocked.
If you later choose to upgrade your account (for example, to use Sign in with Apple so your purchases survive a reinstall), we add the identity information you choose to share — your Apple ID email at minimum.

3. Your profile (player name + optional avatar photo)

Stored on your device and in our backend, linked to your anonymous account.
The avatar photo, if you add one, is stored in Supabase Storage. You can delete it from the Profile screen.
Your player name appears on the Hunt leaderboard if you finish a Hunt course. The leaderboard is visible to other Flâneur users.

4. Course progress (which waypoints you have visited)

Stored on your device. Synced to our backend so it survives reinstalls and travels to your next phone.

5. Purchase records (in-app purchases)

When you buy a city pack via the App Store, Apple sends us a purchase receipt. We validate the receipt with Apple’s servers and record that you own the pack, so the app can unlock the courses for you.
We store: the product you bought, the date, the transaction ID, and the price in your local currency. We do NOT receive your full Apple ID, payment method, billing address, or card details — Apple handles all of that and never shares it with us.

6. Crash reports + basic diagnostics

If the app crashes, anonymous diagnostic data (device model, OS version, approximate region) may be sent to Apple via the standard iOS crash reporting flow. We use this to fix bugs.
We do NOT use a third-party analytics SDK (no Firebase, no Mixpanel, no Amplitude, no Facebook Pixel).

7. Network requests

When the app shows you a course, it fetches the course’s text, photos, and audio from our backend (Supabase) and from Wikimedia Commons (for historical archival images). These requests reveal your IP address to those services, as is normal for any internet request.

What data we do NOT collect

Your real name, email, phone number, or address — unless you choose to add an email when upgrading your account.
Your contacts, calendar, photos library, microphone, or camera.
Your browsing history, app usage on other apps, advertising identifiers.
Any data while the app is closed or in the background.

How long we keep it

Anonymous account and entitlements: indefinitely, so your purchases remain valid. You can delete your account from the Profile screen — this removes all data we hold about you.
Purchase records: indefinitely, as required by Danish tax law.
Crash reports: 90 days.

Who we share data with

Apple: for receipt validation and crash reports (Apple’s privacy policy applies).
Supabase (our backend host): they process data on our behalf under a data processing agreement. They do not use your data for their own purposes.
Wikimedia Foundation: when the app fetches historical images, your IP address is visible to their servers. We do not send them any of your account data.
OpenRouteService: when the app fetches walking-route directions, your approximate route endpoints are sent to their servers. They do not receive your full GPS track.

We do NOT sell your data. We do NOT share it with advertisers.

Your rights

You can, at any time:

View what we hold about you (Profile screen).
Delete your account and all associated data (Profile screen).
Request a copy of your data by email at [email protected].
Restrict or object to processing — email us.

If you are in the EU or UK, you also have the rights granted under GDPR / UK GDPR, including the right to lodge a complaint with your national data protection authority. In Denmark, that authority is Datatilsynet (datatilsynet.dk).

Children

Flâneur is not directed at children under 13 and we do not knowingly collect data from children under 13. If you believe a child has provided us with data, please contact us so we can delete it.

Changes to this policy

If we materially change this policy, we will notify you in the app on your next session. The “Last updated” date at the top shows when the current version took effect.

Contact

Questions, requests, complaints: [email protected].