Privacy Policy

1. Controller

Avamundo, Patrick Kieber, Heiligwies 6, 9486 Schaanwald, Liechtenstein
Email: legal@avamundo.com

This policy applies to AnnaMundo (annamundo.com) and covers data collected when you use our city guides, create an account, submit tips, or purchase an itinerary pass. It also applies to our language learning subdomains — mandarin.annamundo.com, japanese.annamundo.com, and any future language subdomains.

2. Data We Collect and Why

Account data

When you register, we collect your email address, password (stored as a bcrypt hash), and optionally your first and last name. Legal basis: contract performance (Art. 6(1)(b) GDPR).

User-generated content

Tips you submit to city guides, itinerary preferences (travel dates, interests, budget, group type, personal notes), and generated itineraries are stored and linked to your account. Legal basis: contract performance (Art. 6(1)(b) GDPR).

Payment data

When you purchase an itinerary pass, payment is processed by our payment service provider. We never see or store your card details — the provider handles all card data directly. We store only the payment session ID and pass type to activate your pass. Legal basis: contract performance (Art. 6(1)(b) GDPR).

Newsletter subscription

If you subscribe to our newsletter, we store your email address to send you travel updates and content. Legal basis: explicit consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the unsubscribe page.

Server logs

Our hosting provider automatically records standard server access logs (IP address, browser type, pages visited, date/time). Logs are retained for a maximum of 7 days for security purposes and are not linked to your identity.

3. AI Services

We use AI service providers based in the EU and the USA to generate and translate content, answer chat questions and check submitted tips. Transfers to the USA are based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

We send them only what the task needs, never your name, email address or account details. We do not store chat questions. For quality checks we keep an anonymised sample of itinerary requests (without account data) for at most six months. Legal basis: contract performance (Art. 6(1)(b) GDPR); for the review of tips, our legitimate interest in moderating published content (Art. 6(1)(f) GDPR).

4. Infrastructure & Data Processors

We use service providers in the following categories; they process data only on our behalf:

• Hosting — our servers in Germany (EU).
• AI services — see section 3 (EU and USA).
• E-mail — sending and hosting our e-mail (EU and Switzerland).
• Payments — card payments (EU and USA).
• Speech synthesis — audio for our language learning subdomains (EU).
• Learning content and avatar media — one-time generation for our language learning subdomains; the results are stored on our own servers.

Transfers to the USA are based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Switzerland has an EU adequacy decision. On request we tell you which providers process your data (see section 7).

5. Cookies & Local Storage

AnnaMundo does not use tracking or advertising cookies. We use your browser's localStorage for the following purposes only:

• Authentication tokens — to keep you logged in across sessions
• Bookmarks — to save city guides locally on your device
• Language preference — to remember your chosen language

This data is stored only on your device and never transmitted to third parties.

6. Data Retention

• Account data: retained while your account is active. Deleted within 30 days of account deletion.
• Itineraries & tips: retained while your account is active.
• Payment records: retained for 10 years as required by Liechtenstein and EU financial law.
• Newsletter emails: retained until you unsubscribe.
• Server logs: deleted after 7 days.

7. Your Rights

Under GDPR (applicable in Liechtenstein as an EEA member state), you have the right to:

• Access — request a copy of all personal data we hold about you
• Portability — receive your data in a machine-readable format
• Rectification — correct inaccurate data
• Erasure — request deletion of your account and data
• Object — to processing based on legitimate interests at any time (Art. 21 GDPR); contact us to exercise this right
• Withdraw consent — unsubscribe from the newsletter at any time
• Lodge a complaint — with the Liechtenstein Datenschutzstelle (DSS) at datenschutzstelle.li, or your national supervisory authority

You can exercise your right to access and erasure directly in your account settings using the "Download my data" and "Delete account" functions. For other requests, contact us at legal@avamundo.com. We respond within 30 days.

8. Changes to This Policy

We may update this policy as the service evolves. We will note the date of the last update at the top of this page. Continued use of AnnaMundo after a policy update constitutes acceptance of the new policy.