This Privacy Policy explains how Muse Entertainment LLC (“Muse Entertainment,” “TourMuse,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with the TourMuse mobile apps for iOS and Android, the TourMuse web app at app.tourmuse.app, the tourmuse.app website, and related services (collectively, the “Service”).
This Policy should be read together with the TourMuse Terms of Service. If you do not agree with this Policy, please do not use the Service.
1. Who We Are
TourMuse is a product of Muse Entertainment LLC, a Delaware limited liability company headquartered at 16192 Coastal Highway, Lewes, DE 19958.
A note on terms. This Policy uses plain words. Inside the app you will also see TourMuse’s own names for them: a User is called a Muser, and a Creator — a user who authors and publishes Tours — is called a Muse. We use User and Creator throughout.
Contact: privacy@tourmuse.app
2. Information We Collect
2.1 Information You Provide Directly
When you create a TourMuse account or use the Service, you may provide:
Account information — name, email address, username, password, profile photo, and your date of birth. We use your date of birth only to determine whether you are under 18, and we never show it to anyone.
Creator payout information — if you publish paid Tours as a Creator, our payment processor collects information needed to verify your identity and pay you, such as your legal name, address, date of birth, and bank or tax information. We do not directly store full payment card or bank account numbers; these are handled by our payment processor.
Content — photos, video, audio, text, Quest details, and GPS coordinates you upload when creating or completing a Tour.
Communications — messages you send through the Musing social feed, tour groups, customer support requests, and contact-form submissions.
Purchase information — the Ticket Books you buy, your Ticket balance, which Tours you book, preview or complete, and any refund you request or receive. We never see your payment card: Apple or Google handle the purchase and send us a receipt.
Reports and requests — reports you make about content or other users, appeals you file, refund requests, and requests to verify a Location. These include what you tell us and a snapshot of the content you reported.
2.2 Information Collected Automatically
When you use the Service, we and our service providers may automatically collect:
Device information — device type, operating system, app version, locale, and the identifiers our platform providers assign to your installation: a Firebase installation identifier, a push notification token (so we can deliver notifications to your device), and an app-integrity attestation (Apple App Attest, Google Play Integrity, or reCAPTCHA on the web) that tells our servers a request came from a genuine copy of the app. None of these is an advertising identifier; we do not use advertising identifiers.
Usage data — features used, Tours viewed, played or completed, Quests attempted, points earned, and app interaction data. On iOS and Android this includes analytics events collected by Firebase Analytics and keyed to your account; on the web, no analytics run.
Quest verification data — when you attempt a location-verified Quest, the app captures a short burst of camera frames and motion-sensor readings, together with your GPS position and compass heading, and sends them to our servers to confirm you are physically where the Creator pinned. The frames are kept for at most 24 hours; the outcome of the attempt, the reason for it, and the GPS fix are stored with your account’s attempt record (and deleted with your account).
IP address and approximate location (derived from IP address), in our logs and those of our platform providers.
Log and diagnostic data, including crash reports and performance data (Firebase Crashlytics, on iOS and Android), and the technical details we attach when you report a problem or request a refund.
Administrative access records — when a member of our support staff views your account as you to diagnose a problem, that access is recorded in our audit log with the staff member’s identity.
2.3 Precise Location Data
Location is central to how TourMuse works. With your permission, we collect your device’s precise (GPS-level) location to:
Provide step-by-step, location-activated guidance during in-person Tours.
Confirm that you are physically present at a coordinate a Creator has pinned, so that location-verified achievements unlock only when you are actually there.
Show you Tours near you and improve Tour recommendations.
You can grant or revoke location permission at any time through your device settings. If you disable precise location, you will not be able to use location-dependent features, including location-verified achievements and in-person guidance, but you can still use the Service, including virtual Tours. See Section 6 for how we treat precise location as sensitive personal information.
Whenever the app is collecting your precise location it shows a signal on screen, and it collects it only while a Tour or Quest is active, never in the background. If you are under 18, we do not keep the GPS position from your Quest attempts after the attempt has been verified, your Tours carry no location, and your posts cannot reference a place.
2.4 Information From Other Users and Public Areas of the Service
Because TourMuse includes a social feed, other users may see your public profile, published Tours, achievements, and activity you choose to share (for example, when you join a tour group, follow a Creator, or comment). Other users may also provide information about you, such as when they tag you in a collaborative Quest.
2.5 Information We Do Not Intentionally Collect
TourMuse does not intentionally collect government identification numbers (except as required by our payment processor to verify Creators for payout purposes), health or biometric information, or precise financial account details beyond what our payment processor requires. Please do not include sensitive information of this kind in messages, Tour content, or support requests unless specifically requested through a secure, verified flow.
3. How We Use Information
We use information to:
Create and maintain your account and authenticate you as a User or Creator.
Operate core features, including Tours, Quests, gamification, location-verified achievements, and the Musing social feed.
Process purchases and remit payouts to Creators.
Record your date of birth, determine from it which features are available to you based on your age, and record your acceptance of the Terms of Service and this Policy.
Personalize Tour recommendations and improve the Service.
Communicate with you, including transactional messages and (with your consent, where required) marketing communications.
Maintain the safety, security, and integrity of the Service, including detecting falsified location data or other abuse.
Comply with legal obligations and enforce our Terms of Service.
We do not sell your personal information, and we do not use precise location data or other sensitive personal information for cross-context behavioral advertising.
3.1 Decisions made automatically
Some of what TourMuse does is decided by software without a person looking first. Here is each one, what it decides from, and how to challenge it:
Quest verification. Whether a location-verified achievement unlocks is decided by comparing the GPS fix, compass heading, motion-sensor readings and camera frames from your attempt against the Creator’s reference. A denied attempt costs you nothing but the attempt; you can try again, and you can ask support to review a denial you believe is wrong.
Content moderation. Public content — Musings, Tour comments, Tour text, images and video — is scored by automated services when it is posted (OpenAI’s moderation service for text, Google Cloud Vision for images). Content scoring above a high threshold is removed automatically and you are told; content scoring in a middle band is held for a human moderator. You can ask for a person to review an automatic removal, or a decision made on a report about your content, by writing to support@tourmuse.app. Private messages are never scanned.
Feed ranking. The Musings feed orders posts by how recently they were posted, whether you follow the author, whether the post is in a language you use, and how widely followed the author is. It does not use your location, your purchases, your messages or any sensitive information, and it does not build a profile of you.
Refund eligibility. When you request a refund, software checks the objective conditions of the Refund Policy (that the booking was paid, recent and not completed) and marks the request as eligible or in need of review; a person makes every refund decision.
Store refunds. If Apple or Google refund a Ticket Book, the Tickets it added are removed from your balance automatically, as the Refund Policy describes.
Decisions about an account — a strike, a restriction, a suspension or a termination — are always made by a person, and we will tell you what we did and why. If your account is suspended or closed, you can appeal once from inside the app, to a moderator who was not involved in the original decision. If we remove something you posted or restrict your account, or our automated checks remove something, you can ask for a person to review it by writing to support@tourmuse.app. If you are in the EEA or UK, you have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects; the decisions above that are fully automatic (a Quest denial, an automatic content removal, a store-refund adjustment) can each be reviewed by a person on request.
4. Legal Bases for Processing (EEA/UK Visitors)
Where the GDPR or UK GDPR applies, we process personal data on the following bases:
| Purpose | Legal basis |
|---|---|
| Operating your account and the Service | Performance of a contract |
| Precise location for in-person features | Consent |
| Processing payments and payouts | Performance of a contract; legal obligation |
| Security, fraud prevention, and abuse detection | Legitimate interests |
| Analytics and Service improvement | Legitimate interests; consent where required |
| Legal compliance | Legal obligation |
| Determining whether you are under 18 and applying the protections for users under 18 | Legal obligation; legitimate interests |
6. Sensitive Personal Information and Precise Location
Certain laws, including the California Consumer Privacy Act as amended by the CPRA, classify precise geolocation as “sensitive personal information.” Because location is core to TourMuse’s in-person features and location-verified achievements, we collect and use precise location data as described in Section 2.3, solely to provide and improve the Service and related safety and security purposes — not to infer characteristics about you or for cross-context advertising. See also the California Notice at Collection.
Where required by applicable law, you have the right to limit our use of sensitive personal information to these purposes. Because we already limit our use of precise location in this way, no additional action is generally required; you may still contact us at privacy@tourmuse.app to ask how your location data is used, or disable location sharing as described in Section 2.3.
8. Data Retention
We retain personal information for as long as necessary to provide the Service and for the purposes described in this Policy, including to maintain business and financial records for tax and payout purposes. When information is no longer needed, we delete or anonymize it, except where longer retention is required by law.
How long we keep each kind of record:
| Record | How long we keep it |
|---|---|
| Purchases, bookings, refunds and refund requests; for Creators, the royalty ledger and payout records; and our audit log of money-affecting and rights-affecting events (purchases, bookings, refunds, payouts, moderation and enforcement decisions, and your acceptance of these policies) | 7 years from the event |
| Reports and moderation records | 24 months from the decision |
| Location data from Quest attempts (GPS position, compass heading and motion-sensor readings) | 12 months from the attempt. For users under 18 the GPS position is not kept at all once the attempt has been verified |
| Quest camera frames | At most 24 hours |
| Your date of birth | For the life of your account |
| Everything else in your account | Until you delete your account, then as section 9.1 describes |
The records in the first two rows are kept after an account is deleted, as section 9.1 describes: the audit log identifies your account only by its internal identifier, and reports, moderation records and refund requests have your identity replaced by a pseudonym.
9. Your Privacy Rights
Depending on where you live, you may have the right to:
Access the personal information we hold about you.
Correct inaccurate information.
Delete your information.
Object to or restrict certain processing.
Withdraw consent (where processing is based on consent, such as precise location).
Port your data to another service.
Limit the use of sensitive personal information, including precise location (see Section 6).
Opt out of the sale or sharing of personal information, or of targeted advertising (we do neither, as described in Section 3).
Not be discriminated against for exercising these rights.
A parent or guardian may make a request on behalf of a user under 18, subject to our verifying the relationship. A user under 18 may remove anything they posted, including a published Tour, from inside the app; removing a Tour removes it for everyone.
9.1 What deleting your account does
You can delete your account from Settings in the app, or from tourmuse.app/account/delete, which signs you in to the same screen. Before you confirm, the app shows what you will lose: any unspent Tickets and every Tour you have booked are forfeited and cannot be recovered, transferred or refunded afterwards (see the Terms of Service, section 6.5). The app offers you the chance to gift your Tickets to another user first.
When you delete your account, we:
- Delete your account record, Ticket balance, bookings, purchase receipts, Tour progress, favorites, follows, passport stamps and profile, the attempt records and location data from any Quests you played, your avatar, and any photos or videos you attached to messages.
- Keep your Musings, comments and messages, but not as yours. A conversation is also the other participants’ record, so the text stays and your name on it becomes “Deleted Muser”. Your mentions are removed. We cannot remove your reactions from other people’s messages.
- Keep Tours you created, Retired. People who booked them keep access, as the Terms promise them. The Tour content and your Creator record are kept so those Tours still work.
- Keep records that we need to defend a decision or prevent abuse, with your identity replaced by a pseudonym: reports you filed or that were filed about you, moderation records, refund requests, and the royalty ledger and payout records if you were a Creator.
- Keep our record that you accepted these Terms and policies, and the entries about your account in our security and financial audit log, which identify your account by its internal ID only. The law allows us to keep these.
Deletion is immediate and cannot be undone.
9.2 Getting a copy of your data
You can download everything we hold about you from Settings in the app (“Download my data”). The file is in a machine-readable format and does not include other people’s details.
9.3 Who these rights apply to
California residents (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, and other U.S. state residents with comparable comprehensive privacy laws, and EEA/UK residents (GDPR/UK GDPR), may exercise these rights as applicable to them. California residents can also read our California Notice at Collection, a short summary of what we collect and why.
To exercise any right, contact us at privacy@tourmuse.app. We will verify your request and respond within the timeframe required by applicable law. You may designate an authorized agent to make a request on your behalf, subject to verification. EEA/UK residents may also lodge a complaint with their supervisory authority.
10. Data Security
We maintain administrative, technical, and physical safeguards designed to protect information collected through the Service, including encryption of data in transit where applicable. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. International Data Transfers
We are based in the United States, and information may be processed here. If we transfer personal data from the EEA, UK, or other regions with data transfer restrictions, we rely on appropriate safeguards such as Standard Contractual Clauses.
12. Third-Party Links and Services
The Service may link to or integrate with third-party services, including payment processors and mapping providers. We are not responsible for the privacy practices of third parties, and you should review their policies before providing information to them.
13. Children’s Privacy
TourMuse is not directed to anyone under 13, and we do not knowingly collect personal information from anyone under 13. Creating an account requires a date of birth, and an account for someone under 13 is not created. If we learn that a person under 13 has an account, we close it and delete the personal information we hold about them. If you believe someone under 13 is using TourMuse, contact us at support@tourmuse.app.
Users who are 13 to 17 may use TourMuse with the protections described in section 3.1 of the Terms of Service and in this Policy. For a user under 18 we do not sell personal information, do not share it for advertising, do not use it to build a profile of them, do not attach an analytics identifier to their account, and do not keep the GPS position from their Quest attempts. Their passport stamps are private unless they make them public, their Tours carry no location, and their feed is shown in time order without ranking.
14. Changes to This Policy
We may update this Policy from time to time. The version number and effective date at the top of this page identify the revision in force. We will notify you of material changes through the app or by email before they take effect.
15. Contact Us
Questions about this Privacy Policy can be sent to:
Muse Entertainment LLC
16192 Coastal Highway, Lewes, DE 19958
Email: privacy@tourmuse.app
16. Language
This Policy is published in English. Any translation is provided for convenience only; if a translation differs from the English text, the English version governs.