Privacy policy
Last updated:
This policy explains what personal data we process when you visit aneddo.com or join the Aneddo waitlist, why, and what rights you have. It is written under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 196/2003). Part B covers the Aneddo app (beta): how it uses your location, the microphone and the little data that reaches us.
In short. Location is tracked only during a walk you start; outside a walk the phone reads it just once, when you open the app or ask the guide a question. Your coordinates and route stay on your phone. We don't record conversations. Statistics are sent only if you say yes. We don't sell data and we don't advertise.
Part A · Website and waitlist
1. Who is responsible for your data
Data controller: Protek di Davide Talevi, sole proprietorship (impresa individuale)
Via Marinuccia 13, 60024 Filottrano (AN), Italy
VAT no. IT02033660438 · REA AN-265397
Email: ciao@aneddo.com · Certified email (PEC): protek.talevi@pec.it
We have not appointed a Data Protection Officer because the law does not require one for our activity. For anything about your data, write to ciao@aneddo.com.
2. What data we collect
When you join the waitlist
- your email address;
- the language of the page and which button you used (for example "Join the beta" or "Get the pass");
- the campaign label in the link you arrived from, if any (for example
?v=instagram); - your country, derived from your IP address by our hosting provider (we do not store the IP address with your sign-up);
- the date and time of sign-up.
Pressing "Get the pass" does not buy anything. It only records that you are interested in the pass, so we can tell you when it is available.
When you browse the site
Like any website, our hosting provider receives technical data needed to deliver pages and protect the site: IP address, browser and device type, requested page, date and time. We do not use advertising or profiling cookies and we do not load third-party trackers. See the cookie policy.
The voice demo on the home page plays a pre-recorded audio file from our own site. It does not use your microphone.
When you write to us
Your email address, name if you give it, and whatever you choose to write.
We do not collect your location on this website. Please do not send us special categories of data (health, religion and so on).
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Telling you when the beta opens, inviting you to it and sending beta-related updates | Your consent, art. 6(1)(a) |
| Telling you when the app and the pass are available, if you pressed "Get the pass" | Your consent, art. 6(1)(a) |
| Answering your messages | Steps you asked for, art. 6(1)(b), and our legitimate interest in replying, art. 6(1)(f) |
| Aggregated counts (sign-ups by language, country, button, campaign) to understand what works | Legitimate interest, art. 6(1)(f) |
| Keeping the site secure and working, preventing spam and abuse | Legitimate interest, art. 6(1)(f) |
| Complying with the law and defending our rights | Legal obligation, art. 6(1)(c), and legitimate interest, art. 6(1)(f) |
Giving us your email is optional, but without it we cannot put you on the waitlist. We will not send you marketing about anything other than Aneddo, we do not sell or rent your data and we do not make decisions about you based solely on automated processing.
4. Who processes it for us
Your data is handled only by us and by providers that process it on our behalf under a data processing agreement (art. 28 GDPR):
- Cloudflare, Inc. (USA), with its EU affiliates: website hosting, content delivery, security and the database where the waitlist is kept (Cloudflare D1).
- The email provider we use for ciao@aneddo.com and for beta emails.
The full, current list of processors is available on request. We may disclose data to public authorities when the law requires it.
5. Transfers outside the EU
Cloudflare may process data in the United States and in other countries where it operates. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing adequate protection (art. 45 GDPR), and its data processing agreement also includes the Commission's Standard Contractual Clauses (art. 46 GDPR). You can ask us for a copy of the relevant safeguards.
6. How long we keep it
- Waitlist: until you unsubscribe or withdraw consent. In any case we delete it 12 months after the end of the beta programme, unless you have become an Aneddo user in the meantime.
- Messages: as long as needed to handle your request and for up to 24 months after, unless the law requires longer.
- Technical and security logs: for the short periods set by our hosting provider, normally a few days to a few weeks.
- Aggregated statistics contain no personal data and may be kept.
7. Your rights
At any time and free of charge you can ask us to:
- access your data and get a copy (art. 15);
- correct it (art. 16);
- delete it (art. 17);
- restrict its use (art. 18);
- receive it in a machine-readable format (art. 20);
- stop using it for purposes based on legitimate interest (art. 21).
You can withdraw your consent at any time, for example with the unsubscribe link in every email or by writing to us. This does not affect what we did before you withdrew it.
Write to ciao@aneddo.com or protek.talevi@pec.it. We reply within one month. If you think we are handling your data unlawfully, you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali, or to the authority of the EU country where you live or work.
8. Age
The waitlist and the beta are for people aged 18 or over. If you are under 18, please do not sign up. If we learn that we have a minor's data, we delete it.
9. Security
The site is served only over HTTPS. The waitlist is stored in a database that only we can access, protected by strong authentication. No system is perfectly secure, so if a breach ever affects your data we will tell you and the Garante as the law requires.
10. Changes
We will update this page if what we do with data changes, and change the date at the top. If a change is significant we will tell waitlist members by email before it applies.
Part B · The Aneddo app (beta)
This part covers the Aneddo app for iPhone and Apple Watch during the beta. The controller is the one named in section 1. Sections 7 (rights), 9 (security) and 10 (changes) also apply.
B1. Your coordinates and route stay on your phone
- The app tracks your location with GPS only during a walk you started. Outside a walk the phone asks for a single position, only while the app is open and with the permission you already gave, when you open the app (to tell whether you are in Rome) and when you ask the guide a question (to tell you what is around you): it is not stored and not sent to our servers. With no walk running there is no location monitoring and no notifications. A walk ends when you end it, or if you stop for a long time.
- The phone compares your position with the city's places, already downloaded, and decides by itself when to offer a story. Your route and coordinates are never sent to our servers.
- When you ask the guide "where am I?" or "what's in front of me?", during a walk or outside one, the phone asks Apple Maps for the street name (Apple's service, from the device) and queries Wikipedia/Wikidata with a location rounded to about 100 metres. At most, our servers receive a place ID or an approximate area of about a kilometre, which we use to look up nearby venues (Google Places) and which the guide may mention in its answer. Legal basis: performing the service (Art. 6(1)(b)).
- The places you have heard and your passport stamps stay on your phone.
B2. Account
On first launch the app creates an anonymous account (Google's Firebase Authentication), with no name, email or phone number. It makes the app work and manages your pass. We also use Firebase App Check to verify that requests really come from the app. Legal basis: performing the service (Art. 6(1)(b)) and our legitimate interest in security (Art. 6(1)(f)).
B3. Talking to the guide (microphone)
- The microphone turns on only when you open a conversation with the guide or answer one of its questions by voice.
- Short answers ("yes", "later") are recognised on your phone, with Apple's on-device speech recognition.
- In a conversation, audio goes from your phone to Google (Gemini API, paid plan), which generates the answers in real time. To talk about what is around you, the guide only receives the names of nearby places, the distance in bands (for example "25–50 metres") and which side they are on relative to you, never your coordinates. Google does not use this data to train its models; it may keep it for a limited time only to prevent abuse, under its terms. We don't record or keep the audio, and we don't store transcripts. We only keep the session's length, the tools used and the cost, for your pass limits.
Legal basis: performing the service (Art. 6(1)(b)).
B4. Anonymous statistics (only if you say yes)
At the start we ask whether you want to share anonymous statistics: the choice is not pre-selected and you can change it any time in the app's settings. If you say yes we send usage events (screens opened, stories played and how far, walk length, GPS quality and battery use in ranges, ratings) and, when the guide can't answer, the text of the question with obvious personal details removed: it helps us improve the content, only the people who edit content can see it, and we delete it after 12 months. Events are tied to a random installation ID you can reset. No advertising identifiers, no tracking across apps or websites, never coordinates or routes, and we don't store your IP address. We keep them for 13 months. Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time.
Whatever you choose here, we always count your minutes of conversation with the guide and your purchases, linked to your anonymous account: they make the pass and its limits work (see B3), not statistics. Legal basis: performance of the service (Art. 6(1)(b)).
B5. Crash reports
If the app crashes, or hits an error it can handle, we send a technical report to Firebase Crashlytics (Google): phone model, iOS version and where in the code the error happened. The report does not include your location. It is on by default and you can turn it off in settings. Legal basis: our legitimate interest in an app that works (Art. 6(1)(f)).
B6. Feedback, support and purchases
- What you write to us from the app is used only to reply and to improve Aneddo. The "tester code" is optional: if you enter it, it links your feedback to your installation's anonymous statistics.
- The beta is free. When passes arrive, in-app purchases will go through Apple (verified with RevenueCat) and website purchases through Stripe: we will only receive what we need to know whether your pass is active, plus invoice details. We never see your card details.
B7. App providers
Besides Cloudflare (network and city-pack delivery): Google (Firebase Authentication, App Check, Crashlytics, Gemini API, Places API), Railway (app server and database, in the EU), Apple (on-device speech recognition, Apple Maps, purchases), Wikimedia (Wikipedia, Wikidata), Resend (service emails, in the EU) and, once passes exist, RevenueCat and Stripe. When data leaves the EU the transfer is covered by the EU-US Data Privacy Framework or the Standard Contractual Clauses.
B8. Retention, deletion and age
- Anonymous statistics and usage data: 13 months. Unanswered questions: 12 months. Account and pass: until you delete your account. Billing data: 10 years, by law.
- In the app's settings you can download a copy of your data and delete your account with the data linked to it. You can also write to ciao@aneddo.com.
- Like the waitlist, the app beta is for adults only.
Protek di Davide Talevi · Via Marinuccia 13, 60024 Filottrano (AN), Italy · VAT no. IT02033660438 · REA AN-265397 · PEC protek.talevi@pec.it · ciao@aneddo.com