StoryDrive plays audio stories about places as you reach them. To do that it needs your location while a journey is running. This page explains what we collect, why, who we share it with, how long we keep it and the rights you have under the EU General Data Protection Regulation (GDPR).
Who is responsible
The data controller is Leanscape FZ-LLC (Licence No. FDRK0745), Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. Contact us about anything on this page at enquiry@leanscape.io. We apply the GDPR to everyone who uses StoryDrive from the European Economic Area or the UK.
What we collect
- Location during a journey. Your phone's GPS position is used on your device to decide when a story should play. While a journey is running, the app also sends playback events (story started, skipped, finished) with the position and speed at that moment, so we can check stories trigger in the right place.
- Journeys you plan. Start, destination and stops you enter, the planned route and the stories generated for it.
- Account details if you sign in: your email address, plus the journeys, stories you save and ratings you give.
- Usage and abuse-prevention data. App events (for example "trip started"), a random identifier stored in your browser, and a one-way salted hash of your IP address used to enforce daily limits. We never store your raw IP address for this.
- Passes you buy: which pass, when, the amount and Stripe's reference for the payment, kept for as long as tax and accounting law requires.
- Requests you send us, such as a journey request with an optional contact email.
Why we use it (legal basis)
- To provide the service you ask for — planning journeys and playing stories (contract).
- To keep the service working, measure quality, fix triggering problems and prevent abuse and runaway costs (legitimate interests).
- To reply to you when you contact us (legitimate interests).
We do not sell your data and we do not use it for advertising.
Who we share it with
We use these providers to run StoryDrive. Each processes data only on our instructions:
- Lovable and Supabase — hosting, database, sign-in and email.
- Mapbox — maps, place search and route planning (place names and coordinates).
- Google (Gemini) and OpenAI via the Lovable AI gateway, and ElevenLabs — writing and voicing stories. They receive place information and any text or images you submit to plan a journey, not your identity or location history.
- Unsplash and Wikimedia — photos and source material.
- Stripe — payments for passes. Stripe collects your card details directly; we receive only the purchase record (what you bought, when, and the amount).
- Sentry — crash and error reports (what failed, browser and app version), without your account identity, IP address or location.
Some providers are outside the European Economic Area. Where they are, transfers rely on the European Commission's adequacy decisions (including the EU–US Data Privacy Framework) or Standard Contractual Clauses.
Shared journey links
When you share a journey, anyone with the link can see its start and destination names, the route and its stories. If your journey starts at your home, consider starting it from a nearby landmark before you share it.
How long we keep it
- Playback traces with location: deleted after 30 days.
- Location on app events: removed after 30 days; the anonymous event itself is kept.
- Hashed network identifiers used for daily limits: removed after 7 days.
- Account data, journeys, saves and ratings: until you delete them or your account.
Your rights
You can access, correct, export or delete your data, object to or restrict how we use it, and withdraw consent at any time. If you are signed in, Settings → Your data lets you download everything we hold against your account or delete the account and its data immediately. For anything else, email enquiry@leanscape.io. You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt), or the authority where you live.
Storage on your device
StoryDrive stores settings, a random identifier and downloaded story audio in your browser so the app works and journeys keep playing without signal. It does not use advertising or cross-site tracking cookies.
Children
StoryDrive is not directed at children under 16, and we do not knowingly collect their data.
Changes
If we change this policy we will update the date at the top of this page.