MAPOKI

Privacy Policy

Updated September 30, 2026

This policy covers the Mapoki tourist app and Mapoki Colaborador, operated under the Kernan Tech brand and published on the App Store by Segu Tecnologia LTDA. Contact Mapoki at Kernan Tech at Kernan.tech, call +55 (21) 99961-2424, or email [email protected].

Browsing and local information

You can explore the tourist map and plan activities without entering a name or signing in. Preferences, saved activities and local plans are stored on your device. The collaborator demonstration uses fictional requests kept only in memory while the demo is open.

Trip requests and conversations

If you choose to send an itinerary request, Mapoki stores your display name, selected places and destination coordinates, dates, party size, language and any notes you provide. The request opens a conversation only after a guide accepts it. It does not require your phone number or email, set a price, reserve guide dates or confirm a booking. A private device-session identifier lets you access your requests and conversations. Please do not include sensitive information in notes or messages.

Conversation messages, sender names, timestamps, shared places, itinerary revisions, invitations and participant identifiers are stored so conversation members can use the shared discussion. An invited traveler who opens a valid invitation link can join and see the conversation. Share invitation links only with people you want to include. Guides, tourists and invited travelers can see and contribute to their conversation.

Translation sends the message you select to Google Cloud Translation. When you explicitly ask Mapoki for suggestions, recent conversation messages and itinerary details are processed by Google Cloud Vertex AI to generate a reply. These services process content to provide the feature you requested.

You can report a participant or message and block a participant's chat messages and notifications for yourself. A report stores the reporter and reported participant identifiers, selected reason, optional details and limited message evidence for support review. If moderation email delivery is configured, a plain-text notification with limited report details is sent to [email protected] through SendGrid; it does not include the full conversation history. If email delivery is unavailable, the report remains stored and the app tells you how to contact support with its report code. Blocking hides that participant's chat messages and suppresses their notifications for you; shared itinerary content remains visible to conversation members.

Guide sign-in

Guide accounts are provisioned by the Mapoki team after approval. An approved guide may sign in with a private access code or, if Mapoki has provisioned a phone number for that account, with an SMS verification code. The enrolled guide phone number is stored with the authorized guide record and sent to Firebase Authentication, a Google service, to deliver and verify SMS codes. Firebase acts as an authentication provider. The phone number is linked to the guide account and used for sign-in, not advertising. The local review demo uses fictional data on the device and does not call the Mapoki API or Firebase or send SMS.

Approved collaborators can review pending itinerary requests and start a conversation. We store account/session identifiers, display names, Community Guidelines acceptance records and response history, including timestamps. Accepting a conversation means the guide is willing to talk; it is not a price agreement, booking or date reservation.

Purpose and sharing

We use this information to operate itinerary requests and conversations, authenticate access, provide requested translation and assistant features, review safety reports, offer support and protect the service. Pending request details are shared with Mapoki's approved collaborator pool so guides can decide whether to talk. After a guide accepts, conversation content is available to its members. Operational data is hosted using Google Cloud services in São Paulo, Brazil. Google Cloud Translation and Vertex AI process content when you request those features, Firebase Authentication provides guide SMS sign-in, and SendGrid processes limited report-notification email when that integration is configured. Report emails go to [email protected] and exclude full conversation history. If email delivery is unavailable, reports remain stored and the app directs the reporting user to contact support with a report code. If you opt in to push notifications, Mapoki stores the device push token to send generic request and conversation alerts; alerts do not include message text. You can disable notifications in device settings. We do not sell personal data or use advertising, cross-app tracking or third-party analytics SDKs in these app versions.

GPS and external services

Optional GPS in the tourist app is processed on the device to show your position and nearby places; your current GPS position is not sent to Mapoki's itinerary service. Coordinates included in a trip request identify the selected catalog destinations. If you open Apple Maps, Google Maps, a source website or your email app, that service operates under its own privacy policy.

Retention and your choices

We retain request, conversation, itinerary-revision and response records as needed to provide the service, resolve support issues, prevent misuse and meet applicable obligations. Invitation links expire after seven days. Device sessions expire after 90 days. Session expiry or uninstalling an app does not automatically delete server-side requests, conversations or collaborator records, and secure device storage may survive reinstallation. Backup copies follow the infrastructure backup retention cycle.

For access, correction, deletion of requests or conversations, or closure of a collaborator account, email [email protected]. Include only enough information to identify the request or account; do not send your access code. We may ask for proportionate verification before disclosing or deleting records. You can stop submitting requests, sign out of the collaborator app, and disable location access in device settings.

Support, security and children

If you contact support, we receive the email address and information you choose to send and use them to respond. The service uses HTTPS and device-specific sessions, and guide access is operator-approved. Mapoki's connected request service is intended for adults arranging travel; do not submit children's personal information. Mapoki Colaborador is intended for adult guides and service providers.

Changes

We update this policy when the service or relevant requirements change. The date above identifies the current version.