Privacy policy

Tour Body is operated by foreign body Inc. This notice covers tour.foreignbody.app and the Tour Body iOS app. The common foreign body sign-in account may also be used by other services; tour data and permissions are managed separately.

We process account identifiers, sign-in email, profile name, optional photo and contact details; tours, events, travel, invitations, documents and notes you provide; and technical records needed for authentication, delivery and troubleshooting. Your sign-in email is shown in your own account menu and is not included in name-search results.

When tour members look for people to invite, your name and avatar can appear in team search. Turn off Show my name in team search in Settings to leave name search. People can still invite you by your exact email.

Tour members see information permitted by their role. Promoters access the event and fields shared with them. Invitations, documents and optional Network Body sharing have their own access scope. Upload another person’s private documents only if you have permission. An authorised recipient may download shared documents.

Passports, visas, residence permits and other files in My travel documents are private by default. You can open your own documents from your profile and your tours without sharing them. If you choose to share, only the named manager in the selected tour gets access until the expiry you set. Other artists and promoters do not get access. You can stop sharing sooner. Ending access cannot recall a copy the recipient has already downloaded.

In the iPhone app, originals you own and authorised tour files you open can be saved on that device for offline use. Private documents shared with a manager require an online access check and are not kept for offline use by that manager. Logging out clears the app’s saved copies; it does not delete the originals stored in your account.

Location sharing is optional and runs only while you turn it on: for 15 minutes, 1 or 2 hours, or until you stop it. While it is on, your position and the time it was last received are shared with the tour’s crew (artists and managers). In the iPhone app, sharing continues in the background until you stop it or the time you chose ends. In a browser, it stops when you leave or hide the page.

The direction you are facing on the crew map is worked out on your device from its compass. It is shown only on your own map and is never sent to us or to anyone else. Directions to a crew member open Google Maps with that member’s last shared position.

Push notifications and Live Activities on the Lock Screen use device and activity tokens to deliver updates such as your next schedule item and flight. You can end a Live Activity on the Lock Screen or turn Live Activities off in iOS Settings. Saved schedules and documents stay on the device for offline use until removed or cleaned up during logout. You can read an itinerary without granting location or notification permission.

Adding a PDF or photo with Save file or Save document only stores the original. It does not run AI analysis or send the file to Anthropic. AI analysis is a separate action you choose.

If you use AI itinerary or document analysis (part of Premium), the original file is sent to Anthropic to extract a draft. Personal information in the file may be transferred too. Removing sensitive fields from the result does not remove them from the original before transfer. Review the draft before saving, or enter the itinerary manually. Supabase and Vercel provide data/hosting, Apple provides Sign in with Apple and delivers notifications, Resend delivers emails, and enabled flight/maps providers process information needed for the requested lookup. Taxi and map apps have their own privacy terms.

When you connect Google Drive or Sheets for documents or a guest list, the app accesses the resources you authorise for that feature. Revoke access in your Google Account settings. Google API data is used for the requested service, not advertising or unrelated profiling. Use and transfer follow the Google API Services User Data Policy, including Limited Use requirements.

If you subscribe to Premium, we keep what is needed to provide it and to answer billing questions: the plan (monthly or yearly), the renewal or end date and whether it renews, and either the App Store transaction and original transaction IDs (including whether it was an Apple test purchase) or the web payment record. A purchase in the iPhone app is linked to your account by an identifier the app sends with it, and Apple tells us about renewals, cancellations and refunds so your plan stays correct.

Apple processes App Store payments and LemonSqueezy processes USD web payments. Where KRW subscriptions are enabled and you choose that option, Toss Payments processes card registration and recurring payments. Card information is entered in the payment provider’s registration screen; we do not store your full card number or card security code. Purchase records are kept for as long as applicable law requires.

For a Toss Payments subscription, we process the customer reference, billing authorisation token, masked card information, subscription interval and status, recurring-payment consent record and terms version, renewal and end dates, payment amounts and results, and receipt references. We exchange the information needed with Toss Payments to register or replace your card, collect agreed recurring payments, manage cancellation and respond to billing or refund requests. Billing authorisation tokens are handled on the server, not shown in your account. Only the payment information needed for these purposes is used; choosing KRW billing does not share tour documents with Toss Payments.

When you decline an invitation and block its sender, we keep that block so invitations from tours the same person owns no longer reach you. The sender is not told. You can undo it in Settings → Blocked people. A report keeps the item, the reason and an optional note of up to 500 characters, and sends the item’s ID, the reason and the note to club@foreignbody.life for review. Leaving a tour removes your membership and stops your location sharing for that tour.

You can delete your account in the app: on iPhone, go to Account → Delete account; on the web, go to Settings → Delete account. The app shows what will happen before you confirm, and asks you to sign in again if your last sign-in was more than 10 minutes ago.

Before deleting, cancel a Toss KRW subscription in Settings > Premium, an App Store subscription in Settings > Apple ID > Subscriptions, or a USD subscription through its receipt email link. Removing only Tour Body while keeping your shared foreign body account may leave Toss renewal active. Account deletion alone does not confirm cancellation across payment providers; check each subscription’s cancellation status.

Deletion removes your Tour Body profile, tour memberships, invitations sent to you, location sharing history, registered devices with their notification and Live Activity tokens, crew contact details, guide progress, import and routing drafts, and the Network Body shares you created. A tour you own moves to the member who joined it first among those who can edit it. If nobody else can edit it, the tour and its files are deleted. Announcements and other shared records in a tour that continues may stay with the team without your name.

Original PDFs and photos you added with Save file or Save document are linked to your account and removed when you delete it, including files attached to a continuing tour. Your private travel documents and the access you granted to managers are also removed. Private documents are not transferred with a tour to its next owner.

The foreign body account you sign in with is deleted too, unless another foreign body app still uses it. In that case only your Tour Body data is deleted and the central account stays for that app. Accounts linked with another sign-in, and accounts with administrator access or older payment records, cannot be deleted in the app; contact us and we will delete them for you.

Your Tour Body data is deleted right away. The central account is deleted at the same time; if that has to be finished by hand, you are signed out everywhere and we complete it within 30 days. If you signed in with Apple on iPhone, the app also asks Apple to revoke Tour Body’s Sign in with Apple authorization. You can check this in your Apple Account settings under Sign in with Apple.

After deletion we keep only a count of this month’s completed AI analyses, stored under a one-way hash with no content so that deleting cannot reset AI usage limits, and records the law requires us to keep, such as purchase records.

Information is retained while needed for the service, authorised shared records or legal obligations. You can also contact club@foreignbody.life to request access, correction or deletion. We verify the requesting account and explain effects on shared tours or other foreign body services before deleting anything. Requests by email are completed within 30 days; any legally required retention is explained. Logging out does not delete an account. Deleting a shared record cannot recall copies already downloaded by someone else.

The service uses encrypted network connections, authentication and access checks. Essential cookies and device storage support sign-in, language and offline use. We do not sell personal information. Contact club@foreignbody.life for privacy concerns, or to report unwanted invitations or shared content if you cannot use Report in the app. Do not include passwords, sign-in codes or original identity documents in your message.