Happy Guide is made by TourDash OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia. We are the company behind TourDash, the operations tool that walking tour companies use to run their teams. This page explains what personal data the Happy Guide app and this website handle, why, where it is kept, and what you can ask of us.
1. Who this covers
Three groups of people come into contact with Happy Guide:
- Guides who use the app. Your account is created by the tour operator you work with, on TourDash.
- Travelers whose bookings appear in the app because they booked a tour with that operator.
- Visitors to myhappy.guide.
2. What the app handles
Your account
Your tour operator creates your account and gives us your name, email address, role and company. To sign in, you enter that email and we send a one-time code to it. The app keeps a session token on your phone so you stay signed in. There is no password and no sign-up form.
Your work
The app shows the tours assigned to you and your company's schedule as far as your operator allows. When you check a traveler in, we record the booking, the number of adults, children and infants who came, the time, and that you were the one who recorded it. Your reports screen is built from those check-ins. As the app grows it will also handle your availability, shift cover requests, and the content of your guide page, such as places, tips and photos. Each of those is data you enter yourself, stored with your operator's other TourDash data.
Traveler details you see
For each booking the app can show the traveler's name, booking reference, party size, booking platform, notes, and, where your operator permits it, phone number and email address. Operators can hide phone numbers from guides per city. This data is the operator's, shared with you so you can run the tour. Use it for the tour and for nothing else.
Device data
- Motion sensor. The app reads the phone's orientation so the schedule can turn with the device. Readings are processed on the phone in the moment and are neither stored nor sent anywhere.
- Local storage. The session token is stored on the device. The app may also cache your schedule and check-ins so it keeps working where there is no signal. Signing out removes the session, and uninstalling removes all local data.
- Connection data. When the app talks to our servers, they receive your IP address and standard request details such as the time of the request and the app version. These are kept in short-lived technical logs.
- App store data. Google Play and the Apple App Store collect install, crash and performance data under their own privacy policies. We see it only in aggregate.
What the app does not do
The app shows no ads and contains no advertising or analytics trackers. It does not track your location, and it does not access your contacts, photos, camera or microphone. If a future version needs a permission, for example the camera to scan a code or notifications for schedule changes, the app will ask you at that moment and this page will be updated first.
3. Why, and on what basis
| What we do | Why | Legal basis (GDPR) |
|---|---|---|
| Sign you in and keep your session | So the app can show you your own work | Performance of the contract between your operator and us, Art. 6(1)(b), and our legitimate interest in running the service, Art. 6(1)(f) |
| Show tours and traveler bookings | So you can run the tour and welcome the right people | The operator's instructions as data controller, Art. 28. The operator relies on its contract with the traveler, Art. 6(1)(b) |
| Record check-ins and build reports | So the operator knows who came and can pay and plan accordingly | The operator's instructions as data controller, Art. 28 |
| Keep technical logs | To keep the service secure and find faults | Legitimate interest, Art. 6(1)(f) |
| Keep records the law requires | Accounting and legal obligations | Legal obligation, Art. 6(1)(c) |
4. Who is responsible
For your account as a guide, TourDash OÜ is the data controller. For traveler bookings and the check-ins you record, the tour operator is the data controller and we act as its processor. The operator decides what data reaches the app and what you may see. Our GDPR policy describes that arrangement in full, including the subprocessors we use.
5. Where data lives
The app's database and sign-in service run on Supabase, hosted on Amazon Web Services in Frankfurt, Germany. Sign-in codes are delivered by an email service. This website is hosted on Vercel. The app is distributed through Google Play and the Apple App Store. Where a provider processes data outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
We do not sell personal data and do not share it with advertisers.
6. How long we keep it
- Your account data stays for as long as your operator keeps your access active. When it is removed, the account is deleted or made anonymous.
- Check-ins and bookings are part of the operator's records and are kept for as long as the operator instructs us.
- Technical logs are kept for a short period and then deleted.
- Records that accounting or other law requires us to keep are kept for the legally required period.
7. Your rights
Under the GDPR you can ask us to:
- tell you what data we hold about you and give you a copy,
- correct data that is wrong,
- delete your data,
- restrict how we use it,
- hand it over in a portable format,
- stop processing based on legitimate interest.
Write to GDPR@tourdash.app. We reply within one month. Where the operator is the controller, we forward your request to it without delay and help it respond. You can also complain to a supervisory authority, for example the Estonian Data Protection Inspectorate, or the authority in the country where you live.
8. Deleting your data
Guides. Ask your tour manager to remove your access, or email GDPR@tourdash.app with the subject line "Data deletion request". Signing out of the app removes the session from your phone. Uninstalling removes everything the app stored locally.
Travelers. If your booking details reached us through a tour operator, our data deletion page explains what to send us and what happens next.
Some data must stay for a while even after a deletion request, for example accounting records. When that applies we tell you what we are keeping and why.
9. Security
Data travels over encrypted connections and is encrypted at rest. Access rules are enforced on the server so that each guide can only see what their operator permits. Sessions are tied to your device and expire. Keep your phone locked and sign out on a device you no longer use.
10. Children
The app is a work tool for guides and is not directed at anyone under 16. We do not knowingly hold accounts for children. Booking records can mention how many children joined a tour, but not who they are.
11. This website
myhappy.guide is a static site. It sets no cookies, has no accounts and runs no analytics. Our hosting provider receives your IP address and browser details in its request logs. The "find your guide" form opens the guide's page on tourdash.app, where the TourDash policies apply.
12. Changes
When this page changes, the date at the top changes with it. If a change affects what the app collects, we tell guides in the app or through their operator before it takes effect.
13. Contact
TourDash OÜSepapaja tn 6, 15551 Tallinn, Estonia
GDPR@tourdash.app