Last Updated: August 17, 2026
GALAXY TOURS, LLC ("Galaxy Tours," "we," "us," or "our") operates the Galaxy Tours mobile application (the "App"), available on Android and iOS worldwide. This Privacy Policy explains what information the App does and does not collect, how it is used, and your rights regarding it.
By downloading, accessing, or using the App, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the App.
Galaxy Tours is an offline reference guide app for niche film-tourism sites in Tunisia. Access to the App's content library is unlocked using a one-time passcode issued at the time of a Galaxy Tours booking. The App does not require you to create an account, and we do not knowingly collect personal information such as your name, email address, phone number, contacts, precise location, camera/microphone access, or payment details.
The App does use Firebase (a Google service) solely to generate and validate access passcodes, which involves limited automatic technical data being processed as described in Section 3 below.
The App does not:
Require account creation, sign-up, or login credentials
Collect your name, email address, phone number, or mailing address
Access your contacts, camera, microphone, or photo library
Track your precise (GPS) location
Collect or process payment or billing information (all Galaxy Tours bookings and payments are handled separately, outside the App, through our tour booking process)
Contain advertising or ad-tracking SDKs
Contain in-app purchases or subscriptions
Knowingly collect information from anyone under the age of 13 (see Section 7)
Because the App does not maintain user accounts or collect personal information, there is no in-app or personal data profile to access, correct, or delete.
To provide the passcode unlock feature, the App uses Firebase (provided by Google LLC) to generate and validate the tour-specific access passcodes issued to guests at booking.
As with most apps built on Firebase, limited technical and diagnostic data may be automatically processed as part of this functionality and for basic security/fraud-prevention purposes, which may include:
Device and app instance identifiers (e.g., Firebase installation ID)
IP address (used transiently to process the passcode request)
App version, operating system, and general device/technical information
Timestamps of passcode entry and validation attempts
This data is processed by Firebase infrastructure to confirm that a passcode is valid and has not expired, and is not used by Galaxy Tours to identify, profile, or track individual users. We do not combine this technical data with any personal identity.
Firebase's own data practices are governed by Google's Privacy Policy: https://policies.google.com/privacy
Each Galaxy Tours booking includes a one-time passcode that unlocks the App's full content library.
Passcodes are valid for 14 days from a start date set and controlled by Galaxy Tours (not the user).
No user account, profile, or personally identifying registration is required to redeem a passcode.
Passcode validation is handled via Firebase as described in Section 3.
Once unlocked, the App's guide content (text, maps, annotated visuals) is available for offline use. This content is proprietary to Galaxy Tours and does not itself transmit, track, or report your usage, location, or activity back to us.
We do not sell, rent, or trade any data. The only third party involved in the App's functioning is Google Firebase, which processes the limited technical data described in Section 3 solely to operate the passcode system. We may disclose information if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Galaxy Tours, our users, or others.
The App is not directed at, marketed to, or intended for use by children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us at the email below so we can address it.
The App is available worldwide. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the limited technical data described in Section 3 is processed on the legal basis of our legitimate interest in operating and securing the App's passcode functionality. Because we do not collect personal data beyond this, no international personal data transfer of identifying information occurs through the App itself.
Under the California Consumer Privacy Act (as amended by the CPRA), California residents have rights including the right to know, delete, and opt out of the sale/sharing of personal information. Galaxy Tours does not sell or share personal information, and does not collect personal information as defined under the CCPA beyond the limited automatic technical data described in Section 3, which is not used for cross-context behavioral advertising. California residents may still contact us with any privacy questions using the details in Section 12.
We aim to handle data responsibly in line with applicable data protection laws in the regions where the App is used, including in Tunisia and other jurisdictions where our tours operate. If your local law grants you specific rights regarding technical data described in this policy, you may contact us to make a request.
We take reasonable technical and organizational measures to protect the limited technical data processed through the App, including relying on Firebase's built-in security infrastructure. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
We do not retain personal user data, as none is collected. Technical/diagnostic data processed via Firebase for passcode validation is retained only as long as necessary for security and service operation, consistent with Firebase's standard data retention practices.
This Privacy Policy is intended to align with:
Google Play's Developer Program Policies and Data Safety requirements
Apple App Store Review Guidelines and App Privacy ("nutrition label") requirements
The General Data Protection Regulation (GDPR)
The California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA)
We will update our respective app store data safety/privacy disclosures to reflect the practices described in this policy.
We may update this Privacy Policy from time to time to reflect changes in the App, our practices, or legal requirements. The "Last Updated" date at the top of this page will reflect the most recent revision. Continued use of the App after changes take effect constitutes acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:
GALAXY TOURS, LLC Email: galaxytoursapp@gmail.com