Privacy policy

Last updated: November 2, 2026.

This policy explains what data of yours we keep when you use andante.uy and the Andante app, what for, who we share it with, how long we keep it and how to ask us to see, correct or delete it. If anything is unclear, write to us at hola@andante.uy.

1. Who is responsible for your data

Fluenta SAS, RUT 220952010019, Punta del Este, Maldonado, Uruguay, is responsible for Andante’s database under Law No. 18,331 on Personal Data Protection. Email for anything about your data: hola@andante.uy.

2. What data we keep and why

We keep the minimum for you to do the walk and for us to know what works. We do not ask for your name, ID, address or date of birth.

  • If you play or walk for free: we ask for no email and no other data of yours.
  • When you reserve a walk: your email (and that of whoever plays with you, if you choose a “De a dos” entry), the walk, the day and time, the language, how many of you there are, the way to pay you chose if the walk has a price, the button that brought you there and where you first came to the site from (see “Where you came from”). To keep the reservation, send you the confirmation and the reminder, give you access to the walk and know which pages and ads work. Whoever you add to a “De a dos” entry gets an email with the reservation, where your email appears as the one who invited them.
  • If you buy a walk with a price: the payment is taken by the provider you choose, Mercado Pago or PayPal, on its own page. We pass it what it needs to charge you: the walk, the amount, the currency and a reference number for the purchase. It tells us the state of the payment (approved, pending, declined or refunded), the amount, the currency and its own transaction number, to confirm the purchase, give you access and be able to refund you. What you enter on its page (card, account, ID) stays with it, under its own policy; we do not keep your card or account details.
  • When you sign in to the app with your email: your email and a 6-digit code we send you, to check the email is yours and show you your walks.
  • When you leave a review: your email, the stars, the text and the language. It is published without your email or name.
  • When you write to us: your email or your Telegram account and what you tell us, to reply.
  • While you browse: our server receives your IP address, your browser and the page you ask for, so the site works and stays secure, and to limit repeated attempts. The measurement tools also see which pages you view and which buttons you tap (point 5).
  • During the walk: when you tap “Empezar”, we note that the walk started, in which language and whether it was downloaded to the phone. As you walk, the app sends a log of what happened on the walk: which part played, pauses, answers to a game’s questions, errors, where you first came from and how far you were from the start, in bands (at the start, under 1 km, 1 to 5 km, or further). It helps us fix and improve the walks. It carries a random number that changes each time you open the walk, not your email, and does not carry your location.
  • If something fails: the type of error, the page where it happened and the browser, to fix it. The error report does not carry your email or what you typed.

Your location. During the walk the app uses your phone’s GPS to play the story in the right place. Your position stays on the phone: we do not keep it on our server or send it to the measurement tools, which receive only the distance to the start in the bands above. One exception: before you start, to draw the way to the starting point, the app sends your position and the start’s once to a walking-route service (OSRM), without your email; as with any connection, that service sees your IP address. You can refuse the location permission, but then the app cannot guide you.

Where you came from. The first time you reach the site from an ad or another site, the browser keeps where you came from: the campaign tags (utm_*), Meta’s click identifier (fbclid), the site that sent you, the page you landed on and the date. It does not keep your name or your email. It reaches our server only with a reservation or with the walk’s log. It also goes in the app’s address (the o parameter) when you install it or move from Instagram or Facebook to your phone’s browser, so the app knows the same.

Emails. We only send those about your reservation or purchase: the confirmation, the reminder the day before, the sign-in code, the email inviting you if someone adds you to their “De a dos” entry and, if you reserved a game that has not opened yet, the notice when it opens. We do not send you advertising.

3. What we use it for

  • To do what you asked for (reservation, access, reservation emails, reviews, replies and, if you pay, the purchase): the data is necessary for our relationship with you (article 9 of Law No. 18,331).
  • To measure the site, the walks and our ads (points 2 and 5): we do it to know what works, and you can opt out as point 5 explains.
  • To meet legal obligations (accounting or consumer protection), when a law requires us to keep something.

4. Who else sees your data

We do not sell your data or hand it over for others to advertise to you. We use these providers:

  • Vultr (server for the site, the app and the database; Santiago, Chile, a US company): the data in point 2.
  • Cloudflare (domain, incoming email and storage of audio, photos and backups; United States and other countries).
  • Google (the mailbox where we read your emails, Google Analytics and fonts; United States).
  • Resend (sending the reservation and code emails; United States): your email and the email’s content.
  • Sentry (technical error reports; United States): technical data about the error, without your email or what you typed.
  • Meta (measuring our ads on Facebook and Instagram; United States): from your browser, which pages you view; when you reserve or buy, also from our server: that there was a reservation or a purchase, the walk, the amount if it has a price, your IP address, your browser and the _fbp and _fbc marks, without your email.
  • Microsoft Clarity (heatmaps and recordings of how the site, not the app, is used; United States). The reservation form, your reservation’s page and the pages to install the app are hidden in the recordings.
  • OpenStreetMap (the route map on the site; United Kingdom and European Union) and OSRM (the walking way to the start; Germany).
  • YouTube (videos in some notes, only if you tap “play”; United States).
  • Telegram (our internal notices of each reservation, each purchase with its amount, each walk started and each review, without your email or name; a review with its text; servers in several countries).
  • Mercado Pago (Uruguay and Argentina) and PayPal (United States and Luxembourg), only if you buy with them: the walk, the amount, the currency and the purchase reference (point 2), and what you enter on their page, under their own policy.

We may have to hand data to a judge or a public body when the law requires it.

Because of these providers, your data is stored and processed outside Uruguay: in Chile, the United States, Europe and other countries. The transfers that make the site, the app and the reservation work are necessary to give you the service you asked for, as article 23 of Law No. 18,331 allows; those for measurement we make to know what works (point 3). We choose providers that commit to protecting the data.

5. Cookies, what stays on your phone, and measurement

The site and the app keep in your browser what they need to work: the language you chose (the andante-lang cookie), where you first came from, the email you signed in to the app with and your session, the walks you opened, where you were in the walk, the walk’s log until it is sent, and the downloaded walks (audio, map and texts) so they work with no signal. That stays on your phone; only the language cookie and the session, to show you your walks, reach our server, along with what point 2 says reaches it.

We also use measurement tools that set their own cookies: Google Analytics (_ga; with Google’s advertising features turned off), the Meta pixel (_fbp, _fbc; to know whether our ads work; Meta also uses that data under its own policy) and Microsoft Clarity (_clck, _clsk; on the site only). We do not send them your email or your location.

You can opt out: delete andante.uy’s cookies or use a tracker blocker (or your browser’s tracking protection), use the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout) or choose which ads you see at facebook.com/adpreferences. The site and the app work the same.

6. How long we keep your data

  • Reservation of a walk you did not pay for: we delete it at the latest 6 months after the reserved day or, for a game not open yet, 6 months after it opens.
  • Purchase and its payments (amount, currency, state and transaction number): we keep them as long as you have the walk and up to 5 years after the last purchase, for legal and accounting obligations.
  • App sign-in code: 15 minutes, or until you use it. Session on your phone: until you tap “Salir”, or a year unused.
  • Review: we keep it as long as the walk is published, or until you ask us to delete it.
  • Walk log and start mark: they carry neither your email nor your name; we keep them as long as they help us improve the walks.
  • Server logs with your IP address: we keep them only as long as they are needed for the site to work and stay secure.
  • Emails you send us: we keep them as long as needed to resolve your query and up to 2 years after.
  • Backups: about a month. What we delete stays in those copies until they are replaced.
  • Google Analytics: 14 months. Meta, Clarity and Sentry, under their own terms.

7. How we protect your data

The connection is always encrypted (HTTPS). The sign-in code, your phone’s session and your reservation’s link are stored only as a fingerprint (hash), from which the original cannot be recovered: not even we can read them. We limit attempts so nobody can guess them. If there is ever an incident affecting your data, we will tell you by email and report it to the Personal Data Regulatory and Control Unit (URCDP).

8. Your rights

Under Law No. 18,331 you have the right to know what data of yours we hold, to correct or update it, to add what is missing and to ask us to delete it, except what a law requires us to keep.

How to ask: write to hola@andante.uy from the email you reserved with, saying what you want. It is free and we reply within 5 business days. To delete the app’s data from your phone, tap “Salir” in Settings and remove Andante from your home screen (or clear the site’s data in your browser).

If you are not satisfied, you can file a complaint with the URCDP (gub.uy/urcdp).

9. Minors

You must be 18 or older to reserve or buy on Andante. Minors can do the walk with an adult, who is the one who reserves and gives their email. If you think a minor gave us their data, write to us and we will delete it.

10. Changes

If we change anything important, we publish it here with the new date and, if it affects data you already gave us, we let you know by email before applying it.