Foundations of Tourism Institute ("FoTI", "we", "us") operates the FoTI Tours mobile application (the "App"). This policy explains what information we collect, how we use it, and your rights. Questions: hello@foundationsoftourism.com.
Information we collect
You provide:
- Account details — name, email address, phone number, and password when you register.
- Role information — for students: university/institution and student ID. For tour companies and accommodation providers: company or property details, registration information, licences, verification documents and payout details.
- Booking and payment details — the listing, dates, guest count, amount, payment status, transaction reference and, for M-PESA, the phone number used. Card numbers, wallet credentials and M-PESA PINs are entered on Paystack's hosted checkout and are not collected or stored by FoTI.
- Content — tour or property photos, descriptions, reviews and messages you submit.
Collected automatically:
- Location (approximate and precise) — only when you choose to set a tour pickup point using your device location, and only with your permission. You can type a pickup point instead and can revoke permission in device settings.
- App activity — bookings, reviews, and actions you take in the App.
How we use your information
- To create and manage your account and verify your identity (one-time email codes).
- To process tour and accommodation bookings through Paystack-hosted card, M-PESA and supported digital-wallet payment methods.
- To pass an optional pickup point to the tour provider you booked.
- To enable reviews, messaging, listing management and supplier verification.
- To keep the service secure and comply with the law.
How we share information
We do not sell your personal data. We share it only with:
- Paystack and its payment partners — to host checkout, process card, M-PESA and supported digital-wallet payments, prevent fraud and confirm payment status.
- Safaricom (M-PESA) — when you choose M-PESA as the payment method.
- Google Firebase — for authentication and data storage.
- Resend — to send verification and account emails.
- Tour guides, tour companies and accommodation providers you book with receive the booking details needed to host you.
- Authorities, where required by law.
Data storage and security
Your data is stored with Google Firebase and transmitted over encrypted (HTTPS) connections. We take reasonable measures to protect it, though no method of transmission is completely secure.
Your rights
You can access or update your profile in the App. To request deletion of your account and associated data, email hello@foundationsoftourism.com and we will process your request. You may disable location access at any time in your device settings.
Children
FoTI Tours is intended for users aged 18 and older and is not directed at children.
Changes to this policy
We may update this policy from time to time. The "Last updated" date reflects the latest version.
Contact
Foundations of Tourism Institute
Email: hello@foundationsoftourism.com
Website: https://foundationsoftourism.com