Privacy — Racconto
Last updated 14 October 2026
The principle
Racconto tells the story of the places you drive past. No account, no ads, no tracking, no usage analytics. What leaves your iPhone is used only to pick the next place and write its story. Nothing we receive says who you are, and our server keeps no request log.
What the app keeps
Racconto records what you put into it:
- your log, your saved stories and your voice notes
- your settings: topics, language, length, tone, radius
- your prepared trips, ready to play offline
- the results of your road quiz games
Where it lives
On your iPhone. None of it is sent. A convoy and a trip shared with a circle go through iCloud (CloudKit), between the members of the circle you choose in Cerchia, in a container that belongs to Racconto; we have no access to it.
What it asks permission for
Every one of these is optional. Refuse any of them and the rest of the app keeps working.
- Location, Always
- To keep telling stories with the screen locked and in CarPlay. The distance you hear is computed on the iPhone with your exact position; what is sent is rounded (see below).
- Microphone
- For voice notes, which stay on the iPhone.
- Notifications
- To tell you a prepared trip is ready.
- Local network
- To play the road quiz from iPhone to iPhone in the car when there is no network.
What leaves the device
The app has no analytics, no crash reporting, no advertising and no third-party kit of any kind. What it does send, it sends only to the services below, and only for what you asked it to do:
- Our server, racconto.nidello.ca: the next place
- Only when you use it: your location rounded to about 500 metres, your speed and heading, to pick a place ahead of you; your story choices (topics, language, length, tone) and the list of places already heard, so they are not repeated; for a prepared trip, the simplified route and the names of the stops; and, if you allow notifications, the iPhone’s notification token, used only to tell you the trip is ready. The server is hosted by Cloudflare and keeps no request log: the location it receives leaves no trace.
- Proof that the request comes from the app
- To prevent abuse, every request is signed by a key created in the iPhone’s secure chip and certified by Apple (App Attest). The server keeps the public part of that key and, for two days, the number of stories requested that day. This key does not identify you and is used for nothing else.
- Writing the stories: Claude (Anthropic)
- Stories are written by Claude, from our server, from public texts about the place: Wikipedia, Wikivoyage and open heritage registers (Quebec, Canada, United States, France, New Zealand). Neither your location nor anything about you is sent to Anthropic: only the place’s name and those texts. A story already written is reused for everyone.
- Votes
- If you turn it on (Settings), your vote on a story (Good, Meh, Too long, Inaccurate) is sent with the story’s identifier only, nothing about you.
- Road quiz
- The first name and avatar you choose, your answers and the scores live in the game, on the server, for the length of the game; everything is erased 15 minutes after it ends, and at the latest 16 hours after it starts. Without a network, the game is played from iPhone to iPhone in the car, with no server. The App Clip (join without installing the app) works the same way.
- Convoy
- Each car’s location is shared only during a convoy, with your consent for each convoy, encrypted, through iCloud between the members of the circle, and erased at the end. It does not go through our server.
- Web link of a trip
- If you create a trip’s web page, the trip is kept encrypted for 7 days; the key exists only in the link you share, so we cannot read it.
- Connector for Claude (MCP)
- If you add Racconto as a connector in Claude (racconto.nidello.ca/mcp), Claude, under your Anthropic account, writes the stories for your trip; Racconto only checks them and prepares the import link. A trip Claude submits for checking is not kept. For the import link, the trip is kept encrypted for 7 days, and the key exists only in the link. A suggestion sent with the “request_feature” tool is kept for 90 days, without the trip and without anything that identifies you.
- The App Store
- The subscription and the passes go through Apple. We are told a sale happened; we receive no payment details and are never told who you are.
Only what is listed above under our server reaches us, and none of it says who you are. Anthropic receives the name of a place and public texts, never anything about you.
Your data is yours
Clearing the log in Racconto erases what is on the iPhone. Delete the app and what was only on the device is gone. The server keeps nothing that identifies you, so there is nothing of yours for us to recover or hand over.
Children
Racconto is not directed at children. A first name chosen for a quiz game is erased with the game, and nothing we receive says who anyone is.
Changes to this page
If the app ever starts doing something this page does not describe, this page changes first. The date at the top says when it last did.
Your rights
Quebec’s Law 25 and similar laws elsewhere give you the right to access, correct and delete the personal information a business holds about you. Our server keeps nothing that identifies you; your log is on your iPhone, where you can read and delete all of it yourself. Any question: [email protected].
Contact
Nidello — Canada — [email protected]