WayfindWayfind

Privacy Policy

Last updated: April 2025

Wayfind ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data when you use the Wayfind mobile application and website (collectively, the "Service").

By using Wayfind, you agree to the practices described in this policy. If you do not agree, please stop using the Service.

1. Information We Collect

We collect the following categories of information:

  • Account information: Your name and email address when you create an account (via email/password, Google Sign-In, or Apple Sign-In).
  • Trip and itinerary data: Destinations, activities, dates, bookings, budgets, and any notes you add to your trips.
  • Booking emails: If you forward booking confirmation emails to Wayfind, we process the text content to extract trip information. We do not store raw emails beyond the extraction process.
  • Location data: With your permission, we may access approximate location to show nearby places on the map. This is optional and not stored on our servers.
  • Device information: Device token for push notifications (optional; only collected if you grant notification permission).
  • Usage data: Anonymized crash reports and performance data to improve the app.

2. How We Use Your Information

  • To operate and improve the Wayfind Service.
  • To generate AI-powered itinerary suggestions based on your trip details.
  • To send you account-related emails (verification, password reset).
  • To send push notifications you have opted into.
  • To process and organize booking information you share with us.
  • To respond to your support requests.

We do not sell your personal data to any third parties.

3. Third-Party Services

We use the following third-party services that may process your data:

  • Supabase — our backend infrastructure for authentication, database, and file storage. Data is stored in the EU (or the region you select). Supabase Privacy Policy.
  • OpenAI — trip names, destination, dates, and activity details are sent to OpenAI to generate itinerary suggestions. OpenAI processes this data under its API usage policy and does not use API data to train models. OpenAI Privacy Policy.
  • Google Places API — destination names and search queries are sent to Google to resolve place details and map coordinates. Google Privacy Policy.
  • Expo / EAS — used to deliver push notifications. Device tokens are shared with Expo for notification delivery. Expo Privacy Policy.
  • Apple / Google Sign-In — if you sign in using Apple or Google, your authentication is handled by those platforms under their respective privacy policies.

4. Data Retention

We retain your account and trip data for as long as your account is active. If you delete your account, all associated data — including trips, activities, bookings, and profile information — is permanently deleted from our systems within 30 days.

5. Account Deletion

You can permanently delete your Wayfind account at any time from within the app: go to Profile → Settings → Delete Account. Deletion is irreversible and removes all your data from our servers.

6. Security

All data is transmitted over HTTPS (TLS). Passwords are never stored in plaintext — authentication is managed by Supabase Auth. We follow industry-standard security practices to protect your information.

7. Children's Privacy

Wayfind is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to certain processing of your data.
  • Data portability.

To exercise any of these rights, contact us at privacy@wayfind.city.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, please reach out: