This Policy explains how Wayfinder handles personal data when you use its websites, apps and related services. Wayfinder is designed around private travel history and deliberate sharing: keeping data in your account does not make it public.
1. Data we collect
- Account data: your name, email address, verification status, sign-in methods and account-security events.
- Travel data: preferences, journeys, plans, saved places, visits, accommodation decisions, time zones and the edits you make.
- Location data: only when you enable a location feature. Depending on the feature, this may include bounded observations, confirmed visits or journey breadcrumbs. Separate location purposes require separate controls.
- Media data: local photo or video metadata used on your device, counts associated with visits, supported external-media links, and sanitized copies you explicitly select for upload. Wayfinder does not upload an entire photo library.
- Device and usage data: device identifiers used for syncing, sessions, app version, security logs, diagnostics and interaction events needed to operate and improve the service.
- Communications and sharing data: notifications, invitation state, selected audiences, publication settings and support requests. Messaging content will be covered here before any messaging feature launches.
2. How we use data
We use data to create and secure accounts; generate and edit travel plans; synchronise journeys and saved places; provide maps, routes, reminders and timelines; process imports; create content you choose to share; enforce privacy and audience rules; prevent abuse; diagnose failures; comply with law; and improve Wayfinder.
Where automated or AI-assisted planning is used, we send only the information needed for the requested task. You should not place secrets or highly sensitive personal information in free-text planning prompts.
3. Location and journey privacy
Location history, accommodation handling, journey breadcrumbs, live sharing and completed journey publication are separate capabilities. Enabling one does not automatically enable the others. Where breadcrumb capture is offered, it is journey-specific and off by default.
Private source history remains separate from a share edition. Before sharing, you can choose exact, approximate, custom or excluded locations where supported. Protective controls may pause or remove accommodation, overnight stays, related media, timeline entries and route clues from shared views.
4. When data is shared
We share data with service providers that help operate Wayfinder, such as hosting, email, maps, routing, identity, notifications, diagnostics, media processing and AI providers. They receive only data needed for their role and are required to protect it.
We also share content with the people or public audience you select, when required by law, or when necessary to protect rights and safety. We do not sell personal data. We do not use precise breadcrumbs, accommodation, private relationships, private media or exact live location for advertising targeting.
5. External services and links
When you connect, import or display content from another service, that provider may receive identifiers or request data under its own privacy policy. Wayfinder uses supported links, embeds and APIs; it does not use your authenticated cookies to scrape third-party accounts.
6. Retention
We keep account and travel data while your account is active or until you delete it, subject to feature-specific controls. Security and audit records may be kept longer where necessary to protect the service or meet legal obligations. Journey breadcrumbs and uploaded media use bounded or user-controlled retention where provided. Backups expire on a rolling schedule.
7. Security
We use access controls, encryption in transit, protected credential storage, passkeys, two-factor authentication, session controls and audited service boundaries. No system is completely secure, so you should protect your devices and promptly report suspected account compromise.
8. Your choices and rights
You can manage sign-in methods, sessions, travel preferences, location capabilities, sharing audiences and individual content through Wayfinder’s controls as those features become available. You may request access, correction, export, deletion, restriction or objection where applicable under local law. Some records may be retained when legally required or necessary for security and dispute resolution.
9. International processing
Wayfinder and its providers may process data outside your country. Where required, appropriate contractual or legal safeguards will be used for international transfers.
10. Children
Wayfinder is not directed to children under 13. Where local law sets a higher minimum age for independent consent, a parent or legal guardian must authorise use. If we learn that personal data was collected from a child without required permission, we will take reasonable steps to delete it.
11. Changes to this Policy
We may update this Policy as Wayfinder adds features or legal requirements change. We will provide reasonable notice of material changes through the service or your account email and will request fresh consent where required.
12. Contact
Privacy questions and rights requests can be submitted through the support or privacy contact made available in Wayfinder. We may need to verify your identity before completing a request.