1. Who We Are
Wayfio ("we", "us", "our") operates the Wayfio mobile application (iOS & Android) and web platform at wayfio.com. We are an AI-powered travel planning service that helps travelers create itineraries, connect with other travelers, and explore destinations worldwide.
2. Information We Collect
A. Information You Provide
- Account data: Name, email address, username, profile photo, and bio.
- Travel preferences: Destination interests, travel style (adventure, culture, food, etc.), budget range, and travel frequency — collected during onboarding.
- AI Planner inputs: Prompts, wishes, and trip parameters you provide to the Wayfio AI Trip Planner (e.g. "hidden gems in Kyoto under $1,500").
- User-generated content: Travel stories, posts, photos, comments, and chat messages.
- Payment information: Processed securely by Stripe (web) or Apple/Google via RevenueCat (mobile). We do not store card numbers.
B. Automatically Collected Data
- Location data: Used for the Live Map feature to show nearby travelers and events. Only shared when you opt in.
- Device & usage data: IP address, device type, OS version, app version, features accessed, and session duration.
- Push notification tokens: Used to send trip reminders and social notifications.
C. Third-Party Services
- Google OAuth: If you sign in with Google, we receive your name, email, and profile picture.
- Google Maps & Places API: Used to power destination search, itinerary maps, and place details.
- RevenueCat: Manages mobile subscription state (App Store / Play Store). Shares subscription status with our backend.
- Stripe: Processes web subscription payments. Subject to Stripe's Privacy Policy.
- Google AdMob: Shown to free-tier users. AdMob may collect advertising identifiers per its own policy.
3. How We Use Your Information
- Generate personalized AI trip itineraries based on your preferences and prompts.
- Power the Live Map to show real-time traveler locations (opt-in only).
- Enable group chats, collaborative trip planning, and travel story sharing.
- Process subscription payments and enforce tier-based feature limits.
- Send push notifications for trip updates, social interactions, and reminders.
- Improve our AI models and service quality using anonymized, aggregated data.
4. Data Sharing
We do not sell your personal data. We share data only with:
- Service providers: Stripe, RevenueCat, Google (Maps, OAuth, AdMob) — strictly for service operation.
- Other users: Your public profile, posts, and travel stories are visible to other Wayfio users. Private account settings restrict this.
- Legal requirements: If required by law or to protect the rights and safety of users.
5. Data Retention & Deletion
We retain your data for as long as your account is active. When you delete your account via Profile → Settings → Privacy & Security → Danger Zone → Delete Account, we permanently delete or anonymize your personal data within 30 days. AI prompt history and chat messages are deleted immediately upon account deletion.
6. Your Rights
- Access & portability: Request a copy of your data by emailing [email protected].
- Correction: Update your profile information at any time in the app.
- Deletion: Delete your account in-app or by contacting us.
- Opt-out of location sharing: Disable in Settings → Privacy & Security → Show Location.
7. Security
We use industry-standard security measures including HTTPS/TLS encryption, JWT-based authentication with token rotation, and bcrypt password hashing. We conduct regular security reviews.
8. Children's Privacy
Wayfio is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us at [email protected].
9. Changes to This Policy
We may update this policy periodically. We will notify you of significant changes via in-app notification or email. Continued use of Wayfio after changes constitutes acceptance.
10. Contact
Questions about this Privacy Policy? Contact us at [email protected] or visit our Contact page.