Privacy Policy
Last Updated: March 29, 2026
Introduction
WayWeGo ("we," "us," or "our") operates the WayWeGo mobile application and associated website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service. By accessing or using WayWeGo, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
We are committed to protecting your privacy and handling your data with transparency. If you do not agree with the practices described in this policy, please do not use the Service.
1. Information We Collect
We collect information that you provide directly to us, information generated through your use of the Service, and information from third-party authentication providers.
1.1 Information You Provide
- Account Information: When you create an account, we collect your email address, username, first name, and last name. You may also provide an optional bio and profile link.
- Profile Photo: You may upload a profile picture or use an auto-generated avatar. Profile images are stored securely on our servers.
- User-Generated Content: Posts, comments, ratings (price, hygiene, safety, friendliness), local tips, activity descriptions, ride details, and any other content you create or share through the Service.
- Messages: Content of messages you send and receive through our in-app messaging features, including friend chats, group chats, activity chats, ride chats, country-specific chats, and tour chats.
- Media: Photos and videos you upload to posts, chats, tips, activities, and rides.
- Travel Information: Your current city, next travel destination, and travel preferences you share with the community.
1.2 Information Collected Automatically
- Location Data: With your explicit permission, we collect your precise location (GPS coordinates) to enable core features such as discovering nearby travelers, activities, local tips, and rideshare options. If you enable background location tracking, we collect location data to maintain your travel history map even when the app is not in active use. You can control location sharing through your device settings and in-app privacy controls at any time.
- Usage Data: We collect information about how you interact with the Service, including features used, content viewed, search queries, and the date and time of your interactions. This data is used solely for improving the Service and troubleshooting issues.
- Device Information: We may collect device type, operating system version, and app version for compatibility and support purposes.
1.3 Information from Third-Party Authentication
- Google Sign-In: If you choose to sign in with Google, we receive your email address and basic profile information as authorized by your Google account settings.
- Apple Sign-In: If you choose to sign in with Apple (iOS only), we receive your name and email address (or a private relay email if you choose to hide your email) as provided by Apple.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Provide and Operate the Service: To create and manage your account, enable social features, facilitate messaging, display nearby travelers and activities, process ride and activity requests, and deliver the core WayWeGo experience.
- Location-Based Features: To show you nearby travelers, activities, local tips, and rideshare options based on your current location, and to display your travel history on your personal map.
- AI-Powered Itinerary Generation: To generate personalized travel itineraries based on your preferences, destination, budget, and travel style using our AI travel planning feature.
- Tour Discovery: To display relevant tours and experiences near your location or searched destinations, and to facilitate tour bookings through our third-party tour partners.
- Community Safety: To enforce our community guidelines, investigate reports of misconduct, and take appropriate moderation actions to maintain a safe and respectful environment.
- Communication: To send you important account notifications, security alerts, and service updates. We do not send unsolicited promotional emails.
- Improvement and Analytics: To analyze usage trends, diagnose technical issues, and improve the performance and features of the Service.
3. Third-Party Services
WayWeGo integrates with the following third-party services to deliver its features. Each service receives only the minimum data necessary to perform its function:
3.1 Supabase (Infrastructure Provider)
We use Supabase as our backend infrastructure provider for database hosting, user authentication, file storage, and real-time messaging. All user data is stored on Supabase's secure servers. Supabase processes data on our behalf as a data processor and is contractually obligated to protect your information.
3.2 Google Places API
We use the Google Places API to provide location search and autocomplete functionality. When you search for a location, your search query is sent to Google through a secure server-side proxy. Google's use of this data is governed by the Google Privacy Policy.
3.3 Mistral AI
Our AI-powered itinerary planner uses Mistral AI to generate personalized travel suggestions. When you use this feature, your travel preferences (such as destination, budget, interests, and travel style) are sent to Mistral AI through a secure server-side proxy. Mistral AI processes this data solely to generate your itinerary and does not retain it for other purposes.
3.4 Viator (Tour Bookings)
We integrate with Viator to display and facilitate bookings for tours and experiences. When you view or book a tour, you may be redirected to Viator's platform. Any data you provide directly to Viator is governed by their privacy policy. We participate in Viator's affiliate program, which means we may earn a commission on bookings made through WayWeGo.
3.5 Apple and Google Authentication
If you choose to sign in using Apple or Google, the authentication process is handled by the respective platform. We receive only the information you authorize (typically your name and email address). Please refer to Apple's Privacy Policy and Google's Privacy Policy for more information.
3.6 OpenStreetMap / Photon
We use the Photon geocoding service (based on OpenStreetMap data) as an alternative location search provider. Search queries sent to this service do not include personally identifiable information.
4. Data Sharing and Disclosure
We do not sell your personal information. We share your data only in the following limited circumstances:
- With Other Users: Information you choose to make public on your profile (such as your username, bio, profile photo, posts, and tips) is visible to other WayWeGo users. Your location visibility is controlled by your privacy settings and can be set to "nearby," "city-level," or "hidden."
- With Service Providers: We share data with the third-party service providers described in Section 3, strictly for the purpose of operating the Service.
- For Legal Compliance: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.
5. Data Storage and Security
Your data is stored on secure servers provided by Supabase. We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/SSL protocols.
- Secure server-side proxying for all third-party API communications, ensuring API keys and sensitive credentials are never exposed on client devices.
- Row-Level Security (RLS) policies on our database to ensure users can only access data they are authorized to view.
- JWT-based authentication with secure token storage on your device.
- Rate limiting on API endpoints to prevent abuse.
While we strive to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.
6. Your Privacy Controls
WayWeGo provides you with meaningful control over your personal information:
- Profile Visibility: Set your profile to public or private through the app's privacy settings.
- Location Sharing: Choose how your location is displayed to others — nearby (approximate), city-level, or completely hidden. You can also disable location sharing entirely through your device settings.
- Background Location: Background location tracking for the travel history map can be disabled at any time through your device's location permissions.
- Message Privacy: Control who can send you messages — everyone or friends only.
- Search Visibility: Choose whether your profile appears in search results.
- Notification Preferences: Customize which notifications you receive within the app.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: You can access your personal information at any time through your account profile and settings.
- Correction: You can update or correct your personal information directly through the app's Edit Profile feature.
- Deletion: You can permanently delete your account and all associated data through the app's account settings. Upon deletion, we will remove your personal data from our active systems. Some data may be retained in backups for a limited period as required by law or for legitimate business purposes.
- Data Portability: You may request a copy of your personal data in a structured, machine-readable format by contacting us.
- Withdrawal of Consent: Where processing is based on your consent, you may withdraw that consent at any time by adjusting your settings or contacting us.
- Objection: You may object to certain processing of your personal data where permitted by applicable law.
To exercise any of these rights, please contact us at privacy@waywego.app. We will respond to your request within 30 days.
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our terms).
Messages, posts, and other user-generated content that have been shared with other users may persist in their conversations or feeds even after account deletion, though your identity will be anonymized.
9. Children's Privacy
WayWeGo is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information promptly. If you believe that a child has provided us with personal data, please contact us at privacy@waywego.app.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy wherever it is processed.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. If we make material changes, we will notify you through the app or by other appropriate means prior to the changes becoming effective. Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
WayWeGo Privacy Team
Email: privacy@waywego.app
For general support inquiries, please contact support@waywego.app.