Privacy policy

Wander Off is a travel app for planning trips, booking travel and keeping the photos and memories from your adventures. This policy explains what information we collect, how we use it, how we protect it, and how you can delete it. If you have questions, email mike@wanderoff.com.

Information we collect

• Account information: your email address, username, display name, profile photo, home city, and the sign in method you choose (email and password, Sign in with Apple, or Google).
• Adventures and memories: the trips you create, their dates and destinations, the photos and videos you add, captions, comments, likes, and the people you invite.
• Photo details: when you add a photo, we may read the date and location saved in it so it lands on the right day and place in your adventure.
• Bookings: when you book a flight or hotel, the traveler names, birth dates, email and phone number the airline or hotel requires, and the booking references they return. Card payments are handled by Stripe; we never see or store your full card number.
• Concierge conversations: the messages you send to the AI Travel Concierge and its replies.
• Device information: a push notification token if you turn on notifications, and basic technical information needed to keep the app working.

How we use your information

• To run Wander Off: show your adventures, share them with the people you choose, build your passport stamps and trip memories, and send the notifications you turn on.
• To search for and book travel with our suppliers when you ask us to.
• To answer your Concierge requests.
• To keep the app safe, prevent abuse, and provide support.

We do not sell your personal information, and we do not use it for advertising.

Google user data

If you connect Google Photos, Wander Off asks Google for three permissions, and uses them only for the features you see in the app:

• Select photos with the Google Photos picker (photospicker.mediaitems.readonly). This lets you choose specific photos from your Google Photos library to add to an adventure. We can only see the photos you pick, never the rest of your library. The photos you pick are copied into that adventure in Wander Off.
• Add photos to albums Wander Off creates (photoslibrary.appendonly). When you turn on Keep originals in Google Photos, Wander Off saves the full quality version of each photo and video you add to an adventure into that adventure's own album in your Google Photos. Wander Off can create albums and add items to them; it cannot change or delete anything in your library.
• View the items Wander Off added (photoslibrary.readonly.appcreateddata). This lets you tap View original in Wander Off to see the full quality version saved in your Google Photos. It only reaches photos and videos Wander Off itself added, never anything else in your library, and only you can open your originals.

We also store the email address of the Google account you connect so we can show you which account is connected, a refresh token so saving originals keeps working without asking you to sign in again, and the Google Photos item id of each original Wander Off saved, so View original can find it. Wander Off keeps a smaller copy of your photos and videos for showing them in the app; the full quality originals stay in your Google account.

• We use Google user data only to provide the photo import, saving originals and viewing originals features described above.
• We do not sell Google user data, use it for advertising, or use it to build user profiles.
• We do not use Google user data to train AI or machine learning models.
• We do not share Google user data with anyone, except the hosting providers that run Wander Off on our behalf, and only to provide these features.
• No person at Wander Off reads your Google user data, unless you ask us to for support, it is needed for security or to comply with the law.

How we protect your data

• Encryption in transit: all traffic between the app, our servers, Google and our suppliers is encrypted with TLS (HTTPS).
• Encryption at rest: our database and file storage are encrypted at rest (AES 256) by our hosting provider, Supabase.
• Access controls: every request is tied to your signed in account, and database rules let you read only your own data and the adventures you are invited to. Your Google refresh token is never shown to other users and is only used to save and show your originals.
• Private photos: photos in private adventures are stored privately and shown only through short lived signed links to the people on that adventure.
• Payments: card details go straight to Stripe and never reach our servers.
• Limited staff access: only a small number of named administrators can reach production systems, and access is removed when it is no longer needed.

Who we share information with

• People you choose: adventures you invite people to, and adventures you make public. Prices and booking references are never shown to other travelers.
• Service providers that run Wander Off for us: Supabase (database, storage and sign in), Expo (app updates and push notifications), OpenAI (to answer Concierge messages), Stripe (payments), Duffel and LiteAPI (flight and hotel bookings), and Viator (things to do). They may use your information only to provide their service to us.
• The law: when required by law or to protect people's safety.

Keeping and deleting your data

• We keep your information while your account is open.
• Disconnect Google Photos anytime in Settings. We delete your stored Google token and email right away, and you can also remove access at myaccount.google.com/permissions. Photos already in your Google Photos albums stay yours.
• Delete your account anytime in Settings. We delete your profile, adventures you own, your photos, and your Google connection. Booking records may be kept as long as the law requires for tax and accounting.
• You can ask for a copy of your data, or for us to correct or delete it, by emailing mike@wanderoff.com.

Children

Wander Off is not meant for children under 13, and we do not knowingly collect their information.

Changes to this policy

If we make important changes, we will update this page and let you know in the app before they take effect.

Contact

Wander Off
mike@wanderoff.com