WanderBuddy ("the app", "we", "us") helps groups plan trips together. This policy explains what we collect, why, who we share it with, and the choices you have. We do not sell your personal data, and we show no ads.
Information we collect
Account information. Your email address and the profile details you choose to provide: display name, username, bio, profile photo, year of birth (to confirm you meet the minimum age), gender, nationality (passport country), and your travel answers such as interests, habits, travel style and dream destination. If you sign in with Google or Apple, we receive your name and email address from that provider.
Trip content. Trips you create or join: names, destinations, dates, itinerary items, notes, expenses, tags, and member lists.
Messages. Group and direct messages you send in a trip's chat.
Photos. Images you choose to upload (profile photo, trip photos). If you allow location access, an uploaded trip photo may include its location (from the photo's own GPS data, or your device's current location at the time of upload) so you can organise and map photos by place. This is optional and best-effort; a photo without a location still uploads normally, and we convert the coordinate to a place name (e.g. "Gion, Kyoto") using our maps provider.
Face grouping (optional, off by default). If you turn on face grouping in a trip's Photos tab, the app finds faces in that trip's photos on your device and turns each face into a numerical face template, which is biometric data. The templates, small face crops, and the resulting groups of photos by person are stored on our backend with the trip's photos, so every member of that trip sees the same groups. We use face data only to group that trip's photos. We never sell it, use it for ads, or use it to identify anyone outside the trip. Trip photos can show people who don't use WanderBuddy, so only turn this on when the people in your photos are comfortable with it.
Videos. Trip videos (reels) you upload are stored and streamed by our video provider (Mux). A reel you make public appears in the app's public feed only after review.
Precise location. Collected in three situations, all under your control: (1) when you actively turn on live location sharing for a trip, shared only with the trip members you approve, for a duration you choose; (2) when you upload a geotagged photo as described above; and (3) when you send an SOS from the Safety screen. We keep the most recent position you shared until you delete your account. An SOS sends your exact position, as a map link, to the members of the trips the app names before you confirm (never the Welcome trip or very large trips). They get it as a push and an in-app alert, and it stays in their alerts until they delete it or you delete your account. When you open trip navigation, that position and your destination are sent to our maps provider to calculate the route. We do not collect your location in the background.
Translation & AI text. When you use chat translation or the "Talk to a Local" live translator, the text to be translated is sent to our translation providers. When you use the AI travel assistant, the planner, stop suggestions, or add stops or expenses by voice, your request and the relevant trip details (and, for suggestions, the interests and dream destination on your profile) are sent to our AI providers to generate a reply. We use Groq first. When Groq is busy or unavailable, the same request goes to OpenRouter, which passes it to one of the third-party AI companies it works with (chosen by price) to run the model. To answer, the assistant may also look up real places and weather near your trip through Google Maps Platform; those lookups carry the place or area, not your name. For live conversation and voice input, your speech is turned into text by your phone's speech-recognition service (Google on most Android phones, Apple on iPhone), which may process the audio on the device or on that provider's servers; WanderBuddy receives only the text. Avoid including sensitive personal information in these messages.
AI ticket reading. When you add a ticket by uploading a PDF or a photo, the file goes to our servers and its contents are sent to our AI providers (Groq or OpenRouter) to read the travel details, such as passenger names, booking references, flight or train numbers, places and times. The file is read once to fill in the form and is not stored by this feature. Only the details you review and save are kept with the trip.
What WanderBuddy knows (optional, off until you say yes).
If you agree when the assistant asks, WanderBuddy fits its answers to you.
It uses parts of your profile (food and drink preferences, smoking,
interests, why you travel and your dream trip) and it remembers short facts
you tell it about yourself, such as "I'm vegetarian" or "I avoid early
starts". A small AI model picks these facts out of the messages you send the
assistant in the app, on WhatsApp or on Instagram, and you can also add them
yourself. The facts are stored with your account and sent, with your
questions, to our AI providers so the answers fit you. Until you say yes,
the assistant does not use your food, drink and smoking answers or why you
travel, and it remembers nothing. The trip planner and suggestions still use
the interests and dream destination on your profile, as described under
Translation & AI text. We do not keep facts about religion, politics,
ethnicity, sexuality, or health beyond food allergies and mobility needs. You
can see every fact, delete any one, forget everything, or switch the feature
off at any time in Profile → What WanderBuddy knows. When it is
off, nothing there is used and nothing new is remembered. All of it is
deleted when you delete your account.
Moderation data. When you report content or a user, or block a user, we store that action: who reported, the user or item reported, the reason you selected, relevant context (such as the reported message text or item type), your block list, and timestamps, so our moderators can review it and act. Reports are readable only by you (your own) and our moderators.
Purchase information. If you buy a digital add-on or subscription, the app store (Apple App Store on iOS, Google Play on Android) processes the payment and returns a purchase receipt, which we use to unlock and restore your entitlement. For real-world travel bookings, our payment processor (Razorpay) handles the transaction. We never receive your card details.
Diagnostics. In production builds, we collect crash reports (via Firebase Crashlytics) to find and fix stability problems. Crash data is not linked to your identity and is not used for tracking. Google's map and on-device face-detection components may also send Google anonymous usage and diagnostic data. We do not use any third-party analytics or advertising SDK.
Usage data. To understand how the app is used and improve it, we record in-app events in our own backend, such as screens opened, features used, signing in and out, and app errors, together with your account ID and a random install ID. This stays first-party: it is not shared with analytics or advertising companies and is never used for tracking or ads. Raw events are deleted after 180 days.
Saved reels, WhatsApp and Instagram. If you share a reel with WanderBuddy, from your phone's share sheet or by messaging our WhatsApp or Instagram account, we read the reel's public caption and details to find the places it mentions and save them to your trip ideas. If you link your WhatsApp number or Instagram account to WanderBuddy, we store that link so messages you send us reach your account, and our WhatsApp assistant uses your trips' details to answer the questions you send it.
Device data. A push-notification token, used only to deliver the notifications you've enabled. On Android, an install-referral code may be read once to complete a trip invite you followed.
How we use your information
- To provide core features: trips, itineraries, group and direct chat, optional live location sharing, photo sharing and photo-by-location, translation, the AI travel assistant, and saved reels.
- To group a trip's photos by person, only if you turn on face grouping.
- To answer the questions you send our WhatsApp assistant.
- To read the tickets you upload into your trip's travel details.
- To fit the assistant's answers to you, only if you turn on What WanderBuddy knows.
- To understand how the app is used and improve it (first-party usage data).
- To authenticate you and keep you signed in.
- To deliver notifications you've enabled.
- To process and restore purchases, and to process real-world bookings.
- To keep the community safe: to review reports and blocks and act on objectionable content and abusive users, and to run an on-device filter that blocks objectionable text before it's posted.
- To diagnose crashes and improve reliability.
Third-party services
We use the following processors, each with its own privacy policy. Data is shared only as needed to provide the feature:
| Service | Purpose | Policy |
|---|---|---|
| Supabase | Account, database, storage, realtime, account deletion | link |
| Firebase Cloud Messaging | Push notifications | link |
| Firebase Crashlytics | Crash diagnostics (production only) | link |
| Stream | Group & direct chat, and chat moderation | link |
| Apple Maps / Google Maps | Showing maps (Apple Maps on iPhone, Google Maps on Android) | Apple · Google |
| Mapbox | Place search, directions, and converting photo coordinates to place names | link |
| Google ML Kit | On-device face detection for optional face grouping | link |
| Google Maps Platform | Place details, place search and weather forecasts, including the AI assistant's lookups, requested through our servers | link |
| Mux | Hosting and streaming trip reels you post | link |
| Twilio / Meta | Messages you exchange with our WhatsApp and Instagram accounts | Twilio · Meta |
| Apify | Reading the public details of reels you share with us | link |
| Resend | Emailing our team about reports and contact requests | link |
| Sign in with Apple / Google Sign-In | Signing in with your Apple or Google account | Apple · Google |
| Groq | AI replies: the travel assistant, planner and stop suggestions, the WhatsApp and Instagram assistants, reading saved reels and uploaded tickets, and picking out the facts What WanderBuddy knows | link |
| OpenRouter | The same AI replies when Groq is busy or unavailable. OpenRouter sends each request to one of the third-party AI model providers it works with. | link |
| Google Cloud Translation / DeepL | Chat & live-conversation translation | Google · DeepL |
| Apple App Store / Google Play | In-app purchases (digital) | Apple · Google |
| Razorpay | Payments for real-world travel bookings | link |
On-device storage
Your sign-in session and purchase entitlement are stored in your device's encrypted storage (Android Keystore / iOS Keychain). Trip and account data is stored on our backend (Supabase) so it syncs across devices and trip members.
Data sharing
We do not sell your personal data and we do not use it for advertising. The app shows no ads and contains no third-party trackers. Trip content is visible to the other members of that trip, which is the point of the app. We may disclose information if required by law, or to enforce our Terms and Community Standards.
Your rights & choices
- Access / export: view your profile and trip data in the app; contact us for an export.
- Delete: permanently delete your account and data from
Profile → Delete account. This removes your profile and the data linked to it. Trips and itinerary items you created in a shared trip are kept for the other members, with your authorship removed. This cannot be undone. No app? Request deletion at wanderbuddyapp.com/delete-account. - Location: live sharing is off by default; photo location is optional and controlled by your device's location permission, which you can revoke any time.
- Face grouping: off by default; turn it off in the Photos tab at any time. Face templates made from a photo are removed when the photo or its trip is deleted, and all face data made from your photos, including face crops, is deleted when you delete your account. Contact us to have it deleted sooner.
- What WanderBuddy knows: off until you say yes. See,
delete or switch off what the assistant uses in
Profile → What WanderBuddy knows. It is all deleted with your account. - Notifications: manage in your device settings.
- Safety: report or block any user from within the app.
Children
WanderBuddy is not directed to children under 13 (or your country's minimum age of digital consent). We do not knowingly collect their data, and we delete such accounts when we learn of them.
Data retention
We keep your data while your account is active. When you delete your account, we delete the data linked to it as described above; residual copies in encrypted backups and operational logs are purged on a rolling basis. Chat messages are also processed by our chat provider (Stream) and removed according to account deletion. Moderation records may be retained as needed to enforce our Terms and to keep abusive users off the platform.
Changes to this policy
We may update this policy; we'll revise the "Last updated" date above and, for material changes, notify you in the app.
Contact
Questions or requests: support@wanderbuddyapp.com
See also our Terms of Service.