Privacy policy

The short version

waddlio helps groups plan trips together. We collect what the app needs to work. We don't sell your data, we don't show ads, and we don't track you across other apps or websites. You can delete your account whenever you like.

Who we are

waddlio is run by Tylah Morgan, 618/74 Queens Road, Melbourne VIC 3004, Australia. We are responsible for the personal data described here. You can reach us at [email protected].

What we collect

• Your account: your email address (for sign-in codes and account email), a display name, and optionally a home city and a profile photo. If you sign in with Apple, we receive the details Apple shares with us.
• Your trips: everything you and your group add, such as places, dates, plans, flights and stays, votes, expenses and balances, packing lists, notes, contacts you attach to plans, and the messages and photos in the trip chat.
• Bookings you import: if you paste, scan or share a booking confirmation, we read the text or file you give us. It can include names, booking references and flight details.
• Purchases: whether you have premium, which plan, and when it renews. Card details are handled by Apple or Stripe, never by us.
• Reports: if you report a message, photo or person, we keep the report so we can act on it.
• Push notification tokens: so we can send you notifications you have allowed.

Your location

The iOS app can ask to use your location while you're using it. It uses it on your phone to estimate how long it will take to reach your next plan, and to time "leave now" reminders. To work out the travel time, your location is sent to Apple Maps. It is not sent to our servers and we don't store it.

Places on your trip come from what you type and pick. We never track where you go.

Who can see your trip

Trip content is visible to the members of that trip, meaning the people who joined with your invite link or code, and to nobody else. Travel details you mark as private stay visible only to you. Drafts stay private until you share them.

AI features

Some features use AI from Anthropic. When you use one, we send Anthropic the trip details that feature needs:

• Booking import: the confirmation text or file you give us.
• Trip planning and destination ideas: what you describe, your trip's places and dates, and your home city if you've set one.
• Activity ideas: the place, your dates, the group size and the titles of plans already on the trip.
• Packing lists: your dates, the weather, your plans and your display name.
• Local tips: only the place name and its location. Tips are shared by everyone who visits that place and are not linked to you.

In the iOS app we ask before the first time any of this is sent, and you can turn AI features off in Profile at any time. Anthropic uses this data only to produce the suggestion and doesn't use it to train its models. Anthropic keeps it for up to 30 days for safety and security checks, then deletes it. AI suggestions are drafts. Nothing is added to your trip until you choose it.

Keeping the chat safe

To keep trips free of harmful images, every photo uploaded to waddlio (chat photos, profile photos and trip cover photos) is checked automatically by Anthropic's AI. A photo that breaks our rules is removed. We keep a record of each check so the same photo is only checked once.

Services we rely on

These companies process data for us. Each receives only what it needs to do its job.

• Supabase: hosts our database, sign-in and file storage. Your data is stored in South Korea.
• Anthropic: the AI features and photo checks described above.
• Apple: push notifications, Sign in with Apple, App Store purchases, Apple Maps (maps, place search and travel times) and Apple Weather (forecasts).
• Stripe: payments if you buy premium on the web. Stripe receives your email address and an account ID.
• Resend: sends email, such as an invite you send to a friend. The invite includes your name and the trip's name.
• AeroDataBox: flight schedules and live flight status. We send flight numbers and dates, never your name.
• Viator and Stay22: bookable experiences and places to stay. We send the place and, for stays, your dates and number of guests. We never send your name or email.
• NASA POWER and BigDataCloud: typical weather for a place, and which country a place is in. We send coordinates only.
• Open-Meteo: weather forecasts in the web app. Your browser connects to it directly, so it sees your IP address and the place.
• Google Maps and OpenStreetMap: maps and place search in the web app. Your browser connects to them directly, so they see your IP address and what you search for.
• Cloudflare: hosts our website, and counts visits without cookies and without identifying you.

Bookings and commission

When you open a Viator experience or a Stay22 place to stay, the link carries our partner code, and we may earn a commission if you book. Booking happens on their site, under their own terms and privacy policy.

Cookies and tracking

The web app keeps you signed in using your browser's local storage, and remembers a few display choices. There are no advertising cookies, no cross-site trackers and no analytics that identify you. The iOS app contains no advertising or analytics software.

Crash reports

If the iOS app crashes or freezes, it sends us a technical report from Apple's diagnostics: what the app was doing at the time, plus the app version, iOS version and iPhone model. It isn't linked to your account and contains nothing you wrote. We keep these reports for 90 days, only to find and fix problems.

How long we keep data

We keep your account and trips for as long as your account exists. Deleting a trip removes it for everyone in it, and its photos are removed within a day. Crash reports are deleted after 90 days. Our database is backed up once a day, and each backup is kept for 7 days. So anything you delete is also gone from our backups within about a week.

Deleting your account

In the iOS app, go to Profile and choose "Delete account". If you only use the web app, email us and we'll do it for you.

Deleting your account removes your account, your profile, your votes and your packing lists, and any trip where you are the only member. Your profile photo, and the photos in those trips, are removed within a day. In trips you share with others, ownership passes to another member, and the messages, photos and expenses you added stay with that trip so the group's chat and records still make sense.

If you subscribed on the web, your subscription is cancelled first. Stripe keeps its own record of past payments. If you subscribed through the App Store, cancel it in your iPhone's Settings, because apps can't cancel Apple subscriptions for you.

Your rights

Depending on where you live, you may have the right to see the data we hold about you, to correct it, to get a copy of it, to have it deleted, and to object to how we use it. Email [email protected] and we'll respond within 30 days. You can also complain to your local data protection authority.

Where the law asks us to name a reason for using your data (for example in the UK and the European Union), these are our reasons:

• To provide the service you asked for: your account, your trips, chat, shared costs, bookings you add and premium purchases.
• Your consent: AI features, notifications and location-based reminders. You can withdraw consent at any time in the app or in your iPhone's Settings.
• Our legitimate interests: keeping waddlio safe (photo checks and blocking), fixing crashes, and preventing abuse such as spam invites.
• Legal obligations: keeping payment records for tax.

Your data is stored in South Korea, and some of the companies listed above process it in the United States and other countries. We only use providers that protect personal data, and where the law requires it we rely on safeguards such as the standard contractual clauses approved by the European Commission.

Children

waddlio is not for children. You must be at least 13, or 16 where the law says so, to use it. If you think a child has given us personal data, email us and we'll delete it.

Changes to this policy

If we change how we use your data, we'll update this page and change the date at the top. For significant changes, we'll also tell you in the app.

Questions

Email [email protected]. A person reads every message. Our terms of service cover the rules for using waddlio.