Privacy Policy

Account Information When you create an account, we collect your email address, display name, and username. You may also sign in using Google or Facebook, in which case we receive basic profile information from those providers. Passwords are securely hashed and never stored in plain text. Photos and Media With your permission, Wayfolks accesses photos from your device's camera roll to match them to your trips based on timestamps and GPS metadata. We read photo metadata including creation date, GPS coordinates, image dimensions, and camera information. Photos you choose to share with your trip group are uploaded to our cloud storage. On-device photo classification (categorizing photos as selfies, group shots, scenery, etc.) is performed locally on your device using built-in machine learning and is not sent to external servers. Location Data With your permission, we access your device's location to tag photos, detect travel patterns, and generate personalized itineraries. Location data is used for reverse geocoding (converting coordinates to city and country names), which is performed locally on your device. We do not perform background location tracking. Location access is limited to foreground use and photo metadata extraction. Camera Wayfolks requests camera permission to allow you to capture photos during your trips. Camera access is only used when you explicitly choose to take a photo within the app. Financial Information If you use the expense tracking feature, we collect expense amounts, currency codes, categories, and information about how expenses are split among trip members. We do not collect or store payment card numbers, bank account details, or any payment processing information. Device and Usage Information We collect your device's push notification token to send you relevant notifications about your trips. We also collect basic technical information necessary to operate the app, such as your device platform (iOS or Android).

We process your personal information under the following legal bases: Consent: We rely on your explicit consent for accessing photos, camera, location, and sending push notifications. You can withdraw consent at any time through your device settings. Contract: Processing your account information, trip data, and expenses is necessary to provide the services you signed up for. Legitimate Interest: We process certain data to improve app performance, prevent misuse, and maintain the security of our services. We balance these interests against your privacy rights.

We use the information we collect to: • Create and manage your account • Match your photos to trips based on time and location • Classify photos on your device to help organize your trip gallery • Detect potential trips from your travel patterns and suggest creating them • Share photos, expenses, and itineraries with your trip group members • Provide AI-powered trip planning and travel assistance through our chat features • Track and split expenses among trip members with currency conversion • Send push notifications about trip activity, photo uploads, and group updates • Improve and maintain the app

Wayfolks uses artificial intelligence to enhance your experience: Chat Assistant: When you use the in-app chat assistant (Nova or Terra), your messages and relevant trip context (trip name, dates, destinations, expenses) are sent to third-party AI language model providers for processing. We request that these providers do not use your data for training their models. Trip Detection: When validating potential trips detected from your photos, limited travel pattern data (dates, regions, photo counts, distances) may be sent to AI services for plausibility analysis. Individual photos are not sent during this process. Photo Classification: Photo categorization is performed entirely on your device using built-in machine learning frameworks. Your photos are not sent to external servers for classification. Important: AI-generated responses, including travel suggestions, itinerary recommendations, and expense insights, are provided for informational purposes only. They may not always be accurate or up to date. You should verify important information independently and not rely solely on AI responses for critical travel or financial decisions.

Cloud Storage: Your account data, trip information, expenses, and chat messages are stored on secure cloud database and storage platforms. Full-resolution photos are stored on cloud object storage and are accessible only to authenticated members of your trip. On-Device Storage: Photo classification results, upload queue state, and cached metadata are stored locally on your device in SQLite databases. Authentication tokens are stored using your device's secure encrypted storage (Keychain on iOS, Keystore on Android). All data transmitted between your device and our servers is encrypted using HTTPS/TLS.

We do not sell, rent, or trade your personal information to third parties. We share your information only in these circumstances: With Your Trip Members: Photos, expenses, itineraries, and chat messages are shared with other members of your trip groups. You control who is invited to your trips. With Service Providers: We work with trusted third-party service providers who help us operate the app, including cloud hosting and database services, cloud object storage for photos, AI language model providers for chat and trip planning features, push notification delivery services, and currency exchange rate providers. These providers process your data only as necessary to provide their services and are bound by their own privacy policies. If you choose to sign in with Google or Facebook, those providers handle your authentication according to their own privacy policies. As Required by Law: We may disclose your information if required to do so by law or in response to valid legal requests by public authorities.

You have the following rights regarding your personal information: Permission Controls: You can grant or revoke permissions for camera, photos, location, and notifications at any time through your device's settings. Revoking permissions may limit certain app features. Access: You may request a copy of the personal data we hold about you by contacting us at contact@wayfolks.com. Correction: You may request that we correct any inaccurate or incomplete personal data we hold about you. Deletion: You may request deletion of your account and associated data by contacting us at contact@wayfolks.com. Upon deletion, your account data, uploaded photos, expenses, and chat messages will be permanently removed. Restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of your data. Objection: You may object to the processing of your personal data for purposes based on legitimate interest, including AI-powered features. Where you object, we will stop processing unless we have compelling legitimate grounds. Data Portability: You may request your personal data in a structured, commonly used format so that you can transfer it to another service. Trip Data: You can delete individual photos from trips or delete entire trips. Deleting a trip removes all associated photos, expenses, conversations, and member data. To exercise any of these rights, contact us at contact@wayfolks.com. We will respond within 30 days.

We retain your account data for as long as your account is active. Trip data (photos, expenses, chat messages) is retained for as long as the trip exists. When you delete a trip, all associated data is permanently removed. When you delete your account, all your data is permanently removed. Photos that fail to upload are automatically cleaned up after 24 hours. Temporary classification data for deleted photos is removed during routine maintenance. Server logs and backup data may be retained for up to 90 days after deletion for operational and security purposes, after which they are securely purged. Accounts that have been inactive for more than 24 months may be flagged for deletion. We will notify you by email before any action is taken, giving you the opportunity to reactivate your account.

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (HTTPS/TLS), encrypted storage of authentication tokens, access controls that limit data visibility to authorized trip members, and regular security reviews of our infrastructure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law, without undue delay. No method of electronic storage or transmission is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

Wayfolks is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@wayfolks.com and we will promptly delete such information.

Your information may be transferred to and processed on servers located outside your country of residence. Our service providers operate data centers in various regions. Where required by law, we ensure that appropriate safeguards are in place for international transfers, such as Standard Contractual Clauses (SCCs) or equivalent mechanisms, to protect your data regardless of where it is processed.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy within the app or by sending a push notification. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the app after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: • Email: contact@wayfolks.com • Support: https://wayfolks.com/support We will respond to your inquiry within 30 days.