Legal

Privacy Policy

Last updated: April 1, 2026

The short version: Your full-resolution photos stay on your device. Only thumbnails sync for sharing. AI classification runs on-device. No ads. No data selling. Your data, your control.

1. Data Collection

Wayfolks collects the minimum data necessary to provide our services. This includes your account information (username, email, home location), trip data you create, photos you choose to sync, and usage analytics to improve the app experience. We do not collect data beyond what is needed for core functionality.

2. Photo Storage & Sync

Your full-resolution photos stay on your device by default. Only compressed thumbnails are synced to our servers for group sharing. If you choose to back up full-resolution photos using Trip Coins, they are encrypted and stored on Cloudflare R2 with server-side encryption. You can delete your cloud-stored photos at any time, and deletion is permanent within 30 days.

3. Location Data

Wayfolks uses photo metadata (EXIF data) to place photos on maps and detect trip boundaries. Location data from photos is processed on-device for trip detection. We do not continuously track your location. You can disable location features at any time in app settings.

4. AI Processing

Photo classification (sunsets, food, landmarks, etc.) runs entirely on-device using on-device AI models. Your photos are never sent to external AI services for classification. Terra and Nova AI assistants process conversation data on our servers to generate responses, but conversation history is encrypted and not used to train AI models. You can delete your AI conversation history at any time.

5. Third-Party Services

We use the following third-party services: • Supabase — Authentication and database • Cloudflare R2 — Encrypted cloud storage for photo backups • Cloudflare Workers AI — AI assistant responses (Terra & Nova) We do not share your personal data with advertisers or data brokers. Third-party services are bound by data processing agreements.

6. Data Retention

Account data is retained while your account is active. Trip data and photos are retained until you delete them. When you delete your account, all associated data is permanently removed within 30 days. AI conversation logs are retained for 90 days for service improvement, then permanently deleted.

7. Your Rights (GDPR/CCPA)

You have the right to: • Access all data we hold about you • Export your data in a portable format • Request correction of inaccurate data • Request deletion of your account and all data • Opt out of non-essential data processing • Withdraw consent at any time To exercise any of these rights, contact privacy@wayfolks.com or use the in-app privacy settings.

8. Cookie Policy

Our website uses essential cookies for authentication and session management. We use privacy-respecting analytics (no cross-site tracking). We do not use advertising cookies or retargeting pixels. You can manage cookie preferences in your browser settings.

9. Children's Privacy

Wayfolks is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us at privacy@wayfolks.com and we will delete it.

10. Contact

For privacy-related questions or requests: • Email: privacy@wayfolks.com • In-app: Settings → Privacy → Contact We respond to all privacy requests within 30 days.