Privacy policy

Wayloom is a travel itinerary app run by an independent developer. This page explains what Wayloom stores about you, why, who helps run it, and what you can do about it. Wayloom does not sell your data, show ads or use tracking or analytics cookies.

What Wayloom stores

• Your account: your email address and a securely hashed version of your password if you set one (never the password itself), plus when you signed up and confirmed your email. If you sign in with an account from another provider (for example Google), we receive your email address and an account ID from it, and nothing else.
• What you add: trips, destinations, plans (flights, stays, transport, activities), notes, reference numbers, costs, to-dos, and the documents and photos you upload.
• Imports: if you ask Wayloom to create plans from a booking document, or forward an email to your import address, the file or email and the plans read from it. Documents you attach to a trip or plan yourself are only stored and never sent to the AI service. Plans and documents you add then stay in your trip like anything else you add. The import itself — the file or email, what was read from it and its place in your list of imports — is removed 30 days after you reviewed it (or after it couldn't be read), or earlier when you remove it. Every account gets an import address when it is created; it is kept until you replace it or delete your account; mail to an address that belongs to nobody is discarded unread. What remains is an anonymous count for improving the reading: the kind of file, how many plans were found and added, and which reading steps worked, without your account, the file, its name or its contents.
• Connected apps: if you connect an AI assistant (see below), its name, where its access goes, what you allowed it to do, and when it was connected and last used.
• Sign-in sessions: for each device you sign in on, when the session started and expires and the browser's or app's description of itself (for example "Safari on iPhone").
• Technical logs: the server records requests and errors (time, address requested, your account id, and the IP address your request came from) to keep Wayloom running and secure. When something goes wrong in the app, it sends an error report with the error, the page and the app version.
• Problem reports: when you use Report a problem, we receive your message, your email address (so we can reply) and the details the form lists before you send: the app version, your device, the screen you came from and the last error reports from your device. It is emailed to our support mailbox.

On your device

So Wayloom works offline, your trips, plans and documents are also stored on each device you sign in on: in your browser, or in the Wayloom app on your phone. Signing out or deleting your account removes them from that device. In the browser, Wayloom uses one cookie, which keeps you signed in; the app keeps you signed in with a key held encrypted in your phone's secure storage instead, and leaves your trips out of the phone's backups. Your display preferences (theme, time zone) are kept on the device. If you add the Wayloom widget to your phone's home screen, it shows your next plan, its booking reference and your to-dos to anyone who can see the screen; it reads them from the phone and sends nothing, and after you sign out it shows nothing from before.

Why

Only to provide Wayloom: to show and sync your trips on your devices, sign you in, let the AI assistants you connect work with your trips, send emails about your account (confirming your address, resetting your password, security notices such as a newly connected app), keep the service secure and fix problems.

Who helps run Wayloom

• DigitalOcean hosts the server and database in North America.
• Mailtrap delivers Wayloom's emails; it receives your email address and the message. It also receives the emails you forward to your import address and holds them until Wayloom collects them, usually within minutes, then deletes them.
• Anthropic (Claude, United States) reads a booking document or email only when you ask Wayloom to create plans from it, to propose the plans in it; documents you attach yourself are never sent to it. You agree to this when you create your account (older accounts agree the first time they import). It doesn't use them to train its models and deletes them within 30 days.
• Pexels (United States) supplies the photograph shown on each trip. When you give a trip a destination, Wayloom's server searches Pexels for that place name — never your account details, your dates or anything else about the trip. The photograph itself is then loaded by your device straight from Pexels, so they also see your IP address when a trip's photo is shown for the first time. A place is searched once and the result is shared by every trip that goes there.
• Google Firebase Cloud Messaging (United States) carries one notification to the Wayloom app on your Android phone when an import is ready to check or didn't work. It receives the phone's notification token and a message that says only that, with the import's number — never the document, its file name, your trips or your email address. Turn it off in the app under Settings → Notifications. The morning brief and your to-do reminders are made on the phone itself, and nothing about them is sent.
• Google Sign-In (United States), only if you choose Continue with Google: Google confirms who you are and sends Wayloom your email address and an account ID. Wayloom asks for nothing else and gets no access to your Google account.
• Wikidata (Wikimedia Foundation, United States) and OpenStreetMap (the public Overpass service, Germany) supply useful pages about the places you travel to, such as travel guides, hiking routes and viewpoints. When a trip has a destination, Wayloom's server looks that place up by its name, its GeoNames number or its coordinates — never your account details, your dates or anything else about the trip. A place is looked up once and the result is shared by every trip that goes there. Your device only contacts those sites when you open one of the pages.
• Photon (komoot) answers address searches: when you search for an address, the text you typed is sent to it from Wayloom's server, without your account details.

These providers are in the United States or Europe and only process data to provide their service to Wayloom.

AI assistants you connect

You can let an AI assistant of your choice work with your trips — asking it what is coming up, or to add a plan for you. Nothing is shared until you connect one: the assistant sends you to Wayloom, you sign in, and a page names the app and where its access goes and asks what it may do. You can disconnect it at any time in Settings → Connected apps, which stops it immediately. We email you whenever a new app is connected, so one you didn't connect doesn't go unnoticed. The assistant is yours, not one of Wayloom's providers above.

• What it can see: only your own data, and only what it asks for — your trips, plans, to-dos and documents, including what a document says, such as a passport. Secret reference numbers, such as PINs and door codes, are hidden from it.
• What it can change: nothing, unless you also allowed it to add and change. Then it can add and edit trips, plans and to-dos, add a document to a trip, and delete — a plan, a to-do, a document, or a trip with everything in it. Anything it changes reaches your devices like any other change. An app that later asks for more than you allowed has to ask you again.
• Where that goes: what the assistant reads leaves Wayloom and is then handled by whoever runs it, under their terms and privacy policy rather than this one. Wayloom can't control what they keep or whether they use it to train their models, so check that before you connect an assistant, and don't connect one you wouldn't trust with your travel details. A file it adds travels the other way: it is sent straight to Wayloom with a one-time permission that lasts ten minutes, or, for a file you attached in the chat (ChatGPT), Wayloom downloads that one file from the assistant's own file storage when you ask for it to be added. Either way it is stored like any document you add yourself.
• How long it lasts: a connection ends when you disconnect it, or after 30 days without use. Changing or resetting your password doesn't end it; after a reset we list the apps still connected, by email and in Settings, so you can disconnect any you don't recognise.
• What is recorded: for each connection, the app's name, where its access goes, what you allowed, and when it was connected and last used. The server logs each request an assistant makes — when, which connection, what it asked for (for example "list trips") and whether it worked — but never what it was told in reply. These are kept as long as other server logs.

How long

• Your account and what you add are kept until you delete them or your account.
• An import, with its file or email, is removed 30 days after you reviewed it or it couldn't be read.
• A sign-in session or a connected app ends when you sign out or disconnect it, or after 30 days without use. The record of it (the device or app, and when) stays with your account until you delete the account.
• Server logs, including error reports from the app, are kept for up to 30 days.
• A problem report stays in our support mailbox while we help you, and the server keeps a record of the email it sent.
• Server backups, when made, are replaced within about four weeks, so deleted data leaves them too.

Your choices

• You can see, change and delete everything you added in the app.
• You can delete your account at any time in Settings → Account → Delete account. This removes your account and everything in it right away.
• You can disconnect any AI assistant at any time in Settings → Connected apps, which stops it immediately.
• For a copy of your data, or any other request or question, email privacy at wayloomapp.com.

Wherever you live, you can ask to access, correct, delete or receive a copy of your data, and to object to how it is used; requests are answered within 30 days.

Security

Connections use HTTPS, passwords are stored hashed, the sign-in cookie can't be read by scripts, the app's sign-in is stored encrypted, and your documents are only served to you. No system is perfectly secure; if something happens that affects your data, you will be told by email.

Children

Wayloom is not meant for children under 13, and doesn't knowingly collect their data.

Changes

When this policy changes, the date at the top changes too. Important changes, such as a new kind of data or a new provider, are announced by email before they apply.