Profile

Privacy Notice

Last updated: September 2026

1. Controller

Wayfinder Travel is the data controller for the personal data processed through the Wayfinder app and website. This notice explains what we collect, why, and the rights you have.

2. Data we collect and why

  • Account data (name, email, login credentials, profile picture from your sign-in provider) — to create and secure your account. Legal basis: contract performance.
  • Preferences (language, currency, travel interests, saved guides, favourite cities) — to provide and personalise the Service. Legal basis: contract performance.
  • Purchase records (products bought, unlock status, subscription period) — to grant you access to paid content and provide support. Legal basis: contract performance and legal obligation. Payment card data itself is collected and processed by Paddle, our Merchant of Record, not by us.
  • Support messages — to answer your requests. Legal basis: legitimate interests.
  • Usage and device data (pages viewed, app interactions, device type, IP address) — for security, fraud prevention and product improvement. Legal basis: legitimate interests and, where required, consent.

3. Who we share data with

  • Service providers and subprocessors (hosting, analytics, support tooling);
  • Paddle, our Merchant of Record, for the sale of our products, subscription management, payments, tax compliance and invoicing;
  • Professional advisers (legal, accounting) where necessary;
  • Authorities where required by law.

4. International transfers

Some providers process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. Retention

We keep personal data for as long as your account is active and as needed for legal, tax and accounting obligations, after which it is deleted or anonymised.

6. Your rights

Depending on your country, you have the right to access, rectify or erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. UK/EEA users can also complain to their supervisory authority; we respond to requests within one month. To exercise any right, contact us through the Profile section of the app.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit and access controls, to protect your data.

8. Cookies and local storage

We use essential storage to keep you signed in and remember your preferences (language, theme, saved guides). Where analytics or marketing cookies are used, you can manage your preferences through your browser settings.