Privacy Policy

Wayfound (“we,” “us,” or “our”) is a travel discovery application that helps users find travel experiences matched to their personality and preferences. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and application (collectively, the “Service”).

Account information: Your email address, collected via Firebase Authentication, to identify you and secure your data. If you subscribe to Voyager, Stripe collects your billing details directly — we do not store your full card number.

Information you provide: Name, travel style preferences, axis weights, search queries, saved trips and options, notes, and any messages you send us through customer support.

Information collected automatically: Device information (browser type, operating system, screen resolution), IP address, log data, and usage activity (searches, saves, rejects, and interactions with “Ask Wayfound”). With your consent, we also use Google Analytics (Firebase) to understand aggregate, pseudonymous usage patterns — see “Cookies, Tracking & Your Choices” below.

AI & third-party inputs: Your search queries and profile preferences are sent to Google's Gemini API, which scores, matches, and ranks travel options on our behalf.

Affiliate tracking technologies: When you click through to book a travel option, cookies and tracking technologies provided by our affiliate partners may record referral metadata so we can be credited for the referral. See “Cookies, Tracking & Your Choices” below.

Automated profiling: We use algorithmic and AI-based processing to personalize the options we show you. This processing does not produce legal or similarly significant effects — it only shapes which travel options you see and how they're ranked.

Explicit recalibration: When your saves, rejects, and searches suggest a meaningful shift in your preferences, we ask whether you'd like to recalibrate your profile. We do not change your core profile settings without your affirmative choice.

If you're located in the EEA or UK, here's the legal basis we rely on for each category of processing:

Google Cloud & Firebase: We use Google Cloud Run and Firestore, hosted in the United States, to run the app and store your account data. Google processes this data on our behalf according to their Privacy Policy.

Google Gemini API: Used to process searches and score travel options, per the same policy above.

Google Analytics (Firebase): With your consent, we use Google Analytics via Firebase to measure feature usage and traffic in aggregate. It sets its own cookies and collects device and usage data along with a pseudonymous identifier. We have also linked Google Analytics to Google BigQuery (a Google Cloud service) so we can analyze this usage data internally. This processing is governed by Google's Privacy Policy linked above, and data is processed in the United States.

Stripe: Processes payments and stores billing details directly if you subscribe to Voyager. Governed by their Privacy Policy.

Affiliate & travel partners: When you click a “Book” link, tracking parameters (such as a partner ID and a click identifier) are passed to the destination platform — currently Viator, for tours and activities — so a resulting booking can be attributed to us. We may earn a commission, which never affects the price you pay.

We do not sell your personal information for monetary compensation.

Essential cookies: Required for the app to function — keeping you signed in and maintaining your session. These are not optional and aren't affected by your cookie choice, since the app can't work without them.

Analytics & affiliate cookies: With your consent, we use cookies for product analytics (Google Analytics via Firebase) and for affiliate booking attribution. These are only set after you accept via the cookie banner shown on your first visit, and are never set beforehand. You can change your choice at any time using the “Cookie preferences” link in the footer, or by adjusting your browser settings to block non-essential cookies; changes apply going forward.

Some of our service providers process data outside your home country, including in the United States. Where that happens, we rely on their Standard Contractual Clauses approved by the European Commission, or their certification under the US-EU/UK Data Privacy Framework, to protect your data in transit and at rest.

Deleting your account: Go to Settings → Account → Delete account. This immediately and permanently deletes your profile, trips, saved options, notes, and account record, and cancels any active Voyager subscription. This is not a queued request — it happens right away and cannot be undone. If you'd rather we handle it for you, or you run into an issue, email support@gowayfound.com.

Anonymized data: We may retain anonymized, aggregated usage data (not tied to your identity) after account deletion, to improve the service.

Billing records: Independently retained by Stripe per their own retention policy, for tax and accounting purposes.

We use transport-layer encryption (HTTPS/TLS) for data in transit, and enforce strict per-user access controls at the application layer across our Cloud Run and Firestore environments, so your data is only ever readable through your own authenticated account. No method of electronic transmission or storage is 100% secure.

Depending on where you live, you may have the right to: access or know what personal information we hold about you; request deletion of your data; request correction of inaccurate data; opt out of “sharing” for cross-context behavioral advertising; and not be discriminated against for exercising any of these rights.

Opting out of analytics and affiliate tracking: Under California law, passing referral data to our affiliate network may be classified as “sharing” for cross-context behavioral advertising. You can opt out at any time using the “Cookie preferences” link in the footer, which lets you reject non-essential cookies — this disables both Google Analytics and affiliate tracking.

To exercise any of these rights, email support@gowayfound.com. We'll respond within 30 days (or 45 days for California requests under the CCPA).

Wayfound is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information, please contact us so we can delete it.

Questions about this Privacy Policy or our data practices? Email us at support@gowayfound.com.