Privacy Policy | WiseWay

Information WiseWay processes

Depending on the features you choose, WiseWay processes:

account identifiers, including your Supabase user ID and email address;
a versioned, timestamped record that you confirmed you are at least 18 and, for account registration, accepted the Privacy Policy and Terms;
profile data, including display name, avatar, bio, languages, interests, travel style, optional birth date and social preferences;
trip data, including destinations, dates, budget, travellers, preferences, itinerary items and notes;
photos, including avatars, trip covers and travel contribution photos;
social content, including friendships, groups, direct or activity messages, reactions, reports and blocks;
foreground location, city or country when you use nearby discovery or photo verification;
precise route points, timestamps, accuracy, altitude and device-reported speed while you deliberately record a route, including in the background or with the screen locked after you allow that access;
available photo metadata and authenticity signals, including EXIF/GPS information, dimensions, source and moderation status;
notification tokens and preferences, device platform, language, app/build context and bounded operational error data;
Wise Ticket and blueprint balances, generation usage, trial and weekly allowances, bonus and team grants, membership status, XP and levels, and selected backgrounds and avatar frames; historical reward records may be retained for account history. The current release does not accept purchases.

WiseWay asks for background or “Always” location permission only when you start route recording. Recording continues until you pause or finish the route; it is not used for advertising, passive location history or nearby discovery. Uploaded photos are rewritten before storage so original embedded EXIF is removed, but coordinates used for verification may be stored separately.

Why information is used

Information is used to:

create accounts, authenticate users and keep sessions secure;
provide trip planning, budgets, packing, destinations, audio guides and travel memories;
personalise recommendations and generate or edit itineraries when you choose AI-powered features;
enable friends, groups, messaging, sharing, nearby discovery and notifications;
moderate text and photos, investigate reports, enforce blocks and prevent abuse;
operate support, diagnose failures, enforce rate limits and protect the service.

Legal bases

Where GDPR applies, processing is expected to rely on performance of the service contract, legitimate interests in security and service operation, consent for optional permissions and consent-gated OpenAI features, and compliance with legal obligations. The precise legal basis can vary by feature and by the law that applies where you live.

AI-powered features

Optional trip planning, image assistance and live entry-requirement research use OpenAI through Supabase Edge Functions. Before the first OpenAI-backed request, the app presents a named, versioned choice. If you select “Not now”, those requests are blocked. You can later withdraw the choice in Settings → Legal and support → OpenAI consent.

Relevant trip constraints, preferences, place names, edit instructions or images submitted for the optional feature may be sent when the recorded consent state permits it. For a live entry check, this can also include the passport-issuing country and the country and type of residence permits saved in the profile. WiseWay does not collect or send passport or permit numbers or document scans. Provider-specific processing and retention are also governed by the applicable provider terms and data-processing arrangements.

Separately, titles and descriptions of social activities and review comments are sent to OpenAI for content-safety screening when submitted. This safety check runs independently of the optional AI consent choice. Chat messages and chat photos instead use WiseWay’s own server safety rules and are not sent to OpenAI.

This release does not offer voice-note recording or sending and does not request microphone permission. Audio guides are playback-only content and do not use the device microphone.

Photos, location and public content

Pending avatars and travel contributions are stored in private areas. If a travel contribution is approved, a moderated copy and its place attribution may be made publicly available. Exact coordinates used for verification are not shown to ordinary users.

Your social profile may show your approved avatar, display name, bio, level, membership and verification badges, selected frame, and the home city or country you entered in Travel DNA. That home location is not your live GPS position.

Device location is requested in the foreground for a feature that needs it. If you explicitly start route tracking and allow background access, the route keeps recording while the app is in the background or the screen is locked, until you pause or finish it. The operating system displays its location-use indicator. You may deny or revoke either permission, although the related feature may then be unavailable. A saved route is shared only through a feature you deliberately use, such as sharing it with accepted members of its trip.

Who is responsible for your data

WiseWay is operated by Rafayel Vardazaryan, an individual developer established in Greece, at Gr. Lampraki 19, Stavroupoli, Thessaloniki 56429, Greece. Rafayel Vardazaryan is the data controller for the personal information described in this policy.

Privacy and support requests are currently accepted at support@wisewayapp.com.

Messages and social features

Direct messages, activity/group messages, friend relationships, reports, reactions and blocks are stored in Supabase and are restricted by participant, relationship and database access rules. Reports may include related account, message or content context for human review. Notification previews for direct messages do not include the private message body. Chat messages and chat photos are not sent to OpenAI.

Service providers and transfers

WiseWay uses or integrates with:

Supabase for authentication, Postgres database, storage, realtime features and Edge Functions;
OpenAI for optional, consent-gated AI features and for screening submitted activity text and review comments;
Google Places for place search and details;
Expo Push and Apple Push Notification service for optional notifications;
Resend for transactional welcome email;
Wikimedia/Wikipedia for destination imagery and information;
Open-Meteo for weather and geocoding, and the U.S. Department of State service for travel advisories;
Sentry for crash reports and sampled performance diagnostics when enabled in a production build;
a protected WiseWay administration/monitoring service for bounded operational events.

Data may be processed outside your country. Where GDPR applies, WiseWay will use an applicable transfer safeguard, such as an adequacy decision or standard contractual clauses, when one is required.

Analytics, diagnostics and security logs

WiseWay uses Sentry in configured production builds for crash reports, error context and sampled performance diagnostics, including device and app information. Automatic inclusion of default personally identifying data is disabled. WiseWay also sends bounded operational events to its administration service and uses provider logs for reliability and security. This release does not use an advertising SDK or cross-app advertising tracking. Do not include passwords, tokens, document numbers or private messages in a problem report.

Retention and account deletion

Account-linked information is kept while needed to provide and secure the service. In the app, open Profile → Settings → Legal and support → Delete Account and complete both confirmation steps. Deletion removes your account and the linked records and uploaded files handled by the service, including Wise Ticket and blueprint balances. Removing the app from your device does not delete your account.

Some limited security, moderation, delivery, legal or backup records may remain for a justified period and are deleted or anonymised when they are no longer needed. Backup copies may remain until the relevant provider’s normal backup cycle completes.

Your privacy rights

Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing, receive portable data, withdraw consent, and complain to a competent data protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal.

WiseWay may need to verify that a request relates to your account. Contact support@wisewayapp.com.

Children

WiseWay is intended only for people aged 18 or older. Creating an account or continuing as a guest requires an 18+ confirmation. WiseWay does not knowingly permit minors to create or use accounts. A parent or guardian should contact WiseWay if they believe a person under 18 has provided personal information.

Security

WiseWay uses encrypted network transport, authenticated server requests, Row Level Security, private storage areas, rate limits, moderation controls and secure device session storage. No service can guarantee absolute security. Do not send passwords, recovery codes, passport data or payment-card details to support.

Changes and contact

This policy may change as the product, providers or legal obligations change. The last-updated date will be revised when a new version is published. Questions can be sent to support@wisewayapp.com.