Who we are
Wandror is operated by Chaitanya Rana. For anything in this policy — questions, access requests, deletion — contact privacy@wandror.com.
What we collect
Account
You sign in with Google. We receive and store your Google account identifier, email address, name and profile photo URL. We never see or store your Google password.
Profile you choose to fill in
Username, bio, interests, gender, date of birth, home city, current city, preferred currency and — if you use expense settle-up — your UPI ID. You can leave these empty, apart from the username needed to finish onboarding.
If you verify a phone number or an additional email address, we store it along with the time it was verified and the IP address the verification was requested from.
Location
With your permission, Wandror uses your location for features that depend on it: unlocking a destination’s Live community when you are inside its radius, showing nearby destinations, and stamping your travel passport. We store your current coordinates, your home coordinates if you set a home city, and a presence record of which destination you are in and when you arrived and were last seen.
You can deny or revoke location permission in your device settings. Features that depend on it stop working; the rest of the app does not.
Things you create
Trips, destinations, itineraries, packing lists, checklists, budgets, expenses and their splits and settlements, chat messages in direct and group conversations, polls, collections, bucket lists, place reviews, journey notes and game results.
Content you put in a shared trip or group is visible to the other people in it. That is the point of the feature, and it is not something we can undo for you afterwards.
Photos, videos and documents
Photos and videos you upload to a trip, and files you put in a trip vault or your identity-document store, are stored on our file storage provider. We keep the file name, type, size and a storage key alongside them.
Device and diagnostics
A push notification token for each device you sign in on, so we can deliver notifications. If the app hits an error, it may send a diagnostic report containing the error, the screen it happened on, your app version and platform.
We also record product usage events — which features are used and how often — to understand what to build and to track what third-party services cost us.
Forwarded bookings
If you forward a booking confirmation to Wandror’s booking inbox, we receive and store that email and any attached document in order to extract the trip details.
What stays on your device
Your photo library’s location data is never uploaded. When Wandror builds past-trip passport stamps from your photo library, it reads the date and location tags on your photos on the device and works out where and when you travelled there. The coordinates themselves are never part of any request — the code that builds these claims has no field that could carry them.
What does reach us for a past-trip claim is the conclusion and the evidence for it: the destination being claimed, the month, how many photos supported it, how many had location tags, how many distinct days and hours they span, the typical accuracy of those tags, and the camera identifiers involved. Enough to tell a real trip from a guess, without the trail of where you were.
Photos are only uploaded when you deliberately add them to a trip or a chat.
How we use it
- To run the features you are using — trips, chat, expenses, passport, Live communities.
- To show your profile and activity to the people you travel with.
- To send notifications about things that involve you.
- To generate itineraries and suggestions, which involves sending the relevant trip details to our AI provider.
- To fix crashes and bugs.
- To understand which features get used, and what our service costs.
We do not sell your personal information, and we do not run advertising.
Who else processes your data
These providers handle data on our behalf, only to deliver the service:
| PROVIDER | WHAT IT HANDLES |
|---|---|
| Sign-in; place and destination information; AI itinerary and suggestion generation | |
| Backblaze B2 | Stored photos, videos, trip vault files and identity documents |
| Expo, Apple and Google | Delivery of push notifications to your device |
| Railway | Application hosting and the database |
| Mailgun | Email we send to you, and forwarded booking emails |
| MSG91 | SMS one-time codes, where phone verification is used |
Data travels to and from the app over encrypted HTTPS connections.
Your choices
- Location, photos, camera, notifications — granted and revoked in your device settings at any time.
- Read receipts — switch off in Settings. Your ticks stop reaching the other person, and theirs stop reaching you.
- Profile fields — edit or clear them whenever you like.
- Leaving a trip or group — stops new content being shared with you there.
Getting your data deleted
Delete your account yourself from Profile → Settings → Delete account in the app — it happens immediately. If you cannot open the app, email privacy@wandror.com from the address your account uses and ask us to delete it. Either way we delete your account, your profile, your uploaded files and the content you created. Full details: how to delete your account.
Two honest limits. Messages you sent into a shared conversation remain visible to the people you sent them to, in the same way a sent message does anywhere. And records we are required to keep, or that no longer identify you, may be retained.
Children
Wandror is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has given us personal information, contact us and we will remove it.
Changes to this policy
If we change this policy we will update the date at the top. If a change materially affects what we collect or who we share it with, we will tell you in the app.
Contact
Questions, access requests or deletion: write to us any time.