Privacy Policy

1. Who we are

Wayfold (旅图) is a travel organizer app made by Zestworks ("we", "us"). This policy explains what the Wayfold apps for iOS and Android and the website at wayfold.zestworks.io collect, why, and the choices you have.

2. What we collect

Your account:

• The email address, display name and profile picture that come with the sign-in method you choose (email and password, Google, or Sign in with Apple — which can hide your real email behind an Apple relay address).
• A user ID assigned by our authentication provider.

Trip content you create, stored in our cloud database so it syncs across your devices and to your companions:

• Trips: name, destination country and city, dates, time zone, budget and members.
• Itinerary items: titles, times, places and addresses, notes, booking status, confirmation numbers and phone numbers you enter or import.
• Expenses and settle-ups: amounts, currencies, categories, who paid, how they are split, and the merchant name for expenses logged automatically from Apple Pay.
• Checklists, saved ideas, travelogue entries, comments, votes and the activity feed of changes within a trip.
• Invite codes you create.
• A count of the trips you create each year, kept by our server for the free plan's yearly limit.

Your travel profile, visible only to you: countries of residence and residency status, the type, issuing country and expiry date of travel documents you add, and home airports. We never collect passport or document numbers.

If you correct the category of an expense logged from Apple Pay, the merchant name and the category you chose, so later payments there are categorised the same way. Kept in your account, visible to you alone.

The version of these Terms and this Privacy Policy you accepted, and when.

If you subscribe to Wayfold Pro: whether your subscription is active, which plan and when it renews or ends, as reported to us by RevenueCat. We never receive your card or other payment details.

Feedback you send from the app, together with your account ID, platform, app version and language.

Technical data our servers receive with each request, such as IP address and request time, used to operate and protect the service.

3. What stays on your phone

These never leave your device and are never uploaded to us:

• Photos and receipt images. Wayfold stores only a reference to the item in your photo library.
• Tickets and PDFs you save in the app.
• Booking screenshots you import. Text is read on your device and the image is not kept; only the details you confirm are saved to the trip.
• Reminder schedules, appearance and other settings.

Wayfold does not request access to your location. The camera is used only to scan an invite QR code; nothing is photographed or stored.

4. How we use data

• To provide the app: sync your trips, share them with the companions you invite, and calculate balances and settle-ups.
• To keep the service secure, enforce rate limits and prevent abuse.
• To answer feedback and support requests and to improve the app.

We do not sell your personal information, use it for advertising, build advertising profiles, or use your trip content to train AI models.

5. Who can see your data

Content in a trip is visible to the members of that trip, and only to people you or another member invite. A viewer can read but not edit. Your travel profile and private checklist items are never visible to companions.

We share data with service providers only as needed to run Wayfold (see Section 6), and with authorities when the law requires it.

6. Service providers

• Google Firebase (Authentication and Cloud Firestore) and Google Cloud Run host your account and trip data and our server, in the United States.
• Google Sign-In, when you choose it, to sign you in.
• Open-Meteo provides weather forecasts. The app sends it only a coarse location of your destination (rounded to about 11 km) — never who you are or your dates.
• Apple MapKit handles place search and maps on iPhone; your search text is sent to Apple. Directions open in the maps app you choose.
• Exchange rates are fetched by our server from the European Central Bank; no personal data is sent.
• RevenueCat manages Wayfold Pro subscriptions on our behalf. It receives your account ID and the purchase records Apple or Google send; Apple and Google process the payment itself.

Each provider handles data under its own privacy policy.

7. Retention and deletion

We keep your data while your account exists. You can delete your account at any time in the app under Me › Delete account, or by following the steps at wayfold.zestworks.io/delete-account. Deleting your account:

• Deletes trips that only you belong to, with everything in them.
• Removes you from shared trips. Ownership passes to another member, and your name is replaced with "Deleted user". Expenses, items and comments you added stay in those trips, because they are part of the group's shared record and settle-up.
• Deletes your travel profile, private checklist, saved ideas, templates and other data stored under your account, and then your sign-in account itself.

Feedback you sent stays linked to your account ID and is kept to help us improve the app; email us to have it deleted. Server logs are kept for a limited period for security.

8. Security

Data is encrypted in transit and at rest by our providers, and access to trip data is enforced by security rules: only a trip's members can read it. No system is perfectly secure, and we cannot guarantee absolute security.

9. Children

Wayfold is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

10. Your rights

Depending on where you live, including under the GDPR and U.S. state laws such as the CCPA/CPRA, you may have the right to access, correct, delete or port your personal information, and to object to or restrict certain processing. You can view and edit most of your data directly in the app and delete your account at any time. For anything else, email us; we respond within 30 days.

We do not "sell" or "share" personal information as those terms are defined under California law, and we will not discriminate against you for exercising your rights.

11. International transfers

Our providers store and process data in the United States. By using Wayfold you understand that your data may be processed outside your country, under safeguards required by applicable law.

12. Changes to this policy

We will update this page and its effective date when this policy changes, and tell you in the app about material changes.

13. Contact

Questions or requests: support@zestworks.io, or Me › Send feedback in the app.