Privacy Policy

What we collect

We collect only what is necessary to provide you with a functional planning experience:

• Account information - your email address and a hashed password (bcrypt, 12 rounds). We never store your password in plain text.
• Trip data - destinations, itineraries, activities, notes, budget entries, and chat messages you create within the app.
• Uploaded files - documents, images, or confirmations you attach to your trips. These are stored privately and are never shared with any third party or AI service.
• OpenAI API key - if you choose to bring your own key, it is encrypted with AES-256-GCM before storage. It is decrypted only when making API calls on your behalf.
• Purchase information - if you buy a Boost pack, payment is processed by Stripe. We store your Boost balance and transaction reference, but we never see or store your payment card details.

What we do not collect

• We use a privacy-focused, self-hosted analytics tool (Umami) that collects no personal data, uses no cookies, and is fully GDPR compliant.
• We do not collect device fingerprints or browsing history.
• We do not sell, rent, or share your data with advertisers.

AI assistant & your data

The AI chat feature uses OpenAI's API. You can power it with a Boost pack (we use our own key on your behalf) or by providing your own OpenAI API key. When you send a message, we include relevant trip context (destination, dates, itinerary) so the assistant can give useful suggestions.

Uploaded files are never sent to the AI. This is a hard technical boundary, not a policy choice. The AI assistant has zero access to your documents, booking confirmations, or any uploaded content.

How we protect your data

• Passwords are hashed with bcrypt (12 rounds) and never stored or logged in plain text.
• API keys are encrypted with AES-256-GCM. The encryption key is stored in server environment variables, never in code or database.
• Authentication uses short-lived JWT access tokens (15 minutes) and longer-lived refresh tokens (7 days).
• All API endpoints require authentication except public pages.
• CORS is configured to allow only the application's own frontend origin.

Payments & third-party services

• Stripe - Boost pack purchases are processed by Stripe. We never receive or store your card number, CVV, or billing details. Stripe handles all payment data under their own privacy policy.
• OpenAI - Chat messages and trip context are sent to OpenAI's API for AI responses. Review OpenAI's privacy policy for how they handle API data.

Mobile companion app

Wanderloom Companion is an optional mobile app that provides offline, read-only access to your trip data. It connects to the same Wanderloom backend and is subject to this same privacy policy, with the following additional details:

• Local storage - Trip data is stored locally on your device in an SQLite database for offline access. This data never leaves your device except during sync with the Wanderloom server.
• Secure credentials - Your login session uses a long-lived, read-only JWT token (90 days) stored in your device's secure keychain (iOS Keychain / Android Keystore).
• Offline files - Documents you download (booking confirmations, tickets, visas) are stored in the app's private directory on your device. They are not accessible to other apps, AI services, or third parties.
• No analytics or tracking - The companion app does not include any analytics SDK, tracking pixels, or telemetry. No usage data is collected.
• Read-only - The companion app cannot create, edit, or delete any data on the Wanderloom server. It only reads and syncs existing trip data.
• Data removal - Signing out of the companion app or deleting the app removes all locally stored trip data and credentials from your device.

Data retention

Your data is retained as long as you have an active account. If you delete a trip, its data is removed. If you wish to delete your account and all associated data, please contact us directly.

Your rights

You have the right to access, correct, or delete your personal data at any time. You can export your trip data, update your profile information, or request full account deletion.

Changes to this policy

We may update this policy as the product evolves. Significant changes will be communicated through the application. The "last updated" date at the top reflects the most recent revision.

Contact

Questions or concerns about your privacy? Reach out at khaldoun.dev.