Privacy Policy
1. Information we collect
| Category | Examples | Why we use it |
|---|---|---|
| Account and authentication | Email address, internal user ID, authentication provider, verification status, session information and account settings. | To create and secure your account, sign you in, verify your email, recover access and manage sessions. |
| Profile information | Username, bio, profile image, traveller type, country or city, privacy setting and messaging preferences. | To display and personalise your profile and apply your privacy choices. |
| Content and activity | Posts, captions, photos, videos, thumbnails, comments, likes, saved posts, follows, follow requests and search activity. | To provide sharing, discovery and social features. |
| Communications | Private messages and related conversation information. | To deliver direct messaging and maintain conversation history. |
| Safety and moderation | Blocks, reports, reported content, reasons, additional details, moderation status, bug reports and feedback. | To enforce rules, investigate abuse, protect users and improve reliability. |
| Location information | Optional device location used to suggest a country or city, and country or city information you select for your profile or posts. | To help you add relevant place information and discover local travel content. |
| Technical and security information | Request timestamps, network or IP information, error and operational logs, rate-limit events and other information needed to prevent abuse and keep the service working. | To secure, troubleshoot and operate Waythread. |
We collect information you provide, information created when you use Waythread, and limited technical information processed automatically by the app and our service providers. If you sign in through Apple or Google, we receive the information that provider makes available according to your choices and its policies.
2. Location, photos and videos
Location access is optional. If you choose “Use my location”, Waythread uses Apple location and geocoding services to suggest coarse place information such as a country or city. A country or city you select may be stored with your profile or content. Waythread is not designed to publish your precise GPS coordinates.
You may also choose photos or videos to upload as a profile image or post. Waythread only accesses media you select or otherwise permit through iOS. You can change device permissions in iOS Settings.
3. How and why we use information
Depending on the context, we rely on the following UK data-protection grounds:
- Contract: to create your account and provide the features you request, including profiles, posts, follows and messaging.
- Legitimate interests: to keep Waythread secure and reliable, prevent fraud and abuse, moderate content, enforce community rules and make limited service improvements. We balance these interests against users’ rights.
- Consent: where you choose to grant optional device permissions or where consent is otherwise required. You can withdraw a device permission in iOS Settings.
- Legal obligations: where processing is necessary to comply with applicable law or respond to a valid legal request.
4. Who can see your information
Your username, profile details, profile image, posts and comments may be visible to other users according to the feature and your privacy settings. If your profile is private, Waythread applies access controls to restrict private profile and post access to approved users. Private messages are intended only for conversation participants.
Reports, moderation information and restricted account information are intended for authorised moderation and service operations. No online service can prevent another person from saving or sharing information they are legitimately able to view, so avoid posting information you do not want others to retain.
5. When we share information
We share information only as needed to provide, protect and operate Waythread, including with:
- Supabase: authentication, database hosting, file storage, real-time features and server functions. Waythread’s Supabase project is hosted in an EU region.
- Apple: App Store and TestFlight distribution, device permissions and location/geocoding services, and Sign in with Apple if you choose it.
- Google: Sign in with Google if you choose it.
- Email delivery providers: to send verification, password and account-related emails.
- Authorities or professional advisers: where reasonably necessary to comply with law, protect rights and safety, or establish or defend legal claims.
Waythread does not currently sell personal information or share it for cross-app tracking or targeted advertising.
6. International transfers
Although Waythread’s main database and storage are hosted in the European Union, some providers may process information in the United Kingdom, European Economic Area, United States or other countries. Where required, we use recognised safeguards such as adequacy regulations or approved contractual protections. Contact us if you would like more information about safeguards relevant to your information.
7. How long we keep information
We generally retain account information and content while your account is active and for as long as needed to provide the relevant feature. If you delete particular content, we remove it from active use through the applicable deletion process, subject to short-lived caches, technical completion and lawful exceptions.
If you delete your account, Waythread is designed to delete the account and associated profile, posts, media, comments, social relationships, messages and other account-linked information. Reports associated with deleted accounts or deleted content are also removed under the current release policy. Deleted information may remain temporarily in technical backups or infrastructure copies where they exist, until those copies are overwritten or securely deleted according to the applicable provider’s retention and deletion processes. Essential security and operational logs may be retained for as long as reasonably necessary for security, troubleshooting, abuse prevention, legal compliance and dispute resolution. We may retain limited information for longer where law, fraud prevention, safety or dispute resolution requires it.
8. Local storage and security
Waythread may keep limited app preferences and an offline message cache on your device. The message cache uses iOS file protection and is separated and cleared by account where required. Private post media is delivered using time-limited access links; a link already issued may continue to work until it expires.
We use measures including encrypted transport, account authentication, database access controls, private storage, time-limited media links and session-bound operations. No security system is perfect, and we cannot guarantee absolute security.
9. Who is responsible for your information
Waythread is the operator responsible for personal information processed through the Waythread app and service.
Privacy enquiries and data-protection requests can be sent to waythreadapp@gmail.com.
10. Your choices and rights
Depending on your circumstances, UK data-protection law may give you the right to:
- ask for access to a copy of your personal information;
- correct inaccurate or incomplete information;
- ask us to delete or restrict use of your information;
- object to processing based on legitimate interests;
- receive certain information in a portable format; and
- withdraw consent where processing relies on consent.
You can edit certain profile information and privacy choices in the app and can request account deletion through Waythread. To exercise another right, contact waythreadapp@gmail.com. We may need to verify your identity before completing a request.
You may complain to the UK Information Commissioner’s Office through ico.org.uk. We would appreciate the opportunity to address your concern first.
11. Children
Waythread is intended only for people aged 18 or over, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has created an account contrary to this policy, contact us so we can investigate and take appropriate action. Waythread is available in countries and regions where we make it available through the App Store and may be restricted where required by law or operational considerations.
12. Automated decisions
Waythread uses automated operational controls such as rate limits and access rules. It does not currently make decisions based solely on automated processing that have legal or similarly significant effects on users.
13. Changes to this policy
We may update this policy when Waythread’s features, providers or legal obligations change. We will update the date at the top and provide additional notice where a change materially affects users’ rights or choices.
14. Contact
For privacy questions or requests, email waythreadapp@gmail.com.