Privacy Policy

Effective: 23 September 2026 · Last updated: 23 September 2026

In short: Waythread collects the information needed to create accounts, provide travel-sharing and community features, manage optional Waythread Plus subscriptions, protect users and operate the service. Waythread does not sell personal information, use it for cross-app tracking or serve targeted advertising.

1. What information do we collect?

We collect personal information that you provide to us, information created when you use Waythread, and limited technical information processed automatically by the app and our service providers.

Category	Examples	Why we use it
Account and authentication	Email address, internal user ID, authentication provider, verification status, session information and account settings. Apple or Google may provide limited account information when you choose those sign-in methods.	To create and secure your account, sign you in, verify your email, recover access and manage sessions.
Profile information	Username, bio, profile image, traveller type, country or city, country of residence, privacy setting and messaging preferences.	To display and personalise your profile and apply your privacy choices.
Content and activity	Posts, captions, photos, videos, thumbnails, comments, likes, saved posts, follows, follow requests and search activity.	To provide sharing, discovery and social features.
Communications and support	Private messages, conversation information, support requests, bug reports, feedback and information included in reports.	To deliver communications, respond to requests, investigate problems and protect users.
Safety and moderation	Blocks, reports, reported content, report reasons, additional details and moderation status.	To enforce our rules, investigate abuse, prevent fraud and keep Waythread safe.
Location information	Optional device location used briefly to suggest a country or city, and country or city information you select for your profile or posts.	To suggest relevant place information and show travel content by country or city.
Technical and security information	Request timestamps, network or IP information, error and operational logs, rate-limit events, push-notification device tokens and other information needed to keep the service working.	To secure, troubleshoot and operate Waythread.
Subscriptions and purchase status	Waythread Plus product, subscription, entitlement and transaction-related information supplied by Apple or RevenueCat. Waythread does not receive your full payment-card number or security code from Apple.	To provide paid features, manage entitlements, restore purchases, prevent fraud and handle billing-related support.

Sensitive information

Waythread does not intentionally request sensitive categories such as government identification numbers, financial account details, health information, biometric data, racial or ethnic origin, religious or political beliefs, sexual orientation, trade-union membership or genetic information. Users should not post sensitive information about themselves or others. Information voluntarily included in user content may still be visible according to the feature and privacy settings.

Payment data

Apple processes App Store payments for Waythread Plus, and RevenueCat manages subscription status and entitlements. Waythread does not ask you to provide or receive your full payment-card number or payment security code. Apple’s and RevenueCat’s own privacy notices apply to their processing.

Application data

Location access is optional. If you choose “Use my location”, Waythread uses Apple location and geocoding services to suggest coarse place information such as a country or city. Waythread is not designed to publish your precise GPS coordinates.

You may choose photos or videos to upload as a profile image or post. Waythread only accesses media you select or otherwise permit through iOS. You can change device permissions in iOS Settings. We may request permission to send push notifications; you can change that choice in iOS Settings.

Information from other sources

We may receive limited information from Apple or Google when you use their sign-in services, from RevenueCat about subscription entitlements, and from you when you contact support. We do not use public databases, marketing partners, affiliate programmes or social-media advertising platforms to build user profiles.

2. How do we process your information?

We process personal information only for the purposes described in this policy and other purposes made clear to you when information is collected. The purposes and general retention periods are:

Account creation and authentication: to create accounts, sign users in, verify email addresses, recover access and manage sessions. Retention: while the account is active; after deletion, until deletion is complete, subject to temporary backups and information retained as reasonably necessary for security, legal compliance, abuse prevention and dispute resolution.
Delivery of services: to provide profiles, posts, media, discovery, follows and other requested features. Retention: while the account is active and while needed to provide the requested features. Deleted content is removed from active use after deletion, subject to backups and lawful exceptions.
User-to-user communications: to provide private messages and related conversation features. Retention: while the account and relevant conversation remain active. After account or message deletion, information may remain temporarily in backups or where needed for security, legal or dispute-resolution purposes.
Support and inquiries: to respond to questions, bug reports, privacy requests and safety reports. Retention: until the inquiry is resolved and for as long as reasonably necessary for follow-up, legal compliance or dispute resolution.
Administrative information: to send verification messages, security notices, service messages and changes to terms or policies. Retention: while the account is active and as long as reasonably necessary to provide service notices, security messages and legally required communications.
Subscriptions and purchases: to fulfil and manage Waythread Plus subscriptions, restore purchases, manage entitlements and address billing-related questions. Retention: while the subscription or account is active and as long as reasonably necessary for entitlement management, refunds, legal obligations, fraud prevention and dispute resolution, subject to provider retention periods.
Feedback and service improvement: to request feedback and make limited improvements to Waythread. Retention: until feedback has been reviewed and for as long as reasonably necessary for service improvement and record keeping.
Security and abuse prevention: to detect spam, enforce rate limits, investigate reports, prevent fraud and protect users. Retention: for as long as reasonably necessary for security, troubleshooting, abuse prevention, legal compliance and dispute resolution.
Content personalisation and location features: to show relevant content by country or city and suggest locations when you choose to use location.
Vital interests: where reasonably necessary to protect someone from serious harm or respond to an urgent safety situation.

3. What legal bases do we rely on?

If you are in the EEA, the UK or another jurisdiction that requires a legal basis, we may rely on:

Performance of a contract: to create your account and provide the features and services you request.
Consent: where you choose optional location or notification permissions, or where consent is otherwise required. You can withdraw consent by changing the relevant device permission or contacting us.
Legitimate interests: to keep Waythread secure and reliable, prevent fraud and abuse, moderate content, enforce community rules, respond to feedback and make limited service improvements. We balance these interests against your rights and expectations.
Legal obligations: to comply with applicable law, valid legal requests and record-keeping duties, or to establish, exercise or defend legal claims.
Vital interests: where necessary to protect the life or safety of a person.

In Canada, we may rely on express or implied consent where permitted. Applicable Canadian law may also permit processing without consent in circumstances such as fraud prevention, investigations, legal claims, business transactions, emergencies, compliance with legal process, or where information is publicly available. We may use de-identified information for limited research or statistics where permitted and subject to appropriate safeguards.

4. When and with whom do we share information?

We disclose information to service providers that perform work for Waythread and need access to do that work. They are expected to protect the information and use it only for the instructed service, subject to their applicable terms and agreements.

Supabase: authentication, database hosting, file storage, real-time features and server functions.
Apple: App Store and TestFlight distribution, Sign in with Apple, device permissions, location and geocoding services, and App Store payment processing.
Google: Sign in with Google when you choose it.
Resend: delivery of verification, password and account-related emails.
RevenueCat: subscription and entitlement management for Waythread Plus.
Cloudflare Pages: hosting for Waythread’s legal and support webpages.
OpenAI (ChatGPT and Codex): development, administration, debugging and support tools. Where Waythread information is made available to these tools, they may process it for the instructed operational purpose. These tools are not used for targeted advertising, hidden profiling or legally significant automated decisions.
Authorities and professional advisers: where reasonably necessary to comply with law, protect rights and safety, or establish or defend legal claims.

We may also disclose information in connection with a merger, acquisition, financing, sale of assets or other transfer of all or part of the business, subject to applicable law.

Other users

Your username, profile details, profile image, posts, comments, likes, follows and selected country or city may be visible to other users according to the feature and your privacy settings. Private messages are intended for the conversation participants. No online service can prevent a person from saving or sharing information they are legitimately able to view.

Waythread does not sell personal information and does not share it for cross-app tracking or targeted advertising. We have not sold or shared personal information for those purposes in the preceding twelve months.

5. How do we handle social logins?

Waythread may allow you to register or sign in with Apple or Google. If you choose one of those options, we receive the limited profile or authentication information that provider makes available according to your choices and its privacy policy. We do not offer Facebook or X sign-in. We do not control how Apple or Google use information under their own services.

6. Is your information transferred internationally?

Our providers may process, store or receive personal information in Ireland, the United States, the EEA, the UK and other countries. This includes infrastructure and service-provider facilities used to operate Waythread, send email, manage subscriptions, host legal pages and provide development or support tools.

Where required, we use recognised safeguards such as adequacy regulations or the European Commission’s Standard Contractual Clauses and other approved contractual protections. We can provide further information about relevant safeguards upon request.

7. How long do we keep your information?

We keep personal information only for as long as reasonably necessary for the purposes in this policy, unless a longer period is required or permitted by law. The purpose-specific retention periods are described in section 2.

If you delete content or your account, we remove it from active systems when deletion is complete. Information may remain temporarily in backups or infrastructure copies until those copies are overwritten or securely deleted. Essential security and operational logs may be retained as reasonably necessary for security, troubleshooting, abuse prevention, legal compliance and dispute resolution.

8. How do we keep your information safe?

We use reasonable technical and organisational measures, including encrypted transport, account authentication, database access controls, private storage, time-limited media links, session-bound operations and iOS file protection for applicable local data. No electronic transmission or storage system can be guaranteed to be completely secure, so you should use the Services in a secure environment and avoid sending passwords, verification codes or access tokens to support.

9. Do we collect information from minors?

Waythread is intended only for people aged 18 or over. We do not knowingly collect, solicit or market to anyone under 18, and we do not knowingly sell their personal information. If we learn that someone under 18 has created an account, we will investigate, deactivate the account where appropriate and take reasonable steps to delete the information. Contact us at waythreadapp@gmail.com if you believe this has happened.

10. What are your privacy rights?

Depending on where you live, you may have rights to access, correct, delete or restrict use of your personal information; receive a portable copy; object to processing based on legitimate interests; withdraw consent; and avoid solely automated decisions with legal or similarly significant effects. These rights are subject to applicable-law limits.

You can edit profile information through Profile → Edit Profile and delete your account through Profile → Settings → Account → Delete Account. You can also email waythreadapp@gmail.com or use our support page.

Requests, verification and appeals

We may verify your identity before completing a request and will use information supplied in the request for verification, security and fraud-prevention purposes. Where permitted by law, you may use an authorised agent; we may require proof of authority.

If we decline to act on a request where an appeal right applies, you may appeal by emailing waythreadapp@gmail.com. We will provide a written explanation of the outcome where required by law.

UK residents may complain to the Information Commissioner’s Office. EEA residents may contact their local data-protection authority, and Swiss residents may contact the Federal Data Protection and Information Commissioner. We would appreciate the opportunity to address your concern first.

11. Controls for do-not-track features

Waythread does not currently respond to browser or mobile Do-Not-Track signals. Waythread does not use cookies or online tracking technologies for targeted advertising or cross-app tracking.

12. United States privacy rights

This section is intended to address applicable rights for residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. Residents of states with applicable privacy laws may have rights to know whether we process their information, access it, correct inaccuracies, request deletion, obtain a copy, appeal a decision and receive equal treatment for exercising their rights. Depending on the state, additional rights may include access to categories of information and third parties, opting out of sale, targeted advertising or certain profiling, limiting sensitive-data use and opting out of voice or facial-recognition processing.

Waythread does not sell personal information, use targeted advertising or make legal or similarly significant decisions through profiling. Requests and appeals can be sent to waythreadapp@gmail.com.

Categories collected and disclosed

Category	Collected or processed	Examples
Identifiers	Yes	Email address, username, account ID, IP address and other online identifiers.
California Customer Records information	No	We do not intentionally collect legal names, postal addresses, telephone numbers, government IDs, bank details or health information as customer-record fields.
Protected characteristics	Yes	Traveller type, country or city and country of residence where supplied or displayed in the app.
Commercial information	Yes	Waythread Plus subscription, purchase and entitlement status.
Biometric information	No	Waythread does not collect fingerprints, Face ID data or voiceprints.
Internet or network activity	Yes	Search activity, app interactions, IP or network information and security events.
Geolocation	Yes	Precise device location used briefly to suggest a country or city; selected country or city may be stored.
Audio, electronic, visual or similar information	Yes	Photos, videos and other user content uploaded to profiles or posts.
Professional or employment information	No	Not requested as a profile or service field.
Education information	No	Not requested as a profile or service field.
Inferences	No	We do not create consumer profiles from inferred preferences or characteristics.
Sensitive personal information	No	Not intentionally requested as a category.

We disclose these categories to the service providers listed in section 4 only as needed to operate Waythread. We have not sold or shared them for targeted advertising or cross-app tracking.

California Shine the Light

California residents may request information about categories of personal information disclosed to third parties for direct-marketing purposes and the names and addresses of those third parties. Waythread does not disclose personal information for direct marketing, but requests may be sent to waythreadapp@gmail.com.

13. Other regions

Australia and New Zealand

We aim to handle personal information consistently with the Australian Privacy Act 1988 and New Zealand Privacy Act 2020 where they apply. You may request access to or correction of your information by contacting us. You may complain to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.

South Africa

Where South Africa’s privacy laws apply, you may request access to or correction of your information by contacting us. You may complain to the Information Regulator of South Africa.

14. Do we make updates to this notice?

We may update this Privacy Policy when Waythread’s features, providers, data practices or legal obligations change. We will update the date at the top and provide additional notice where a change materially affects users’ rights or choices.

15. How can you contact us?

Waythread is operated by Rishi Sroay, trading as Waythread. For questions, privacy requests, appeals or complaints, email waythreadapp@gmail.com or visit our support page. No postal address is provided in this policy.

16. How can you review, update or delete your information?

To review, update or delete personal information, use the account controls described above or contact waythreadapp@gmail.com. We may need to verify your identity before acting. We will consider and respond to requests in accordance with applicable law.