What we collect
- Account data — your name, email address, and password (stored as a bcrypt hash; we never see the plain text).
- Trip content — destinations, dates, travelers, itineraries, checklists, notes, and any preferences you type in (for example dietary or accessibility notes). This is the product; it's stored so your trips exist.
- Sharing data — the email addresses you invite to a trip, so we can deliver the invitation.
- Documents you upload — hotel confirmations, tickets, and similar files you attach to a trip, stored privately in our cloud storage.
- Quiz scores — your Travel Trivia results, kept for your personal bests.
- Road Notes email list — if you sign up for it, your email address, which page you signed up from, when you signed up and confirmed, and the IP address of the sign-up request (to stop abuse). See Email list below.
- Usage analytics — which pages you visit and which features you use, so we can see where Wanderply is confusing or broken. Signed-in activity is tagged with your account's random ID, never your name or email. Signed-out visitors aren't given a profile at all.
We do not collect contacts or advertising identifiers, and we collect precise device location only if you turn on Commute learning. Apart from that opt-in feature, the mobile apps are thin wrappers around this website and collect nothing extra.
How trip planning uses AI
When you ask Wanderply to build an itinerary or suggest day trips, the trip details you entered (destination, dates, pace, preferences) are sent to our AI providers — currently Anthropic and Perplexity — to generate the plan. These inputs are trip-planning text, not your account credentials. We don't send your email address or password to AI providers.
Cookies
We use a session cookie to keep you signed in and a CSRF token to protect forms. Our analytics provider sets a first-party cookie to recognise repeat visits from the same browser. Our affiliate network (Travelpayouts) may set a cookie to credit bookings made through our travel links. No advertising cookies — there are no ads.
Third-party services
- Hosting & storage — Amazon Web Services (servers, database, file storage) in the United States.
- Email — Amazon SES sends invitations, account emails and Road Notes emails.
- Images — trip and quiz images load from public CDNs (Pexels, Unsplash, Pixabay, Wikimedia, flagcdn, Simple Icons). Those requests carry your IP address like any image load.
- Geocoding — place names on your itinerary (not your location) are looked up via Google Places or OpenStreetMap Nominatim to pin them on maps.
- Affiliate tracking — Travelpayouts (our affiliate network) loads a small script on our pages so that bookings made through our travel links are credited to us. It can see the page you're on, your IP address and browser type, and may set its own cookie. It does not receive your account details, and we never see your payment details on partner sites.
- Product analytics — PostHog records which pages and features are used, so we can fix what's broken. It receives your account's random ID (not your name or email), your IP address, and your browser type. It is not an ad network and we don't sell or share this with one.
Email list (Wanderply Road Notes)
You can join our email list without creating an account. It's double opt-in: after you enter your address we send one confirmation email, and nothing else is sent until you click the link in it. Once confirmed, you'll get new road-trip guides and planning tips — at most two emails a month. Every email has a one-click unsubscribe link, and unsubscribing takes effect immediately. If you never confirm, we send nothing more. We use the list only to send these emails; it is never sold, rented or shared with advertisers. Emails about your own trips (if you have an account) are separate and managed in your account settings.
Commute learning (Android app, opt-in)
Commute learning is off unless you turn it on at Account → Daily commute. When it's on, the Android app records your location during drives only — it notices a drive starting (using location in the background and the phone's activity recognition), shows a notification while it records, and sends us where each drive started and ended, when, how far, and a simplified route of at most 400 points. It never sends a continuous all-day trace. We use it only to learn your everyday places and routes for you: when to leave, where you're probably headed when a drive starts, and favorite places to suggest. Learned places are named from your own shortcuts or, when there's no match, by looking up the coordinates with OpenStreetMap Nominatim. Your drives stay in your Wanderply account; they are never shared, sold or used for advertising, and never sent to our AI providers (the spoken commute briefings are written per topic for everyone and contain nothing about you). Drives are deleted automatically after 90 days. Turning learning off stops recording at once; Delete my drive history on the same page deletes every drive and learned place immediately, and deleting your account deletes them too.
What we never do
- No selling or renting your data. Ever.
- No ads and no ad tracking.
- No reading your trips for anything other than showing them to you and the people you shared them with.
Sharing and visibility
Your trips are private to you and the people you explicitly share them with. If you create a public share link, anyone with that link can view that trip until you revoke the link.
Data retention and deletion
Deleted trips are soft-deleted first (so you can recover from mistakes) and then removed. To delete your account and all of its data, use the account settings or email us — we'll remove it. Unsubscribing from the email list keeps a record that the address opted out (so we never mail it by mistake); to have the address erased entirely, email us.
You can take your data with you at any time: Account → Download my data gives you a JSON copy of your profile, your trips (days, stops, checklists, expenses, the comments and reviews you wrote), your purchases, your quiz history and, if you use commute learning, your drives (start, end, time and length — not the route trace) and learned places.
Children
Wanderply is a general-audience trip planner intended for adults planning family travel. We don't knowingly collect personal information from children under 13; accounts are meant to be created by adults.
Contact
Questions or deletion requests: skchakri@gmail.com.
Changes
If this policy changes materially, we'll update this page and the date at the top.