Privacy Policy

Your account. An email address, and a password if you set one — passwords are handled by our authentication provider and stored hashed, so nobody at Wandr can read yours. If you sign in with Google or with Apple instead, we receive the email address and basic profile details that provider returns to complete the sign-in.

Your profile. Your name, date of birth, gender, nationality, bio, interests, an optional Instagram handle, your profile photo and gallery photos, and your answers to profile prompts — which may include short voice recordings if you choose to record one instead of typing.

Your travel plans. The destinations and dates of the trips you add. This is the core of the product: it is what we compare against other travellers to suggest people to meet.

What you share. Posts, daily Wandr moments, photos and captions, and the direct and group messages you send — including any photos or files you attach to a conversation.

Push notification tokens. In the iOS app, after you log in and grant notification permission, we store the push token your device issues so we can notify you about matches and friend activity. We do not ask for this on first launch, and declining costs you nothing else.

Safety records. The blocks you apply and the reports you submit, including the reason you selected and anything you typed.

The waitlist. If you ask to join the waitlist from the website while signed out, we store the email address you enter and where the visit came from, so we know how you found us and can send you an invitation.

Location. In the iOS app, the Feed may ask for a low-accuracy location fix to sort nearby content. The coordinates are processed only on your device for the current app session: Wandr does not transmit or store them. You can decline or revoke permission and continue using destination-based discovery.

Our providers may process information outside your province or country, where it can be subject to the laws of that place. We limit provider access to operating the services described above and use contractual, access-control and encryption safeguards appropriate to the information. Contact us if you want details about the current processing regions or service providers that apply to your account.

• ·No third-party analytics, advertising or tracking SDKs. There are none in the app.
• ·No selling or renting your personal information to anyone.
• ·No advertising profiles, and no sharing your data with advertisers.
• ·No cookies beyond the ones that keep you signed in.

Wandr sets only the cookies that keep you signed in. They are strictly necessary — the app cannot work without them — which is why you do not see a cookie consent banner: there is nothing optional to consent to. There are no analytics, advertising or tracking cookies. If that ever changes, this section and this page’s date will change first, and anything optional will ask before it runs.

We use the following providers to operate Wandr:

• ·Supabase — the database, authentication, and the storage buckets holding your uploads: avatars (profile photos), feed (posts and moments), photos (prompt photos and voice recordings) and chat-media, a private bucket for conversation attachments that only the people in that conversation can read.
• ·Vercel — hosting and serving the app itself.
• ·Google and Apple — only if you choose to sign in with them, and only for the sign-in itself.
• ·Apple Push Notification service — delivery of iOS notifications when you enable them.
• ·Resend — delivery of waitlist confirmation and invitation email.
• ·Apple iTunes Search — music searches entered in the post composer are relayed to Apple to return track information.

Other travellers see your public profile: your name, photos, bio, interests, nationality, prompt answers and your age. They do not see your email address, and they do not see your date of birth — the public profile returns only an age derived from it. Your raw date and email are returned only to you for account editing and data export, or to tightly restricted administrators when required for support or safety.

Posts, media, Wandr moments, profile information, and the destinations and dates on your trips are visible to anyone signed in to Wandr — discovery is app-wide, not limited to your connections — except to people you have blocked. Wandr is invite-only, so that audience is bounded, but treat a post as visible to every member. Messages are the opposite: only the people in that conversation can read them. Your public-profile setting in Settings controls whether people can add you instantly or have to send a request you approve.

• ·Edit or remove anything on your profile, and delete posts you have shared.
• ·Block anyone from their profile. They disappear from your feed, your discovery deck and your messages, and cannot reach you.
• ·Report a person or a post from anywhere you can see them. Reporting also offers to block them in the same step.
• ·Turn push notifications off in your device settings at any time.
• ·Use Settings → Export my data to download a machine-readable copy of your account data, including content you authored and your account relationships.
• ·Delete your entire account from inside the app — see below.

Open Settings → Delete account. You will be asked to type your own email address exactly; the button stays disabled until it matches, and the server checks the same thing again before doing anything, so a stray tap cannot erase your account.

Once confirmed, deletion is immediate and permanent. There is no grace period, no soft-delete and no way to restore it. It removes your profile, trips, posts and moments, matches, messages, and files you uploaded across all four storage buckets. If file cleanup cannot complete, deletion stops and asks you to retry rather than claiming the files are gone. Backups held by our infrastructure providers age out on their own schedules.

Account content is kept while your account exists. Deleting the account removes active records immediately; infrastructure backups expire under the providers’ configured backup schedules. Open safety reports are retained while they are reviewed and may be retained afterward when necessary to document abuse or meet legal obligations. Waitlist entries are kept until you are invited or ask us to remove yours.

Wandr is for adults. You must be 18 or older to use it. This is enforced in the database, not just in the interface: a profile cannot be completed without a date of birth, and a date of birth under 18 years old is rejected outright. Wandr is not directed at children and we do not knowingly collect information from anyone under 18.

If we change this policy we will update the date at the top of this page, and we will tell you in the app when the change is significant — new categories of data, or a new provider.

Questions, correction or access requests, consent withdrawal, deletion requests, or privacy complaints: email support@wandrapp.ca. The person responsible for privacy at Wandr will investigate and explain the outcome. You may also contact the privacy regulator that applies where you live.