# Privacy policy | Wanderair > How Wanderair handles launch-update signups, website requests and mobile app information, and how to exercise your privacy rights. Last updated: 2026-10-28 ## About this policy These notices apply to Wanderair (“we”, “us”). For support, questions or privacy requests, email [levente@nagylevi.dev](mailto:levente@nagylevi.dev). This policy explains how we handle information when you visit wanderair.app, request launch updates, contact us or use the Wanderair mobile app. Some app features are still in development. We process feature-specific information only when you use that feature. ## Launch updates and support For launch updates, we collect your email address, an optional city, the signup time and a record of the consent wording. We use these to maintain the list and send the updates you requested. The legal basis is your consent. You can withdraw it at any time by emailing us or replying to an update; this does not affect earlier lawful processing. If you contact us, we use your message and contact information to respond and resolve your request. Please do not send payment-card details or other unnecessary sensitive information. ## Website delivery and security Our hosting, content delivery and security provider delivers this website and our media. The provider may process your IP address, request time, requested resource and basic device or network information to deliver content, investigate faults and protect against abuse. Necessary security processing serves our legitimate interest in operating a reliable service. This marketing website does not request device location, install advertising cookies or include third-party analytics. Fonts and images are hosted with the website. You can read its content without submitting a form. ## Your mobile account The mobile app uses Clerk to sign you in with your email address and password, or with Google or Apple, and to authenticate your account. Our cloud backend and database provider stores your account and application data. Account information can include an account identifier, email address and profile details you enter or that are supplied during sign-in. We use the information needed to create your account, provide requested features and handle support, on the basis of performing the service you request. Where you choose location-based features, the app requests device permission. You can refuse or revoke that permission in your device settings. We use location to support map features; the marketing website does not collect it. Settings and information you choose to provide are used for the corresponding app features. When you plan a trip, we store your selected destination, arrival date, stay length, transport, pace, interests and onboarding itinerary in our cloud backend and in your account's local app cache. If you provide accommodation, we store your entered query and the selected Mapbox place ID (or coordinates you mark manually) to plan each day's visits. Trips created in Calendar, including departure dates and optional accommodation, are saved in your account's local app storage. You can choose to add accommodation later. Accommodation searches use Mapbox Search Box, which processes the hotel name or address you submit under its own terms; the app does not store the coordinates of search results and looks up the selected place again when it is needed. Marking a location directly on the map does not perform an address search. Mapbox supplies map display on both mobile platforms. To draw the map, the app requests map tiles and fonts from Mapbox for the area you are viewing; Mapbox receives these requests with technical data such as your IP address, device and app version, and an installation identifier that Mapbox uses to count active users. We switch off the Mapbox SDK's optional telemetry and do not send your name, email address or account identifier to Mapbox. Mapbox's processing is described in the [Mapbox Privacy Policy](https://www.mapbox.com/legal/privacy). When you request route planning or open a saved trip, our backend sends the accommodation and selected stop coordinates, transport mode and departure times to Mapbox Directions for walking and driving, or to Google services for public transport. We do not include your name, email address or accommodation address text in those route requests. Route geometry, travel times and transit details are not persisted in your itinerary: Mapbox walking and driving routes are used only while you view them, and public transport route lines may be kept on your device for up to 30 days so saved trips open quickly. Google's processing of public transport route requests is described in the [Google Privacy Policy](https://policies.google.com/privacy). ## George, our AI travel guide George is an AI system and can be wrong. Check important information before you rely on it. George answers only after you accept his data-use notice in the app. When you ask George a question, the app sends your question, your recent messages in that chat, your first name, your interests, the destination or place you are asking about and your language to our backend. The app also sends the trips and days you planned in Wanderair (destinations, dates and the places planned for each day, never where you stay) and the stories you listened to the end, and our backend adds your Wanderair passes and subscriptions from its billing records. Of the AI providers, only Anthropic receives these, through OpenRouter, so George can answer questions about your plans and passes. Our backend sends this through OpenRouter, a service that routes requests to AI providers, to Anthropic, whose Claude models write the answer and may run a web search for it, and to OpenAI, the maker of ChatGPT, which matches the question against Wanderair's story library. OpenRouter processes this data under its agreement with Wanderair and passes it to Anthropic and OpenAI under its agreements with them, so they can provide the answer. The legal basis is your consent. You can withdraw it at any time in About George in the chat; George then stops sending your questions until you accept again. Withdrawal does not affect earlier lawful processing. Your chats with George are saved on your device, not in your account. Our backend keeps each reply for up to 30 minutes so it can reach your device, then deletes it. On supported iPhones, George can write the answer on the device with Apple's on-device model when online answers are unavailable. The question is then still matched against Wanderair's story library through OpenRouter and OpenAI, but it is not sent to Anthropic. ## Mobile usage analytics and diagnostics Usage analytics are off unless you agree on the onboarding screen to help improve Wanderair. You can change your choice at any time in Profile settings. If you agree, PostHog receives a pseudonymous account identifier and app events, such as story playback and paywall views. PostHog hosts this data in the EU. We rely on your consent as the legal basis for this processing. Your access and purchases do not depend on this choice. The app's crash and performance diagnostics follow the same choice. Our hosting, content delivery and security provider processes them only when usage analytics are on. Accommodation addresses, precise map coordinates and chat contents are not included in these usage events. Turning analytics off stops local collection immediately, including offline, and withdraws queued events when the app reconnects. This does not affect earlier lawful processing. Purchase records needed to provide paid access are processed separately. ## Purchases and access When purchases are available, Apple or Google handles the store transaction. RevenueCat and our backend process purchase identifiers, subscription status and access periods so the app can recognize your entitlement and restore access. Wanderair does not receive your complete payment-card number. Apple and Google act as independent controllers for store payments and handle payment information under their own privacy policies. ## Providers We use the providers below. They receive the information needed for their role. Clerk provides sign-in and account authentication. It receives your account ID, email address, password (stored only in hashed form) and profile details from email, Google or Apple sign-in. PostHog provides usage analytics, only with your consent. It receives a pseudonymous account identifier and app events. Mapbox provides map tiles, accommodation search (Search Box) and walking and driving routes (Directions). It receives map area requests, your IP address and device data, accommodation search text, and the coordinates and departure times used for walking and driving routes. Google services provide public transport routes. Google receives the accommodation and stop coordinates and the departure times for these routes. RevenueCat provides purchase management. It receives purchase identifiers and subscription status. Apple and Google provide the app stores and handle store payments. They act as independent controllers under their own privacy policies. Anthropic writes George's answers with its Claude models and may run a web search to do so. Through OpenRouter, it receives your question, your recent messages in that chat, your first name, your interests, the destination or place you ask about and your language. It also receives your Wanderair trips and planned days, the stories you listened to the end, and your passes and subscriptions. OpenAI, the maker of ChatGPT, matches George's questions to Wanderair's story library. Through OpenRouter, it receives the question, your previous question in that chat and the name of the place you ask about. OpenRouter routes George's questions to Anthropic and OpenAI and receives the information sent to them. It is a US company. Our cloud backend and database provider stores your account, trip, purchase-status and launch-update data, and holds George's replies for up to 30 minutes while they are delivered. The data is stored in the EU (Ireland). The provider is a US company. Our hosting, content delivery and security provider delivers this website, our media and app diagnostics. It processes IP addresses and request data and operates worldwide. It is a US company. Email services used for a requested update or reply also process the message and delivery information. ## Disclosures We may disclose information where legally required or reasonably necessary to protect the service and its users. We do not sell personal information or share signup details with advertisers. Access to launch-update records is restricted to authorized administrators. ## International transfers Some providers are based in the United States. Transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified, otherwise on the European Commission's standard contractual clauses. Contact us for a copy of the safeguards or the names of our infrastructure providers. ## How long information is kept We keep launch-update information while we are sending the updates you requested. When you withdraw consent, or the list is no longer needed, we remove it from active mailing records. A limited record may be retained where needed to document consent, honor an opt-out or meet a legal obligation. Account information is kept while needed to provide your account and requested services. After closure or a verified deletion request, information no longer needed is deleted or anonymized. Purchase, support and security records may be kept where necessary for legal obligations, refunds, disputes or abuse prevention. Retention depends on the purpose and applicable obligations; backups are removed through the provider’s normal lifecycle. ## Your rights and choices Depending on applicable law, you can request access to your personal information, correction, deletion, restriction or a portable copy, and object to processing based on legitimate interests. Contact us using the email above. We may ask for information needed to verify that a request is yours. Some records may need to be retained for legal reasons. You can unsubscribe from launch updates without closing an app account. You can also change your analytics choice at any time in Profile settings. Closing an account or deleting the app does not cancel a store subscription; manage subscriptions with the store where you purchased them. You can withdraw your consent for George at any time in About George in the chat. You can also complain to the data-protection authority where you live or work. More information is available in the [European Union’s guide to data-protection rights](https://europa.eu/youreurope/citizens/consumers/internet-telecoms/data-protection-online-privacy/index_en.htm) . ## Security, children and changes We use access controls and other safeguards appropriate to the service. No online system can promise absolute security. The launch-update list is intended for adults planning travel. Contact us if you believe a child has submitted personal information. We update this notice as the service changes. The date above identifies the current version. Where a change requires additional information or consent, we will provide it before applying that change to the affected processing.