Privacy Policy

Effective November 9, 2026

This policy explains what Wayvella (the iPhone and iPad app, and the trip pages at share.wayvella.com) does with information. Wayvella is made by Maximus Williams ("we", "us"). Questions: support@wayvella.com.

Your trips: on your devices and in your iCloud

Trips, checklists, photos, videos, journal entries, places, reservations, your profile name and photo, and your checklist templates are stored on your device and synced through your own iCloud account, using Apple's iCloud (CloudKit) private database. We have no access to them. Apple's privacy policy applies to iCloud.

Reservations, including their confirmation numbers and the screenshot, PDF or Wallet pass you add them from, are stored the same way. Wayvella reads those on your device; they aren't sent to us, and a published trip page never shows reservations. When what you share is a short message with a link (a booking app's "sharing details of a trip"), Wayvella opens that link on your device to read the booking from the page, so the site it points to is asked for it.

A backup copy of the app's data is kept on your device when Wayvella changes how it syncs, and stays on your device.

Traveling together with other Wayvella users

When you invite someone to travel together on a trip, the trip is shared through iCloud between your account and theirs. The people you invite can see and change the trip, and see your name. You can remove people, and they can leave, at any time.

Trip pages you publish (share.wayvella.com)

Nothing is published unless you choose Publish Page for a trip. When you do, Wayvella uploads the parts you choose to our servers, and anyone with the page's link can see them:

• the trip's name, destination, dates and cover photo, and the name you give as "Shared by";
• the photos and videos you include (re-encoded on your device first, without their location or other metadata), with their captions;
• visited places with your ratings, reviews and visit days (planning notes and places you haven't visited stay private);
• the journal entries you choose (entries are private until you pick them).

Your checklist is never published. Unpublish Page deletes the page, its photos and videos, and its comments from our servers; deleting the trip in the app does the same. Pages are kept while you have Wayvella Plus; if your subscription ends, they're deleted 90 days later. Pages created but never published are deleted after a day.

So that only you can change your page, the app keeps a secret token for it (in your iCloud, so your other devices can use it); our servers store only a scrambled (hashed) form of it. If you turn on notifications for new comments, the app sends your device's push notification token to our servers, which use it only to notify you through Apple's push service; it's deleted when you unpublish the page or turn notifications off.

Visitors to a trip page

• Comments and stickers: a visitor who comments or adds a sticker gives a name and the comment or sticker, which are shown on the page. Their browser keeps a random code so they can delete their own comments; we store only a hashed form of it. Comments can be reported (we receive the report by email) and the trip's owner can block a commenter.
• Email updates: a visitor can sign up with their email address to hear when the trip is updated. We store the address, send a confirmation email, and send at most one email a night when something new is added. Every email has a one-click unsubscribe link, which deletes the address. Emails are sent with Cloudflare Email Service.
• View counts: to show the owner how many people viewed a page, a visitor's browser keeps a random ID in its local storage, and we store only a hashed form of it with the page. We don't use cookies, and we don't store IP addresses. A visitor's IP address is used briefly to limit how fast comments can be posted, and is not kept. When the app creates a page, a one-way hash of the device's IP address and the date is kept for two days, only to limit how many pages can be created in a day.
• Maps: the page's map is Apple's MapKit JS, which loads from Apple.

Trip pages are hosted on Cloudflare (Workers, D1 and R2), which processes requests on our behalf.

Services Wayvella uses

To provide its features, the app sends limited information to these services. None of them receives your trips or account details from us.

• Apple: iCloud (sync, and traveling together), WeatherKit (the coordinates of your trip's destination, for its forecast), Apple Maps (place searches and place details, and finding the time zone of a reservation's place), and push notifications. Apple Intelligence suggestions, and reading reservations, happen on your device.
• Wikimedia (Wikipedia, Wikivoyage and Wikimedia Commons): a destination's or place's name and coordinates, to find suggested places, cover photos and place photos.
• Pixabay, through our own proxy at covers.wayvella.com: a destination's name, to find cover photos. The proxy doesn't log searches.

Permissions

• Location (only if you allow it, while using the app): to start a trip or add a place where you are. It isn't sent to us.
• Photos: Wayvella uses Apple's photo picker, so it only sees the photos you choose.
• Contacts: when you text a trip update, Apple's contact picker lets you choose people without giving Wayvella access to your contacts; the numbers you pick are kept with the trip in your iCloud.
• Notifications (only if you allow them): for new comments on your pages.

Purchases

Wayvella Plus is bought through the App Store. Apple handles payment; we never see your payment details. The app checks your subscription with Apple's StoreKit, and may send our servers the signed transaction Apple provides, to confirm a subscription before publishing.

Contacting support

If you contact support from the app, your email includes the app and iOS versions, your device model, your iCloud sync and subscription status, how many trips you have, and the reports iOS keeps of Wayvella's recent crashes and hangs (kept on your device for 14 days and sent only this way). It never includes what's in your trips. You see all of it, and can change or remove it, before sending, and we use it only to answer you.

What we don't do

• No advertising, no analytics, no tracking across apps or websites, and no data brokers.
• We don't sell or rent personal information.

Children

Wayvella isn't directed to children under 13, and we don't knowingly collect their personal information.

Your choices and rights

You can delete trips (and their pages) in the app, unpublish a page at any time, delete your iCloud data for Wayvella in your device's iCloud settings, and unsubscribe from emails with one click. To ask about, correct or delete information on our servers, write to support@wayvella.com. Depending on where you live, you may have further rights (for example under the GDPR or California law); we'll honour them.

Changes

If this policy changes, we'll update it here with a new effective date, and tell you in the app for important changes.