✈️ Where To

1. Information We Collect

We collect the following information when you use Where To:

Account information: email address and display name when you register
Travel preferences: home airport, seat class, budget, travel dates, and vibe selections you set in the app
Search activity: destination searches and saved trips
Booking data: passenger details required to complete a flight booking, including full name, date of birth, nationality, and passport or government-issued ID information. This data is transmitted directly to our booking provider (Duffel) to fulfill your reservation.
Wander Together trip data: trip codes, votes, and chat messages shared in collaborative sessions
Push notification token: device token used to deliver booking confirmations and trip updates
Usage analytics: screen views and feature interactions (via PostHog, anonymized)
Device information: device type and OS version for crash reporting

2. How We Use Your Information

To provide and personalize the Where To experience
To display relevant flight deals and destination recommendations
To process flight bookings on your behalf via our booking provider
To send booking confirmations and trip updates via push notification and email
To enable collaborative trip planning with friends (Wander Together)
To improve app performance and fix bugs
To communicate important updates about the service

3. Information Sharing

We do not sell your personal information. We share data only with:

Duffel: our flight booking provider. Passenger details (name, DOB, nationality, passport/ID) are sent to Duffel solely to complete reservations. Duffel's privacy policy governs their handling of this data.
Flight data providers: to fetch prices and availability (no personal data sent)
Supabase: our database and authentication provider, used to store your account and trip data
Resend: transactional email provider used to deliver booking confirmation emails
PostHog: anonymized analytics to understand feature usage
Facebook Login / Google Sign-In: if you choose to sign in with a social provider, we receive your public profile and email per that provider's permissions

4. Travel Document Data

Passport and government-issued ID information is collected only when you initiate a flight booking and is used solely to fulfill that reservation with the airline via Duffel. We do not store raw document numbers beyond what is necessary to complete and reference your booking. You may request deletion of booking-related data by contacting us (see Section 8).

5. Social Sign-In (Facebook & Google)

If you use Facebook Login or Google Sign-In, we receive your name and email address from the respective provider. We use this solely to create and identify your Where To account. We do not post on your behalf or access your contacts or friends list.

6. Data Retention

Your account data is retained for as long as your account is active. You may request deletion at any time (see Section 8). Anonymous analytics data may be retained for up to 12 months. Booking records may be retained as required by applicable law or for fraud prevention.

7. Security

We use industry-standard security practices including encrypted connections (HTTPS/TLS) and secure authentication tokens. However, no method of transmission over the internet is 100% secure.

8. Your Rights & Data Deletion

You have the right to access, correct, or delete your personal data at any time. To request deletion of your account and all associated data, visit our Data Deletion page or email us at hello@wheretotrips.com.

9. Children's Privacy

Where To is not directed at children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use after changes are posted constitutes acceptance.

11. Contact

Questions about this Privacy Policy? Contact us at hello@wheretotrips.com.