This Privacy Policy describes how MyWai (“we”, “us”, “our”) collects, uses, and shares information when you use our mobile application and related services (together, the “App”).
1. Who is responsible?
The entity responsible for the processing of personal data is the operator of the MyWai App (the “Controller”). You can reach us using the contact details published in the App Store or Google Play listing, or via in-app support if available.
2. What data we collect
Depending on how you use the App, we may process the following categories of data:
Account and authentication: email address, password (stored securely by our authentication provider), and profile information you provide (e.g. name). If you sign in with Google or Apple, the respective provider shares certain identifiers and profile details with us as part of that login flow.
Profile and content you submit: text you enter (e.g. reviews, reports), profile fields, and profile photos you upload. Photos may be stored on our backend storage.
Location: with your permission, we may collect precise location (including in the background where enabled) to provide travel-related features such as recommendations, navigation-related context, and notifications when you are near tour content.
Device and push notifications: push notification tokens, device platform, and app version may be stored so we can send you notifications you opt into (e.g. reminders or discovery messages).
Purchases (“Miles” / digital goods): transaction-related identifiers and entitlement status may be processed through RevenueCat and the applicable app store (Apple App Store / Google Play) to validate purchases and restore access.
Photos and camera: if you grant access, the App may read images from your library or use the camera for features described in the App (e.g. analysis or uploads). Only content you actively choose to process is involved.
Technical and local data: the App may use on-device storage (including secure storage and local databases) for session data, preferences, and offline or performance-related caching.
3. Purposes and legal bases (EEA/UK/Switzerland)
Where the GDPR (or equivalent law) applies, we rely on one or more of the following legal bases:
Performance of a contract / pre-contractual steps: providing the App, your account, and features you request.
Consent: where required, e.g. for certain notifications, precise/background location, or photo/camera access. You can withdraw consent in your device settings; this may limit some features.
Legitimate interests: securing the App, preventing abuse, improving reliability, and analytics that do not override your rights.
Legal obligation: where we must retain or disclose information to comply with the law.
4. How we share data
We use trusted service providers (“processors”) who process data on our instructions. These include, where applicable:
Supabase (hosted backend: authentication, database, file storage) — typically in regions you or we configure;
Expo / push delivery infrastructure for delivering push notifications;
RevenueCat for in-app purchases and subscription state;
Apple and Google for app distribution, payments, and (if you use them) social sign-in.
We do not sell your personal information in the conventional sense. We may disclose information if required by law or to protect rights, safety, and security.
5. International transfers
Our providers may process data in countries other than your own. Where required, we use appropriate safeguards (such as Standard Contractual Clauses approved by the European Commission) together with technical and organisational measures.
6. Retention
We keep personal data only as long as needed for the purposes above, unless a longer retention period is required by law. Account data is generally kept until you delete your account or we delete it in line with our policies. Push tokens are updated or removed when they change or you disable notifications.
7. Security
We implement appropriate technical and organisational measures to protect your data. No method of transmission or storage is 100% secure; we encourage you to use a strong password and protect your device.
8. Your rights
Depending on your location, you may have the right to access, rectify, erase, restrict, or object to certain processing, and to data portability. You may also lodge a complaint with a supervisory authority. To exercise your rights, contact us using the details in your store listing or in-app support.
9. Children
The App is not directed at children under the age where parental consent is required for data processing in your region. We do not knowingly collect personal information from such children.
10. Changes
We may update this Privacy Policy from time to time. We will post the updated version and revise the “Effective date” above. Material changes may be communicated through the App or store listing where appropriate.
11. Contact
For privacy-related questions, please use the contact channel indicated on the App Store / Google Play page for MyWai or any email address we publish for support.