Privacy Policy

Wayvelo is operated by N CRAYTHORN & J.T SOPHOCLEOUS, an Australian partnership trading under the Renownlabs name, ABN 63 511 033 250, based in New South Wales, Australia.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you use the Wayvelo mobile application, website and related services.

In this Privacy Policy, "Wayvelo", "we", "us" and "our" refer to Renownlabs.

If you have questions about this Privacy Policy or how we handle your personal information, contact us at hello@wayvelo.com.

Privacy at a glance

Wayvelo uses personal information to provide, personalise, secure and improve our travel planning services.

Depending on how you use Wayvelo, we may process:

• your name and email address
• account and authentication information
• travel questionnaire responses and preferences
• itinerary and trip information
• booking and Travel Wallet information
• documents you choose to upload
• subscription and transaction information
• anonymous planning-session information
• referral information
• technical, security and usage information
• information required to provide maps and AI-powered functionality

We do not sell your personal information.

We do not share your personal information for cross-context behavioural advertising.

We do not use third-party advertising trackers.

Optional product analytics are only enabled after you choose to allow analytics.

Wayvelo uses artificial intelligence through Base44 to provide itinerary generation and booking-document extraction.

Wayvelo does not continuously track or collect your precise device location.

You can delete your account within Wayvelo where available or contact hello@wayvelo.com to exercise an applicable privacy right.

1. Who we are

• Service: Wayvelo
• Operator: Renownlabs
• Location: New South Wales, Australia
• Privacy contact: hello@wayvelo.com

Renownlabs determines the purposes for which personal information processed through Wayvelo is used.

Where applicable privacy law requires it, Renownlabs acts as the data controller or equivalent responsible entity.

2. Scope of this Privacy Policy

This Privacy Policy applies to:

• the Wayvelo mobile application
• the Wayvelo website
• Wayvelo web-based services
• Wayvelo accounts
• trip planning and questionnaire functionality
• generated and saved itineraries
• booking and Travel Wallet functionality
• uploaded-document processing
• shared-trip functionality
• referrals
• communications with Wayvelo
• related services operated by Renownlabs

Third-party websites and services linked from Wayvelo may have their own privacy policies and are not controlled by us.

3. Personal information we collect

The information we collect depends on how you use Wayvelo.

Account information

When you create or use a Wayvelo account, we may collect:

• first name
• last name
• email address
• account identifier
• authentication information
• account settings
• account preferences

If you sign in using Apple, Google or another supported authentication provider, we may receive information made available through that authentication process.

We do not receive your Apple or Google account password.

Travel questionnaire and preferences

When you plan a trip, Wayvelo may process information including:

• destinations
• departure and return dates
• trip duration
• budget preferences
• travel pace
• accommodation preferences
• transport preferences
• flight-class preferences
• luggage preferences
• dining preferences
• interests and activities
• weather preferences
• spending style
• travel style
• trip-vibe preferences
• places you specifically want to visit
• other information you choose to provide

We use this information to personalise your Wayvelo experience and generate relevant travel plans.

Sensitive free-text information may be subject to additional minimisation or local-storage controls.

Trip and itinerary information

When you generate, create or save a trip, Wayvelo may process:

• trip title
• destinations
• countries
• travel dates
• number of travellers
• itinerary information
• activities
• accommodation suggestions
• transport information
• budget information
• estimated trip costs
• notes
• trip status
• changes you make to the itinerary

Booking and Travel Wallet information

If you use Wayvelo's Travel Wallet or booking-related features, we may process:

• booking references
• flight information
• accommodation information
• transport bookings
• provider names
• booking dates
• arrival and departure times
• booking status
• travel documents
• links
• other information you choose to save

Uploaded documents

You may choose to upload travel-related documents such as booking confirmations.

Wayvelo may process uploaded documents to:

• extract booking details
• identify travel dates and times
• identify accommodation or transport information
• populate Travel Wallet information
• provide related features you request

Uploaded booking-document extraction currently uses an AI model through Base44 as described in the Artificial Intelligence section below.

The document may be made temporarily available to the AI-processing workflow through a short-lived signed file URL.

Only information required for the requested extraction is processed.

We do not use uploaded documents for advertising.

We do not use uploaded documents to train artificial intelligence models owned or operated by Wayvelo.

Travel documents can contain sensitive or confidential information.

You should avoid uploading information that is not necessary for the feature you are using.

Photos and device files

Some Wayvelo features may allow you to select photos or files from your device.

Wayvelo only accesses files or photos you select or for which you grant relevant device permission.

You can manage these permissions through your device settings.

Subscription and transaction information

Wayvelo uses app marketplace payment systems and RevenueCat to help manage purchases, subscriptions and entitlements.

We may process information including:

• product purchased
• purchase date
• transaction identifier
• subscription status
• entitlement status
• purchase history relevant to your account
• RevenueCat app-user identifier

Wayvelo does not receive or directly store your full payment card number for purchases processed through an app marketplace.

4. Anonymous and guest planning

Wayvelo may allow limited trip planning before an account is created.

An anonymous planning session may contain:

• an opaque session identifier
• a randomly generated per-install identifier
• a cryptographic hash of an IP address used for security and abuse prevention
• session status
• generation reservation status
• a compact trip summary after successful generation

A compact trip summary may include information such as:

• title
• destinations
• countries
• nights
• estimated cost
• dates

Wayvelo does not use advertising identifiers or hardware fingerprinting for anonymous planning sessions.

Raw IP addresses are not stored in the anonymous-session record for this purpose.

Guest questionnaire information may also be stored locally on the user's device as part of the planning experience.

If you create an account after generating a guest trip, Wayvelo may associate the eligible anonymous planning session and generated trip with your new account.

Unclaimed anonymous sessions expire and are automatically cleaned up as described in the Retention section below.

5. Location information

Wayvelo does not currently collect precise device location or continuously track your physical location.

Wayvelo may process location-related information that you actively provide, such as:

• destinations
• cities
• countries
• addresses
• locations you search for
• itinerary stops

Technical infrastructure may also process an IP address, from which an approximate region may sometimes be inferred.

Wayvelo does not currently use this information for continuous location tracking.

6. How we collect personal information

We may collect information:

• directly from you
• when you create an account
• when you complete the travel questionnaire
• when you generate a trip
• when you create or edit a saved trip
• when you upload a document
• when you save booking information
• when you make a purchase
• when you create or redeem a referral
• when you enable a shared trip
• when you contact us
• automatically through operation of the Service
• through supported authentication providers
• from service providers acting on our behalf

7. How we use personal information

We may use personal information to:

• create and manage accounts
• authenticate users
• provide guest-planning functionality
• personalise travel planning
• generate travel itineraries
• create and maintain trips
• provide maps and route information
• process booking documents
• provide Travel Wallet functionality
• manage subscriptions and purchases
• administer referral rewards
• provide shared-trip functionality
• provide local reminders and notifications
• maintain Service security
• prevent fraud and abuse
• enforce rate limits
• troubleshoot technical issues
• understand product performance where analytics consent has been provided
• improve Wayvelo
• comply with legal obligations
• resolve disputes
• establish, exercise or defend legal claims
• protect Wayvelo, users and others

We do not currently send marketing or promotional emails to Wayvelo users.

Wayvelo may send or facilitate essential account and Service communications, such as authentication, password reset, account-security or other operational messages.

8. Artificial intelligence

Wayvelo uses artificial intelligence through Base44 to provide certain travel-planning and document-processing features.

There are currently two primary AI uses.

Itinerary generation

Wayvelo currently uses Google Gemini 3 Flash through Base44's InvokeLLM functionality for personalised itinerary generation.

The itinerary-generation process uses AI in stages to generate content such as:

• destinations
• route structure
• accommodation information
• activities
• practical travel information
• budget-related content
• weather-related information
• booking suggestions

Information sent for this purpose may include:

• destinations
• dates
• trip duration
• budget
• questionnaire responses
• travel preferences
• itinerary context

Wayvelo aims to limit AI inputs to information reasonably necessary to provide the requested feature.

Transport validation

Not every part of a Wayvelo itinerary is determined by AI.

Transport modes may be checked or overridden using deterministic software logic, including factors such as:

• geographic distance
• landmass relationships
• route lookup information
• transport rules configured within Wayvelo

This validation may override an AI-generated transport suggestion.

Booking-document extraction

When you request extraction of information from an uploaded booking confirmation, Wayvelo currently uses Anthropic Claude Sonnet 4.6 through Base44's AI integration.

The relevant document is made available to the processing workflow through a short-lived signed URL.

Structured booking information extracted from the document may then be saved to your Travel Wallet.

The signed URL itself is temporary and is not retained as permanent trip information.

AI provider handling

Base44 may transmit relevant inputs to third-party AI providers, including Google and Anthropic, in order to provide these functions.

Wayvelo does not intentionally provide:

• account passwords
• full payment card details
• information unrelated to the requested feature

to AI services.

Wayvelo does not use your information to train an AI model owned by Wayvelo.

Third-party AI providers process information subject to their applicable agreements, terms and privacy practices.

AI limitations

AI-generated information can contain errors, omissions or outdated information.

You should independently verify important information such as:

• visa requirements
• immigration requirements
• passport requirements
• entry rules
• health requirements
• safety information
• transport schedules
• booking terms
• prices
• opening hours
• legal requirements

Wayvelo's AI features provide travel-planning assistance only.

They are not intended to make decisions about your legal rights, employment, credit, insurance, immigration status or similarly significant matters.

AI-generated content is not professional legal, immigration, medical, financial or safety advice.

9. Base44

Wayvelo uses Base44 as a production technology provider.

Base44 supports functions including:

• backend infrastructure
• application databases
• file storage
• account and authentication functionality
• server-side functions
• product analytics
• AI integrations

Information processed through Base44 may include:

• account information
• questionnaire responses
• trip information
• saved itineraries
• Travel Wallet information
• uploaded files
• anonymous-session information
• technical and security information

Base44 may use its own subprocessors to provide these services.

10. Analytics

Wayvelo uses privacy-conscious product analytics to understand how users move through important parts of the Service.

Wayvelo does not currently integrate separate analytics SDKs such as Google Analytics, Firebase Analytics, Mixpanel or PostHog. Optional product analytics are provided through Base44 and Wayvelo server-side funnel records as described below.

Optional analytics use Base44's product-analytics functionality and Wayvelo's own server-side funnel-event records.

Optional analytics are only enabled after you choose to allow analytics.

If you decline optional analytics:

• optional analytics events are not sent
• queued optional events are discarded
• the relevant anonymous analytics identifier is removed

Wayvelo may process a limited number of strictly necessary operational events without analytics consent where required for security, abuse prevention or technical reliability.

These operational events are designed not to contain trip content or directly identifying personal information.

11. Analytics retention

Wayvelo currently applies a 90-day retention period to its server-side funnel-event analytics records.

Expired funnel records are automatically deleted through a scheduled cleanup process.

12. Error and security monitoring

Wayvelo does not currently use a separate third-party crash-reporting SDK such as Sentry, Firebase Crashlytics, Bugsnag or Datadog.

Technical errors and diagnostic information may be recorded through:

• the Wayvelo application
• Base44 platform logging
• browser or server runtime logs

Wayvelo also maintains security and abuse-prevention controls.

Certain severe operational conditions may generate an internal administrative alert sent to Wayvelo.

These alerts are designed not to contain user email addresses, account identifiers, raw IP addresses or request content.

13. Notifications

Wayvelo currently uses local notifications, not remote push notifications.

On supported mobile devices, Wayvelo may use device-level local notifications for trip reminders.

These notifications may relate to information such as:

• departure dates
• upcoming transport
• accommodation
• packing
• check-in windows
• travel preparation

Notification timing is calculated from locally available trip information.

Wayvelo does not currently:

• use Apple Push Notification service for remote push messages
• use Firebase Cloud Messaging
• request a remote push token
• store a remote push token in its database

Notification permission is requested through your device only when required for a reminder feature you choose to enable.

You can change notification permission through your device settings.

14. RevenueCat and app purchases

Wayvelo uses RevenueCat to help manage:

• purchases
• subscription status
• entitlements
• purchase validation
• access to paid features

RevenueCat may process information such as:

• app user identifiers
• product identifiers
• transaction information
• subscription status
• entitlement information
• app marketplace purchase information
• technical information needed to provide its services

Payments through the Apple App Store are processed by Apple and are also subject to Apple's privacy practices.

RevenueCat acts as a service provider for these functions and may use subprocessors under its applicable agreements.

15. Referral program

Wayvelo may provide a referral program.

Referral records may include:

• an opaque identifier for the referring user
• an opaque identifier for the referred user
• referral code
• referral status
• reward amount or generation credit

Wayvelo does not expose the referrer's or referred user's email address or name to the other participant through the referral system.

Referral records are managed server-side and are not publicly accessible.

16. Shared and public trips

Wayvelo may allow you to create a shareable link for selected trip information.

Trip sharing is off by default.

You must actively enable sharing before a trip becomes accessible through a public-sharing link.

Information visible through a shared-trip link may include:

• trip title
• destination names
• countries
• nights
• arrival and departure dates
• destination summaries
• total trip duration
• number of travellers
• estimated trip cost
• hero image
• overall trip summary

Public shared trips do not intentionally expose:

• your Wayvelo account email address
• your internal user identifier
• booking confirmation numbers
• Travel Wallet documents
• private flight or accommodation booking records
• private questionnaire responses
• uploaded personal photos
• private trip notes
• full internal itinerary data

Sharing links may be revoked or regenerated.

If you disable public sharing, Wayvelo prevents future access through the Wayvelo sharing mechanism.

However, we cannot control copies, screenshots or information previously saved by another person who accessed content while it was shared.

Do not include sensitive or confidential information in content you intentionally make public.

17. Destination images

Destination imagery used by Wayvelo may originate from providers including:

• Unsplash
• Wikimedia
• Wikipedia

Wayvelo uses hosted destination images in the normal app runtime. Images may be sourced and licensed through these providers and stored on Wayvelo-managed or Base44-managed infrastructure for delivery.

Where a source lookup is required, Wayvelo may send destination and country information to the relevant image provider. These lookups are performed server-side rather than directly from your device.

Wayvelo does not intentionally send your:

• account identifier
• email address
• device identifier
• questionnaire data

to these image providers for destination-image searches.

18. Mapping services

Wayvelo may use mapping services including:

• OpenStreetMap
• CARTO

These services support:

• maps
• routes
• destination visualisation
• trip geography

Mapping providers may process technical information required to provide map content, which can include:

• IP address
• requested map tiles
• destinations or locations requested by the Service

Wayvelo does not currently use these services for continuous precise-device-location tracking.

19. Affiliate and third-party travel links

Wayvelo may contain links to:

• accommodation providers
• airlines
• transport providers
• booking platforms
• activity providers
• other travel services

Some links may be affiliate links, meaning Wayvelo may receive a commission if you complete a qualifying booking or purchase.

A third-party search link may include information relevant to the search, such as:

• destination
• travel dates
• number of travellers
• search preferences

Wayvelo does not provide your Wayvelo password to travel partners.

Wayvelo does not provide your Wayvelo account identity to a third-party booking service unless:

• the feature requires it
• you direct us to do so
• you otherwise consent
• you provide that information directly to the third party

Third-party travel services have their own privacy policies and terms.

20. Cookies and similar technologies

Wayvelo's website and web-based services may use:

• cookies
• browser storage
• similar local technologies

These technologies may support:

• authentication
• secure sessions
• user preferences
• security
• fraud prevention
• essential application functionality

Wayvelo does not use cookies or similar technologies for cross-context behavioural advertising. Optional product analytics are consent-gated as described in this Privacy Policy. Where applicable law requires consent for a non-essential technology, we will obtain that consent before enabling it.

21. Customer support and email

Wayvelo does not currently use a Base44 contact-form database for general support enquiries.

Support links direct users to email hello@wayvelo.com.

Email sent to this address is forwarded through Namecheap's domain email-forwarding service to a Gmail inbox.

As a result, support correspondence may be processed by:

• Namecheap
• Google through Gmail

A support email may contain information you voluntarily provide, including:

• your email address
• your name
• account information
• trip information
• screenshots
• booking information
• other information included in your message

You should avoid including unnecessary sensitive information in support emails.

Support correspondence may be retained for as long as reasonably necessary to:

• respond to your enquiry
• provide follow-up assistance
• investigate technical or account issues
• maintain appropriate business records
• manage disputes

Wayvelo does not currently use support-email information for marketing.

22. When we disclose personal information

We may disclose personal information in the following circumstances.

Service providers

We may disclose information to providers where reasonably necessary to operate Wayvelo or provide a feature you request.

At your direction

We may disclose information where you ask or authorise us to do so.

Public sharing

Information you intentionally make available using Wayvelo's public-sharing functionality may be accessible to people with the relevant link.

Legal and safety purposes

We may disclose information where reasonably necessary to:

• comply with applicable law
• respond to a lawful court or government request
• establish, exercise or defend legal rights
• investigate suspected fraud
• investigate misuse
• protect the security of Wayvelo
• protect users or other people

Business transactions

If Renownlabs is involved in a merger, acquisition, financing, restructure, sale of assets or similar transaction, personal information may be transferred as part of that transaction.

Where required by law, we will provide appropriate notice if personal information becomes subject to materially different privacy practices.

23. We do not sell personal information

Wayvelo does not sell personal information in exchange for money.

Wayvelo does not share personal information for cross-context behavioural advertising.

Wayvelo does not use personal information to create third-party advertising profiles.

The use of operational service providers such as Base44, Google, Anthropic, RevenueCat, Apple, Namecheap, mapping providers and other vendors is intended to provide or support Wayvelo rather than behavioural advertising.

If these practices materially change, we will update this Privacy Policy and provide any legally required choices.

24. Retention of personal information

Wayvelo uses different retention periods depending on the information and why it is required.

We consider:

• why the information was collected
• whether your account remains active
• whether the information is still required to provide a feature
• the sensitivity of the information
• security and fraud-prevention requirements
• accounting and tax requirements
• legal obligations
• relevant dispute and limitation periods

Current retention practices include the following.

Trip drafts

Inactive trip drafts are automatically deleted after approximately 90 days.

Anonymous planning sessions

Expired anonymous planning sessions are automatically deleted approximately 7 days after expiry.

Funnel analytics events

Server-side funnel-event records are automatically deleted after approximately 90 days.

Rate-limit records

Rate-limit and abuse-prevention records are automatically deleted after approximately 14 days.

Active accounts

Account information is generally retained while your Wayvelo account remains active.

Saved trips

Saved-trip information is generally retained while:

• your account remains active, and
• you have not deleted the relevant trip or account.

Uploaded documents and photos

Uploaded documents and trip photos associated with a deleted account are removed from active Wayvelo records and queued for file cleanup.

Wayvelo runs a scheduled orphan-file reconciliation process daily.

This process reviews queued file-deletion records and identifies files that are no longer referenced by live Wayvelo data.

Actual removal from underlying platform file storage may depend on the relevant Base44 storage lifecycle.

Residual copies may therefore remain temporarily after account deletion while platform-level deletion completes.

Financial and purchase records

Purchase-event records are retained for approximately five years for accounting, tax, transaction-reconciliation and legal recordkeeping purposes.

When an account is deleted, Wayvelo removes the link between retained purchase-event records and the deleted account by replacing the relevant account identifier with an anonymised value.

A scheduled cleanup process deletes PurchaseEvent records after the applicable approximately five-year retention period.

Subscription records

Wayvelo's own UserSubscription record is deleted when the associated account is deleted.

Apple, RevenueCat and other applicable transaction providers may retain records under their own legal requirements and privacy policies.

Backups and platform storage

Deleted information may temporarily remain in secure backups or platform storage until it is removed or overwritten through the applicable lifecycle.

Information retained solely in backups is not normally restored except where reasonably necessary for:

• system recovery
• security
• legal compliance

When personal information is no longer reasonably required, we take reasonable steps to delete or de-identify it.

25. Account deletion

Where available, you can delete your Wayvelo account directly through the Service.

You can also request assistance at:

hello@wayvelo.com

When an account is deleted, Wayvelo currently:

• revokes public trip sharing
• deletes applicable account-owned trip records
• deletes applicable trip drafts
• deletes packing-list state
• deletes applicable bucket-list records
• deletes Wallet flight records
• deletes Wallet accommodation records
• deletes Wallet document records
• deletes Wallet links
• removes trip-photo references
• deletes generation-reservation records
• deletes account-linked rate-limit records
• removes the Wayvelo UserSubscription record
• removes the Wayvelo authentication identity
• queues associated uploaded files for deletion
• de-links retained financial PurchaseEvent records from the deleted account

Some information may be retained where reasonably necessary for:

• accounting
• taxation
• legal obligations
• security
• fraud prevention
• dispute resolution
• transaction reconciliation
• backup and storage lifecycle management

26. Security

We use reasonable technical and organisational measures designed to protect personal information.

Depending on the information and platform, these may include:

• encryption in transit
• secure storage
• encryption where appropriate
• access controls
• authentication controls
• secure credential storage
• device-level secure storage
• data minimisation
• abuse prevention
• rate limiting
• server-side access controls
• monitoring and operational safeguards

No electronic system can be guaranteed to be completely secure.

27. International processing and overseas disclosure

Wayvelo is operated from Australia, but a number of technology providers used to operate the Service are located overseas.

Personal information is therefore likely to be processed or disclosed outside Australia.

Wayvelo uses Base44, whose current servers and default workspace data storage are located in the United States.

Personal information processed through Base44 may therefore be stored or processed in the United States.

Other providers involved in Wayvelo's operations may include:

• Google
• Anthropic
• RevenueCat
• Apple
• Namecheap
• mapping providers
• infrastructure and service-provider subprocessors

These providers operate internationally and may process information in additional jurisdictions depending on the service involved.

Where practicable, Wayvelo seeks to identify principal overseas processing locations relevant to its Service.

We take reasonable steps appropriate to the circumstances to protect personal information disclosed to overseas providers.

Where European or United Kingdom privacy law applies, relevant international transfer safeguards may include:

• adequacy decisions
• Standard Contractual Clauses
• UK-approved international transfer mechanisms
• contractual safeguards
• technical and organisational measures

28. Australian privacy rights

Where the Privacy Act 1988 (Cth) and Australian Privacy Principles apply to Renownlabs, you may have rights including the ability to:

• request access to personal information we hold about you
• request correction of inaccurate, incomplete or outdated information
• ask how your information is handled
• make a privacy complaint

Contact:

hello@wayvelo.com

We may need to verify your identity before providing access to or modifying personal information.

We will respond within a reasonable period.

29. Privacy complaints

If you believe Wayvelo has mishandled your personal information, contact:

hello@wayvelo.com

Please provide enough information for us to understand the issue.

We will take reasonable steps to:

1. acknowledge your complaint
2. investigate the circumstances
3. request further information where reasonably necessary
4. keep you informed where appropriate
5. provide an outcome and explain any action we propose to take

We aim to acknowledge and respond to privacy complaints within applicable legal requirements and, where reasonably practicable, resolve them within 30 days.

If Australian privacy law applies and you are not satisfied with our response, you may have the right to complain to the Office of the Australian Information Commissioner (OAIC).

30. European Economic Area and United Kingdom

This section applies where the GDPR or UK GDPR applies to Wayvelo's processing of your personal information.

Legal bases

Depending on the circumstances, we may process personal information because:

• it is necessary to provide a service or perform a contract with you
• you have provided consent
• we must comply with a legal obligation
• processing is necessary for our legitimate interests and those interests are not overridden by your rights
• processing is necessary to protect vital interests where applicable

Your rights

Depending on applicable law, you may have rights to:

• access your personal information
• correct inaccurate information
• request erasure
• restrict certain processing
• object to certain processing
• receive certain information in a portable format
• withdraw consent
• object to direct marketing
• complain to an applicable supervisory authority

Where optional analytics rely on your consent, you may decline or withdraw that consent without affecting the core Wayvelo Service.

Response timing

Where GDPR or UK GDPR applies, we generally respond to valid data-protection rights requests without undue delay and within one month.

Where permitted by applicable law, this period may be extended for complex or numerous requests. If an extension applies, we will notify you as required.

To exercise an applicable right, contact:

hello@wayvelo.com

We may need to verify your identity.

31. California privacy

This section applies where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to Wayvelo.

Depending on how you use Wayvelo, categories of personal information we may process include:

Identifiers

Examples include:

• name
• email address
• IP address
• account identifier
• online identifiers
• device or session identifiers

Commercial information

Examples include:

• purchases
• subscription information
• transaction records
• entitlement information

Internet or electronic activity

Examples include:

• Wayvelo feature usage
• application interactions
• technical diagnostic information
• security and fraud-prevention information

If you explicitly opt in to optional product analytics, Wayvelo may also process a pseudonymous analytics identifier and limited event information such as feature/event type, trip or destination counts, purchase-plan category, booking category/provider, notification preference counts, and other short categorical values needed to understand product usage. Optional analytics do not intentionally collect your free-text questionnaire responses, booking references, account email address, password, uploaded document contents, precise device location, or advertising identifier.

Optional product analytics are not sent until you explicitly grant analytics consent, and declining or withdrawing consent does not affect the core Wayvelo Service.

Preferences and inferences

Wayvelo may process preferences you actively provide, including:

• budget
• travel style
• preferred pace
• destinations
• accommodation preferences
• transport preferences
• interests
• dining preferences

Wayvelo may use these preferences to generate or infer aspects of a personalised itinerary.

Sensitive personal information

Wayvelo does not generally require sensitive personal information to create a basic account or plan a standard trip.

However, uploaded travel documents may contain sensitive personal information.

Where this occurs, we process it only as reasonably necessary to:

• provide the feature you requested
• maintain security
• comply with law
• fulfil another permitted purpose

California rights

Where applicable, California residents may have rights to:

• know what personal information is collected
• access personal information
• correct inaccurate information
• request deletion
• receive certain information in a portable format
• obtain information about disclosure practices
• opt out of sale or sharing where applicable
• limit certain uses of sensitive personal information where applicable
• not receive discriminatory treatment for exercising privacy rights

Wayvelo does not sell personal information.

Wayvelo does not share personal information for cross-context behavioural advertising.

Because Wayvelo does not currently engage in those practices, there is currently no Wayvelo sale or cross-context behavioural-advertising activity from which a user needs to opt out.

To exercise an applicable California privacy right:

hello@wayvelo.com

We may request information reasonably necessary to verify your identity.

An authorised agent may make a request where permitted by applicable law and where authority can be appropriately verified.

32. Age requirement and children's privacy

Wayvelo is intended for users aged 16 or older.

Users under the age of 16 are not permitted to use Wayvelo.

Wayvelo does not knowingly collect personal information from children under 16.

If we learn that a person under 16 has provided personal information to Wayvelo, we will take reasonable steps to:

• investigate
• terminate or restrict the relevant account where appropriate
• delete personal information that should not have been collected, subject to applicable legal obligations

If you believe a person under 16 is using Wayvelo or has provided personal information to us, contact:

hello@wayvelo.com

33. Third-party websites and services

Wayvelo may contain links to websites or services operated by third parties.

Wayvelo does not control those third parties and is not responsible for their privacy practices.

You should review the privacy policy and terms of any third-party service before providing personal information to it.

34. Your privacy choices

Depending on the feature and applicable law, you may be able to:

• update account information
• change travel preferences
• edit or delete trips
• revoke public trip sharing
• delete uploaded information
• change device permissions
• enable or disable local notifications
• allow or decline optional analytics
• delete your Wayvelo account
• request access to personal information
• request correction
• request deletion
• make a privacy complaint

Contact us if you need assistance.

35. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we will update the Last updated date.

If a change materially affects how we handle personal information, we may provide additional notice through:

• the Wayvelo app
• the Wayvelo website
• email
• another appropriate method

We encourage you to review this Privacy Policy periodically.

36. Contact us

For privacy questions, requests or complaints:

Renownlabs

New South Wales, Australia

Email: hello@wayvelo.com

Email sent to this address is currently routed through Namecheap email forwarding to Gmail.