Who we are
Wafflelog is operated by Wafflelog Limited, company number 16685116, registered in England and Wales. Our registered office is 128 City Road, London, United Kingdom, EC1V 2NX.
Wafflelog Limited is the controller of the personal information described in this policy. You can contact us at support@wafflelog.co.uk.
Information we collect
We collect information you provide, information created while you use Wafflelog and limited technical information needed to operate and protect the service.
- Account information, including your username, email address, internal user identifier and authentication records. Your username can be searched and seen by other signed-in users so that they can invite you to a trip.
- Trip information, including trip names and dates, itinerary items, saved places and coordinates, notes, checklists, reference links, expenses, participant splits, invitations and collaborators.
- Images, documents and associated file information that you choose to upload.
- Trip Assistant information, including destinations, dates, duration, trip briefs, refinement messages, generated drafts, session state and the record of how a session was funded.
- Purchase information, including products, transaction status and Trip Assistant Pass balances. Apple or Google handles your payment details; Wafflelog does not receive your full payment-card number.
- Notification information, including in-app notifications, read status, push tokens, device platform and notification interactions.
- Technical and diagnostic information, including app and operating-system version, device and app identifiers, IP address, screen views, feature events, synchronisation errors and security logs.
- Messages, feedback and other information you send when contacting support.
Device storage and location information
Wafflelog stores an offline copy of trip information and downloaded files in the app's private storage on your device. This supports offline access and later synchronisation. Signing out does not necessarily erase those local copies; account deletion attempts to clear them, and removing the app or clearing its data removes its device storage.
When you search for or save a place, we process the search text, Google Place ID, displayed address and precise coordinates of that place. Wafflelog does not use this information as continuous tracking of your device's live location.
If you choose to open a saved place in Apple Maps or Google Maps, the selected place or coordinates are passed to that map provider under its own privacy terms.
How we use information
We use personal information to create and secure accounts, store and synchronise trips, support collaboration, calculate expense summaries, deliver notifications, provide the Trip Assistant, administer Passes and purchases, respond to support requests and maintain the reliability and security of Wafflelog.
We do not sell your personal information or use private trip content to build advertising profiles.
Our lawful bases
Where UK data-protection law applies, we rely on the following lawful bases:
- Contract, when information is needed to create your account and provide the features you request.
- Consent, for optional usage analytics and device push notifications where consent or permission is required. You can withdraw those choices for future processing.
- Legitimate interests, where reasonably necessary to secure the service, prevent fraud and abuse, diagnose faults, answer support requests and understand service reliability without overriding your rights.
- Legal obligation, where records or disclosures are required by tax, accounting, consumer-protection or other applicable law.
Trip Assistant and automated processing
To produce and refine a trip draft, Wafflelog sends the information you enter and relevant planning context through our Cloudflare- and Fly.io-hosted services to OpenAI. OpenAI processes that information to generate and research suggestions.
We do not use private trip content to train a Wafflelog general-purpose model. OpenAI states that data sent through its business API is not used to train its models by default. Avoid including passports, payment-card details, medical information or other unnecessary sensitive information in a trip brief.
Trip Assistant suggestions do not make decisions that produce legal or similarly significant effects about you. You decide whether to use, change or discard every suggestion.
Analytics and notifications
Firebase Analytics is disabled unless you choose to allow optional usage analytics. If enabled, it may receive screen views, feature events, app and device information and a pseudonymous installation identifier. We design analytics events not to include trip names, note text, uploaded files or Trip Assistant prompts. You can stop future analytics collection from Settings.
If you permit push notifications, Wafflelog sends an Expo push token, device platform and notification content to Expo so that alerts can be delivered. Notification previews may be visible on your lock screen according to your device settings. You can withdraw notification permission in your device settings.
Who processes information
We use specialist providers to operate Wafflelog. Depending on the feature you use, these include Supabase for authentication, databases, file storage and server functions; Cloudflare and Fly.io for application hosting and Trip Assistant processing; OpenAI for generating and researching trip suggestions; Google Places and map providers for place information; Firebase for optional analytics; Expo for push delivery; RevenueCat for Pass and purchase management; Apple and Google for app distribution and payment processing; and Resend, through our authentication service, for transactional email.
These providers process information under their applicable contracts and privacy terms. Apple, Google and other providers may also act as independent controllers for their own store, payment or map services.
We may disclose information where required by law, to protect the rights and safety of users or others, or in connection with a corporate reorganisation. We do not disclose private trip content to data brokers.
International processing
Some providers process information outside the United Kingdom. Where data-protection law requires it, we use an applicable adequacy regulation, approved contractual protection or another lawful transfer mechanism.
When you invite someone in another country, information in the shared trip becomes available to that person at your direction.
How long we keep information
Account and trip information is generally kept while your account remains active or until you delete the relevant content. Information marked for deletion may remain temporarily in synchronisation records, security logs or backups until those records are rotated.
Trip Assistant information is kept while needed to provide or resume the session, administer its funding and resolve technical or purchase disputes. It is removed with your account unless a limited record must be retained for legal, security or accounting reasons.
If you enable analytics, event-level analytics is retained for no longer than 14 months. Support correspondence is normally retained for up to 24 months after the last interaction. Purchase, accounting, fraud-prevention and dispute records may be retained for up to six years where reasonably required.
Push tokens are retained until your account is deleted, the token becomes invalid or it is otherwise removed from the service. Operational logs and backup copies are retained only for security, recovery and service-continuity needs and are removed or overwritten under the relevant provider's rotation schedule.
Your rights and choices
Depending on where you live, you may have rights to access, correct, delete or receive a copy of personal information, restrict its use, object to certain processing and withdraw consent. These rights can be subject to legal exceptions, and we may need to verify your identity before acting on a request.
You can withdraw optional analytics consent in Settings, change push-notification permission in your device settings and manage trip collaborators inside the app. Contact support@wafflelog.co.uk for another privacy request.
If you are in the United Kingdom, you may also complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the opportunity to address your concern first.
Deleting your account
You can permanently delete your account from Settings. Deletion removes your account, trips you own, associated uploaded files, active memberships, notifications and Wafflelog planning records from active systems. It may also remove content you contributed to trips owned by someone else, and collaborators will lose access to trips that you owned.
The app also attempts to remove its local database and downloaded media from the device used for deletion. If that cleanup cannot complete, removing the app or clearing its app data removes the remaining local copies.
Limited purchase, accounting, fraud-prevention, security and backup records may remain where required or reasonably necessary. Apple, Google, RevenueCat and other independent providers retain records under their own obligations and policies.
Account deletion permanently forfeits unused Trip Assistant Passes. Passes cannot be transferred to a new account after deletion.
Children
Wafflelog is not designed for children under 13, and you must be at least 13 to create an account. If you are under 18, you should use Wafflelog with the permission and involvement of a parent or legal guardian.
We do not knowingly collect personal information from a child under 13. A parent or guardian who believes a child has provided information can contact us so that we can investigate and take appropriate action.
Security
We use administrative, technical and organisational measures designed to protect information, including access controls, private file storage and encrypted network connections. No service can guarantee absolute security.
Use a strong, unique password, protect access to your device and contact us promptly if you believe your account has been accessed without permission.
Changes and contact
We may update this policy as Wafflelog develops or legal requirements change. We will update the date above and provide appropriate notice before a material change takes effect.
Privacy questions and requests can be sent to support@wafflelog.co.uk or by post to Wafflelog Limited, 128 City Road, London, United Kingdom, EC1V 2NX.