For TravelersFor Destinations

Wander App Privacy Policy

Effective Date: September 19, 2026
Last updated: September 19, 2026
Previous version: effective October 1, 2022, last updated August 5, 2026

Introduction

Thank you for using Wander App Inc. (“Wander,” “Company,” “we,” “our,” or “us”). This Privacy Policy explains what information we collect when you use our websites, our mobile applications, the maps we embed on our partners’ websites, our text-message and AI assistants, our tools for destinations, businesses and creators, and our other services and tools (collectively, the “Services”), how we use and share it, and the choices and rights you have.

This Privacy Policy applies to everyone who interacts with us: travelers using the Wander app or a Wander map on the web, visitors to our websites, people who receive a text from us, the tourism organizations, businesses and creators who publish on Wander, and their staff. Because different parts of the Services collect different information, we have organized this Privacy Policy by the kind of information involved. If you have any questions about this Privacy Policy or how we handle your Data, please email us at info@wandermaps.com.

In this Privacy Policy, we use the word “Data” to describe all the information we collect that relates to you and your use of the Services. “Data” is broken into categories, which are defined in the “Data We Collect and How We Use It” section below. We may refer to the categories separately, but when we use the word “Data” on its own we mean all of them.

Because of the nature of our Services, the term “Data” also includes information, including personally identifiable information, that you gather and upload to the Services about other people, for example the phone numbers in your address book or the guest details in a booking. We rely on your compliance with our Terms of Service, in which you represent that you have the permission you need to share that information with us.

The term “Data” does not apply to de-identified, pseudonymized, anonymized, or aggregated information that is derived from Data and that cannot reasonably be connected with you (“De-identified Data”). We hold all rights in De-identified Data and may use it for any purpose, including sharing it with the destinations and businesses that publish on Wander and with our advertising and research partners, without attribution or compensation to any person. We commit to maintaining and using De-identified Data only in de-identified form and not to attempt to re-identify it, except to test whether our de-identification works.

Description of Services

Wander operates a platform for creating, publishing, distributing and exploring interactive maps. Today the Services include:

Lawful Basis for Processing

Many jurisdictions require that we disclose the lawful basis for our processing of your Data. We do that in the “Data We Collect and How We Use It” section and elsewhere in this Privacy Policy. In general, we process your Data (1) to perform our contract with you, (2) with your consent, where we ask for it, for example when you grant a device permission or tick an opt-in box, (3) for our legitimate interests in operating, securing, improving and marketing the Services, and (4) to comply with law.

By accessing or using the Services you agree to the collection, use and sharing of your Data as described in this Privacy Policy. Where our processing is based on your consent, you may withdraw that consent at any time, for example by changing a device permission or an in-app setting, and we will stop the processing that depended on it. This may limit the parts of the Services you can use. Withdrawing consent does not affect processing we carried out before you withdrew it, and does not prevent us from continuing to process Data where we have another lawful basis, such as retaining records we are required by law to keep, or using De-identified Data.

When you enter into an agreement with us, whether by accessing the Services, executing an agreement, or tapping “Continue,” “I Accept” or similar language in the app or on the web, we will process your Data for the purposes of performing that agreement, and your withdrawal of consent will only take effect after those purposes have been fulfilled and any legal obligation to retain the Data has expired.

Intended Users

The Services are directed to persons 18 years of age or older, or persons 13 years of age or older who have a parent’s, legal guardian’s, or other caregiver’s consent. The Services are not directed to children under 13, and we do not knowingly collect Data from anyone under 13. If we become aware that we have collected Data from a person under 13, we will delete it as soon as practicable, subject to our obligations under applicable law. If you believe that we have collected Data from a person under 13, please contact us at info@wandermaps.com.

Data We Collect and How We Use It

Listed below are the categories of Data we collect when you use the Services. We do not sell your Data for money. We always have a lawful basis for collecting Data, and we describe the purposes for each category below. If we want to use Data for a materially different purpose that is not described in this Privacy Policy and for which we have no other lawful basis, we will tell you first and, where required, ask for your consent.

A. Registration Data

Data Description:
Registration Data is the information you give us, or that a sign-in provider gives us, to create and secure your account. It includes:

Lawful Basis for Processing:
Our lawful basis for processing Registration Data is our contract with you and your consent. We can only provide the Services if we have the Registration Data, so we store and access it for as long as your account exists.

B. Engagement Data

Data Description:
Engagement Data is the content you create, save or send using the Services, and your interactions with other people on Wander. It includes the places you save, the lists, trips, guides, notes, reviews, ratings and recommendations you create, the photos you choose to upload, the links you share with us to import, the people and creators you follow and who follow you, the check-ins you record, the events and deals you save, the questions you ask Wander AI (see section H), the answers you speak or type in Creator Studio, the bookings you request (see section D), and any feedback, support requests or survey responses you send us.

Some Engagement Data is visible to other people by design: for example, your public profile, the lists you make public, the recommendations you share with followers, and content you share by link. Other Engagement Data is private to you unless you share it.

Lawful Basis for Processing:
Our lawful basis for processing Engagement Data is (1) our contract with you, (2) our obligation to provide you with the Services, and (3) our legitimate interest in improving our Services.

How We Use It and Who We Share It With:
We use Engagement Data to provide the Services to you, to personalize what you see, to power social features such as friends’ recommendations and “places near you,” and to improve the Services. Engagement Data is accessible to us, to you, to the people you choose to share it with, and to the limited service providers we use to operate the Services. Where you save or interact with a place on a destination’s map, the destination that publishes that map may see aggregated statistics about that activity (see “Sharing with Destination and Business Partners” below). Both during the term of our agreement with you and thereafter, we may convert Engagement Data to De-Identified Data, which belongs solely to us, and we may retain De-Identified Data after we delete your Engagement Data.

C. Usage Data

Data Description:
Usage Data is information about how you use the Services and the devices and connections you use to reach them. It includes:

Lawful Basis for Processing:
Our lawful basis for processing Usage Data is (1) our contract with you, (2) our obligation to provide you with the Services, (3) our legitimate interest in securing, understanding, improving and marketing the Services, and (4) your consent, where a platform requires it (for example, for the iOS advertising identifier).

How We Use It and Who We Share It With:
We use Usage Data to operate, secure, troubleshoot and improve the Services, to understand how the Services are used, to measure the effectiveness of our marketing and of our partners’ campaigns, to report aggregated audience statistics to the destinations and businesses that publish on Wander, and for the advertising and attribution purposes described below. Usage Data is accessible to us and to the service providers, advertising partners and measurement partners we use. We may convert Usage Data to De-Identified Data at any time and retain it in that form.

D. Payment and Booking Data

Data Description:
Some features of the Services involve a payment. Today that is principally bookings: you can request and pay a deposit for a stay at a property listed on a Wander map, and the property is paid through Wander. We may add other paid features in the future.

When you make a booking we collect the guest name, email address and phone number you enter, your stay details (dates, number of guests and rooms, room type, and any note you leave for the property), the amounts involved (rate, fees, estimated taxes, deposit, balance due and cancellation terms), and the status of the booking, any refund, and any dispute. If you were referred to the booking from a campaign or a shared map, we also record the attribution data described in section C.

We never see or store your card number. Payments are processed by Stripe, Inc. (“Stripe”). Your card details are entered into and held by Stripe, and we receive only a payment reference, the payment status, and, where Stripe provides it, the card brand and last four digits. Stripe’s handling of your payment information is governed by Stripe’s privacy policy. Properties and businesses that accept payments through Wander onboard with Stripe directly and share their business and banking details with Stripe, not with us, except for the account status information Stripe reports back to us.

Lawful Basis for Processing:
Our lawful basis for processing Payment and Booking Data is (1) our contract with you, (2) our legal obligations, including tax, accounting and fraud-prevention obligations, and (3) our legitimate interest in operating and improving the booking service.

How We Use It and Who We Share It With:
We use Payment and Booking Data to complete your booking, to send you and the property confirmations and updates by email or text, to handle cancellations, refunds, guarantees and disputes, to detect fraud, and to keep the records we are required to keep. We share the guest details and stay details with the property you are booking, and the payment details with Stripe. We share Payment and Booking Data with no one else except as described under “Sharing Your Information.”

E. Supplemental Mobile Data

Data Description:
The Wander app asks for certain device permissions. Each is optional, each is explained when the app asks, and each can be changed later in your device settings. When you grant one, we collect the following:

1. Your precise location. If you allow location access while using the app, we collect your device’s precise location (GPS, Wi-Fi and cell positioning) to center the map where you are, show places, events and deals near you, give directions, announce tour stops as you reach them, verify check-ins, and show your position as a what3words three-word address. While the app is open we also record location samples, typically no more than once every 30 seconds and only when you have moved or lingered, together with the reported accuracy. These samples are sent to our servers and stored under a pseudonymous identifier; they feed the visitor-movement analytics described under “Sharing with Destination and Business Partners.” We deliberately drop samples whose reported accuracy is worse than about 100 metres.

To provide these features, your coordinates are also sent to Mapbox (to load map tiles and run map searches) and, when a what3words address is shown, directly from your device to what3words Ltd (to convert coordinates into a three-word address). Each of those companies processes the coordinates under its own privacy policy. We do not send your location to advertisers.

Location accuracy and safety. Location shown in Wander, including what3words addresses, is approximate. It depends on your device’s GPS and network positioning, which is usually accurate to within about 5 metres outdoors but can drift by 30 metres or more near buildings, under trees, indoors, or when using Wi-Fi or cell positioning. Wander is not an emergency or safety service and location shown in the app should not be relied on in an emergency. In an emergency, call 911 or your local emergency number first.

2. Background location (optional, off by default). On iOS you can choose in Settings to let Wander use your location in the background while you are visiting a destination. If you turn this on and grant the “Always” permission, the app records occasional location samples (roughly every 90 seconds or 150 metres) while you are within about 25 kilometres of a destination you have opened, even when the app is closed, so that we can notify you when you are near a place with an event today or a place someone you follow recommends, and so that the destination can understand how visitors move. Background location is never on unless you turn it on, and you can turn it off at any time in Settings or by changing the permission on your device. On Android, Wander does not use background location.

3. Your contacts. See section G.

4. Your photos and camera. If you allow access to your photos or camera, we upload only the images you specifically choose to attach to a place, note, guide, challenge or your profile, together with basic file metadata such as type and size. We never scan or import your photo library or camera roll.

5. Your microphone. If you use the hold-to-talk feature in Creator Studio, we record your voice while you hold the button and send the recording to our servers, where it is transcribed by a speech-to-text provider (currently Deepgram) and the transcript is used to draft your guide. We do not listen through the microphone at any other time, and you can always type instead.

6. Notifications. If you allow notifications, we store a push token for your device (issued by Apple or Google through Firebase Cloud Messaging) so that we can send you alerts such as a friend joining or following you, activity on your content, nearby events and recommendations when you have background location on, trail or safety alerts, booking updates, and announcements from destinations you follow. You can choose which kinds of notifications you receive in the app’s notification settings and can turn notifications off entirely on your device.

7. App tracking (iOS). See “Advertising identifier” in section C and “Advertising, Attribution and Marketing Technologies” below.

Lawful Basis for Processing:
Our lawful basis for processing Supplemental Mobile Data is your consent, which you give by granting the relevant permission and can withdraw at any time, together with our contract with you and our legitimate interest in providing and improving location-aware features.

How We Use It and Who We Share It With:
We use Supplemental Mobile Data only for the purposes described above and share it only with the service providers named above, with the destination and business partners described below (in aggregated or pseudonymous form only), and otherwise as described under “Sharing Your Information.”

F. Connected Social Account and Imported Content Data

Data Description:
Wander lets you bring places you have found on social platforms into your maps and trips. This happens in one of two ways, and the Data involved is different in each.

1. Content you import by link. When you paste or share a link to a publicly available post — for example from Instagram, TikTok, YouTube, Pinterest, Facebook, or a blog — whether in the app, on the web, or by texting it to us, we retrieve the publicly available content at that link. That typically includes the post’s caption or description, its image, video or thumbnail, the permalink, the publicly displayed author name or handle, and any location or place tag the author attached. We use it for one purpose: to identify the places mentioned in the post so we can turn them into map pins, lists, or itinerary items for you. We do not need or use your credentials for the third-party platform in order to do this, and we do not access anything that is not publicly available at that link.

To do this we use service providers: a web-scraping service (Apify) to fetch the public post, and artificial-intelligence providers (currently Google Vertex AI, Anthropic, Deepgram and Groq) that analyze the text, images, video frames and audio of the post to extract place names. The content of the post, and any transcript we generate from it, is sent to those providers for that purpose. We keep the link you shared, the content we retrieved, the transcript, and the places we extracted with your account so that you can review and re-run an import.

2. Content from a social account you connect. If you use Wander as a creator, you may choose to connect a social account you control so that Wander can read the posts that account has published. Today this is available for Instagram, using Instagram’s official Instagram API with Instagram Login, and only for Instagram Business and Creator accounts. We may add other platforms (for example TikTok or YouTube) in the future on the same terms described here.

What we request and what we receive. We request a single read-only permission, instagram_business_basic. It lets us read that account’s basic profile and the media it has published. Specifically, we receive:

What we do not do. We do not request permission to post, comment, send or read direct messages, follow or unfollow accounts, or view your follower list, and we cannot do any of those things with the permission we hold. We do not read posts from accounts you do not control. We do not sell this Data, we do not use it to serve or target advertising, and we do not share it with advertisers or data brokers. We use it for one purpose: to identify the places in your posts so that you, and the people who follow your recommendations, can find them on a map.

Lawful Basis for Processing:
Our lawful basis is your consent, which you give at the third-party platform when you authorize the connection, together with our contract with you to provide the Services. You may withdraw that consent at any time by disconnecting, as described below.

How long we keep it. We hold the access token only for as long as the connection is live. The token we receive is long-lived and expires roughly 60 days after it is issued unless it is renewed; if it lapses, the connection stops working and you would need to authorize it again. We store the token encrypted, and the key used to encrypt it is held separately from the database that holds the encrypted value. When you disconnect, when the token expires, or when Instagram tells us the token is no longer valid, we delete the stored token. If you delete your Wander account, the stored token and the connection record are deleted with it.

Places, lists, notes, and trips you created from imported content are yours and remain in your Wander account after you disconnect — they are Engagement Data, described in section B above, and disconnecting a social account does not delete them. If you want those removed as well, delete them in the app or follow our Data Deletion instructions.

How you disconnect. You can disconnect a connected account at any time in the Wander app, under your account settings. That takes effect immediately on our side: we stop making requests and we delete the stored token.

Please note that a second step is required to fully revoke access. Instagram does not provide a way for an application to invalidate its own access token on your behalf. To fully revoke Wander’s access you should also remove Wander under Instagram → Settings → Apps and Websites. The Wander app tells you this at the point you disconnect. We say so plainly because the alternative — implying our own disconnect button is sufficient at the platform level — would not be accurate.

Third-party terms. Your use of any connected platform remains governed by that platform’s own terms and privacy policy, which are outside our control and may change independently of this Privacy Policy. Our use of information received from Meta APIs adheres to Meta’s Platform Terms, including the applicable Developer Policies and data-use restrictions.

G. Contacts Data

Data Description:
The Wander app can help you find friends who already use Wander and invite friends who do not. This is optional. If you choose to allow access to your contacts, the app reads the names and phone numbers in your address book on your device. Names stay on your device; they are used only to show you the list. The phone numbers are sent to our servers, in the international format your device stores them in, so that we can check which of them belong to Wander users and show you those people. We do not upload email addresses, photos, notes, or any other address-book fields.

What we keep. We keep the phone numbers you uploaded with your account, so that if one of those people joins Wander later we can let you know and connect you. We do not use uploaded numbers to contact those people, to build profiles of people who are not Wander users, or for advertising, and we do not share them with anyone. If you turn off contacts access, we stop reading your address book. When you delete your account, the uploaded numbers are deleted with it. You can also ask us to delete them sooner by contacting support@wandermaps.com.

Inviting a contact. If you choose to invite a contact who is not on Wander, we send that person one text message, at your request, that includes your name and a link to the app. We keep a log of the messages we send (see section H) and do not send further messages to that number unless the person signs up or asks us to.

Your responsibility. By uploading contacts you confirm that you are permitted to share those phone numbers with us for these purposes.

Lawful Basis for Processing:
Our lawful basis for processing Contacts Data is your consent, given when you grant the contacts permission and when you choose to send an invitation, together with our legitimate interest in helping you connect with people you know.

H. Wander AI, Search, and Text-Message Assistant Data

Data Description:
Wander includes features powered by artificial intelligence (“Wander AI”): a chat assistant in the app and on web maps, AI-assisted search, an assistant you can text links and questions to, Creator Studio, automatic translation of place descriptions, and the place-extraction described in section F. When you use Wander AI we collect the questions and messages you send, and, so that the answer is useful, we send the assistant context from your session: your approximate or precise location if you have shared it, the area of the map you are looking at, the places on the map near you, the place or list you are viewing, the destination’s curated content, your earlier messages in the same conversation, and, when the assistant needs it to answer, the contents of your lists, trips and saved places and the places your friends have recommended to you.

Who processes it. Wander AI is built on large language models and speech and vision services provided by third parties, currently Anthropic, Google, Deepgram and Groq, and we may use other providers such as OpenAI in the future. Your messages and the context described above are sent to those providers to generate a response. In some cases the provider’s system calls back into Wander, using a short-lived credential for your session, to look up your lists, trips and saved places on your behalf. We use these providers under commercial terms that limit them to processing your Data in order to provide their service to us, and we do not opt in to any provider program that uses customer data to train models.

Automated content. Answers from Wander AI are generated automatically and may be inaccurate or incomplete. They are recommendations, not decisions that have a legal or similarly significant effect on you, and you should verify important details such as opening hours, prices, safety information and directions.

What we keep. We keep your conversation history so that you can continue a conversation and so that we can improve Wander AI. You can delete a conversation in the app, and conversation history is deleted with your account.

Text messages. If you choose to text a link to Wander, the message you send, your phone number, and our reply are processed as described in this section and logged as described under “Text Messages and Email” below.

Lawful Basis for Processing:
Our lawful basis is our contract with you, your consent where you share location or other context, and our legitimate interest in improving Wander AI.

I. Destination, Business, and Creator Data

Data Description:
If you use Wander on behalf of a destination, tourism organization, business, venue, property, or as a creator, we collect the information you give us to publish and manage your presence on Wander. That includes your name, work email address and phone number, your organization and role, your business’s name, address, hours, photos, descriptions and other listing details, the maps, guides and content you publish, your responses to visitor suggestions, your booking settings and agreements, and, if you claim a listing, the verification steps you complete (which may include a code sent by text or email or a postcard mailed to the business address). We also collect your interactions with our sales, onboarding and support teams and the information in any contract or order form.

How We Use It and Who We Share It With:
We use this information to set up and operate your account, verify that you are authorized to manage a listing, publish your content, deliver analytics about your map and visitors, process payments and payouts through Stripe, provide support, and communicate with you about your account, including renewals and new features. We store business contact and account records in the customer-relationship-management systems we use (currently Close, Attio and HubSpot), send email through SendGrid, send texts through Twilio, and may use a mail service (Lob) to send a verification postcard. We may contact businesses whose listings appear on a published map to invite them to claim the listing; you can opt out of those messages at any time using the link in the message or by contacting us. Business listing details you publish are public by design.

Lawful Basis for Processing:
Our lawful basis is our contract with your organization, our legitimate interest in operating and marketing the Services to destinations and businesses, and, for marketing messages, your consent where the law requires it.

Advertising, Attribution and Marketing Technologies

Wander is free for travelers because destinations, businesses and creators pay to publish and promote their places on Wander, and because we, and they, need to understand what brings people to a map and what people do once they arrive. To support that, we use, and may in the future use, the following technologies on our apps, our websites, our embedded maps, and in our emails and text messages. We describe them broadly on purpose so that we can adopt new tools of the same kind without changing this Privacy Policy; we will update the list of named partners from time to time.

Your choices. Some of the activities above may be considered “sharing” of personal information for cross-context behavioral advertising, or “targeted advertising,” under United States state privacy laws, even though no money changes hands. You have the right to opt out. You can do so by emailing support@wandermaps.com with the subject line “Do Not Sell or Share,” by declining tracking when iOS asks, by turning off or resetting the advertising identifier on your device, and, on the web, by sending a Global Privacy Control signal from your browser. We treat a Global Privacy Control signal as a valid opt-out of sharing for the browser that sends it. Opting out does not stop us from using our own first-party analytics, from measuring our own campaigns using De-identified Data, or from sending you the service messages described below.

Sharing Your Information

Except where a specific limitation is noted above, we may share your Data as follows:

At Your Instruction: If you ask us to make your Data available to a third party, for example by sharing a list by link, inviting a contact, requesting a booking, or sending a map to your own phone, we will do so.

With Other Users: Your public profile and any content you make public or share with followers is visible to other users of the Services, and public content may be visible to anyone on the web and indexed by search engines.

Sharing with Destination and Business Partners: The maps you use on Wander are published by tourism organizations, destinations, businesses and creators (“Publishers”). We provide Publishers with analytics about their maps so that they can understand and improve the visitor experience. These analytics are aggregated or de-identified: for example, how many people opened the map, which places and categories were most viewed or saved, how long visitors spent, where visitors came from, and, where enough visitors have shared their location, heat maps of where visitors go and the common routes between places. Movement analytics may include the sequence of locations visited by individual devices, but each device is identified only by a one-way code that we do not share the key to, and never by name, contact details, account or any other information that could reasonably identify you; movement analytics are only produced when a minimum number of devices is present, and location samples are snapped to a grid and filtered for accuracy before they are used. If you make a booking, submit a suggestion or correction about a place, respond to a Publisher’s content, or claim a business, the Publisher or business concerned will see the information you submitted. We do not give Publishers your contact details unless you ask us to or the law requires it.

Sharing with Vendors and Service Providers: We use third-party companies to help us provide the Services, including cloud hosting and databases (Google Cloud and Firebase), analytics (Google Cloud BigQuery and Firebase Analytics), error monitoring (Sentry), application performance monitoring (New Relic), maps and geocoding (Mapbox, Google Maps Platform and what3words), text messaging (Twilio), email (SendGrid), payments (Stripe), postal mail (Lob), IP geolocation (MaxMind), feature management (Flagsmith), web-content retrieval (Apify), speech-to-text and text-to-speech (Deepgram, Groq and Google Cloud), artificial intelligence (Anthropic, Google, and any successor or additional providers we adopt), and customer-relationship management (Close, Attio and HubSpot). We share Data with these providers only as needed for them to perform their services for us, and we require them by contract to protect it and to use it only for that purpose. A current list of our sub-processors is available on request at info@wandermaps.com.

Advertising, Measurement and Attribution Partners: As described under “Advertising, Attribution and Marketing Technologies,” we may share Usage Data, advertising identifiers, attribution data and hashed contact identifiers with advertising and measurement platforms such as Meta, Google, TikTok, LinkedIn and Microsoft. These partners may use that information for their own purposes under their own privacy policies.

Sign-in and Platform Providers: When you sign in with Apple or Google, connect a social account, or use a feature that relies on a third-party platform, that platform receives the information necessary to provide the sign-in or feature, under its own privacy policy.

Google Maps Platform: Some features of the Services use Google Maps Platform APIs, including Places search, geocoding and place photos. Google’s handling of the information involved is governed by Google’s privacy policy. We may cache your location on your device to provide these features.

Affiliates: We may share Data with our subsidiaries and affiliates, who will handle it in accordance with this Privacy Policy.

Business Transitions: In the event that we go through a business transition, such as a financing, merger, acquisition, reorganization, liquidation, or sale of all or a portion of our assets, the information we have about you will, in most instances, be part of the assets transferred or disclosed in due diligence. We reserve the right to transfer that information in connection with such transactions without notice to you, and we will not be required to obtain your consent for such a transfer.

Legal Disclosure and Safety: We may disclose your Data if required to do so by law or in the good-faith belief that such action is necessary to comply with applicable law, a subpoena, court order or legal process, to protect and defend our rights or property, to protect the safety of any person, or to investigate, prevent or take action regarding illegal activity, suspected fraud, or violations of our Terms of Service.

De-identified Data: We may share De-identified Data, including aggregated visitor statistics and research, with anyone for any purpose.

If we ever plan to use Data in the future for a purpose that is materially different from those identified above and we do not have a separate lawful basis for it, we will only do so after telling you and, where required, obtaining your consent. We do not sell your Data for money.

Text Messages and Email

Text messages. We send text messages through Twilio for the following purposes: verification codes when you sign in or verify a number; service messages about your account, bookings, imports, claimed listings and safety alerts; a link to open a map on your phone when you ask for one on the web (“take this map with you”); an invitation when you choose to invite a contact; replies when you text a link or a question to our assistant; and, only if you have opted in, recurring marketing and promotional messages. Consent to marketing texts is never required to use Wander and is never pre-checked. Message and data rates may apply. Reply STOP to any message to stop receiving that type of message and HELP for help. We keep a log of the messages we send and receive, including the phone number, the message content (verification codes are removed before logging), delivery status and timestamps, so that we can respond to your replies, honor opt-outs, resolve delivery problems and meet our obligations to carriers.

Email. We send transactional email (for example sign-in codes, password resets, booking confirmations, and notices about your account), social notifications you can turn off (for example when someone follows you), and, for business users, onboarding, outreach and account email. Every marketing or outreach email includes an unsubscribe link, and we honor one-click unsubscribe. We may still send administrative messages about your account or the Services after you unsubscribe from marketing.

Phone. We may call you at a number you have given us about your account or, for business users, about our Services. We do not make automated marketing calls.

Technologies We Use

The technologies we use for automatic Data collection include the following:

Cookies and local storage: We store small files and values on your browser or device, including a first-party visitor identifier, your sign-in session, your attribution data, and your preferences. You can clear these or block cookies in your browser settings; if you do, some parts of the Services may not work.

Embedded maps on partner websites: When you use a Wander map that a Publisher has embedded on its own website, the map is delivered by Wander from our own domain inside a frame, and the Data described in this Privacy Policy is collected by us on that page. The Publisher’s own website and its own cookies are governed by the Publisher’s privacy policy. Where the Services offer to send the map to your phone, the phone number you enter is sent to us, used to send that text, logged as described above, and not shared with the Publisher.

Software development kits (SDKs): Our apps include third-party code from the providers named in this Privacy Policy, such as Firebase, Sentry, Mapbox, what3words, Stripe and the Facebook SDK, which collect Data as described.

Web beacons and pixels: Pages of the Services and our emails may contain web beacons, pixel tags and similar technologies that let us and our partners count visits and opens and measure campaigns.

Geolocation: We use GPS and network positioning when you allow it, and IP-based approximate location otherwise, as described in sections C and E.

Device identifiers and fingerprinting: We use identifiers that your device or browser provides, and we may derive an identifier from device attributes, to recognize your device, prevent abuse, and measure use of the Services.

“Do Not Track” and Global Privacy Control: Our Services do not respond to browser “Do Not Track” signals, for which there is no accepted standard. We do treat a Global Privacy Control signal as an opt-out of sharing for advertising, as described above.

Your Rights Regarding Your Data

Depending on where you live, you may have some or all of the following rights regarding your Data:

How to exercise your rights. Many of these rights are available directly in the app: you can edit your profile, change device permissions and notification preferences, delete individual content, disconnect social accounts, and delete your account under Profile → Settings → Account → Delete account. For anything else, or if you no longer have access to the app, email support@wandermaps.com or follow our Data Deletion instructions. We will verify your identity before acting on a request, which may include asking you to confirm a code sent to the phone number or email address on your account. An authorized agent may submit a request on your behalf if they provide proof of your authorization. We will respond within the time required by applicable law, generally within 45 days, and will tell you if we need more time.

What deletion covers. When you delete your account we deactivate it immediately and permanently remove your sign-in, so that your profile and content are no longer available in the Services and the email address and phone number can be used again. Connected-account tokens are deleted at the same time. We then delete or de-identify the remaining Registration Data, Engagement Data, Contacts Data, conversation history and precise location records associated with your account within 90 days. We may keep information we are required to keep by law (for example booking and payment records for tax and accounting), information needed to resolve disputes or enforce our agreements, message logs needed to honor opt-outs, the record of your acceptance of our terms, and De-identified Data. Content you shared with other people may remain visible to them in a form that no longer identifies you.

Marketing choices. You can opt out of marketing email using the unsubscribe link in any message, opt out of marketing texts by replying STOP, control push notifications in the app and in your device settings, decline app tracking on iOS, and opt out of advertising sharing as described under “Advertising, Attribution and Marketing Technologies.” We may still send you service messages that are necessary to operate your account.

A. Privacy for EU/UK Residents

We are based in the United States and provide the Services primarily to travelers and destinations in the United States. We do not target the Services at residents of the European Economic Area, the United Kingdom or Switzerland, but if you use the Services from those places the General Data Protection Regulation (“GDPR”) or the UK GDPR may apply, and we will comply with them to the extent they do. Where they apply, we act as a controller of your Data, the lawful bases for our processing are as described in this Privacy Policy, and you have the rights listed above, including the right to lodge a complaint with your local supervisory authority.

By using the Services you understand that your Data will be transferred to, stored and processed in the United States and in other countries where we or our service providers operate, which may not provide the same level of data protection as your home country. Where the law requires a transfer mechanism, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum. To exercise your rights or ask about transfers, contact us at info@wandermaps.com.

B. Privacy for California Residents

This section applies to California residents and supplements the rest of this Privacy Policy under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “CCPA”).

Categories of personal information we collect. In the preceding 12 months we have collected the following categories of personal information, as described in “Data We Collect and How We Use It”: identifiers (name, handle, email address, phone number, account and device identifiers, IP address); customer records (booking guest details); commercial information (bookings, saved places and purchase history); internet and network activity (Usage Data); geolocation data, including precise geolocation; audio and visual information (photos you upload and voice recordings in Creator Studio); professional information (for business users); inferences drawn from the above (for example, the kinds of places you are interested in); and the contents of messages you send to us. We collect it from you, from your device, from sign-in and social platforms you connect, from Publishers whose maps you use, and from our advertising and measurement partners.

Sensitive personal information. We collect precise geolocation, account credentials, and the contents of your messages to us, each of which is sensitive personal information under the CCPA. We use sensitive personal information only to provide the Services you request, to secure your account, to prevent fraud, and for the other purposes permitted by the CCPA without a right to limit. We do not use or disclose sensitive personal information to infer characteristics about you. You may nevertheless ask us to limit its use at any time.

Sale and sharing. We do not sell personal information for money and have not done so in the preceding 12 months. We may “share” identifiers, device information, internet activity and attribution data with advertising and measurement partners for cross-context behavioral advertising, as described under “Advertising, Attribution and Marketing Technologies.” You may opt out of sharing at any time by emailing support@wandermaps.com with the subject “Do Not Sell or Share” or by using a Global Privacy Control signal. We do not knowingly sell or share the personal information of anyone under 16.

Purposes and disclosures. We use each category for the business purposes described in this Privacy Policy, and we disclose each category for a business purpose to the service providers and contractors listed under “Sharing Your Information,” and to Publishers only in aggregated or de-identified form. We retain each category for the periods described under “Data Retention.”

Your rights. You have the rights to know, access, correct, delete, port, opt out of sale or sharing, limit the use of sensitive personal information, and not be discriminated against, as described above. Submit a request by email to support@wandermaps.com or by using the in-app controls. We will verify your request as described above.

C. Privacy for Residents of Other U.S. States

If you live in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island or another state with a comprehensive privacy law, you may have the rights listed under “Your Rights Regarding Your Data,” including the right to confirm whether we process your Data, to access, correct, delete and port it, to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects, and to appeal our decision on your request. Where your state requires consent to process sensitive data, including precise geolocation, we obtain it through the device permission prompt and the in-app settings described above. To exercise your rights, or to appeal a decision, email support@wandermaps.com. If we deny your appeal, we will tell you how to contact your state attorney general.

D. Privacy for Other Jurisdictions

We strive to comply with the data protection and privacy laws of every jurisdiction in which they apply to us and our Services. If you have questions about your rights under the laws of your jurisdiction, please contact us at info@wandermaps.com.

Security

The security of your Data is important to us. We use commercially reasonable technical, contractual, administrative, and physical safeguards designed to protect it, including encryption of Data in transit, encryption of access tokens at rest with keys held separately from the data, pseudonymization of account identifiers in our analytics pipeline, removal of phone numbers and credentials from error reports, and access controls that limit Data to the staff and providers who need it. No system is perfectly secure, and we cannot guarantee the security of your Data. If we learn of a breach that affects you, we will notify you as required by law.

Third-Party Policies

The Services contain links to, and integrate with, third-party websites, platforms and services, including the Publishers whose maps you use, the businesses you book with, the sign-in and social platforms you connect, and the service providers named in this Privacy Policy. Their privacy practices are governed by their own privacy policies, which we do not control. The inclusion of a link or integration does not imply our endorsement of the third party, and we are not responsible for its practices.

Data Retention

We keep Data for as long as it is needed for the purpose it was collected for, as required by law, or as described below, whichever is longer, and then delete or de-identify it. In summary:

We may retain Data longer where necessary to comply with a legal obligation, resolve a dispute, enforce our agreements, prevent fraud or abuse, or where the Data has been de-identified. Retention of Data received from a connected social account is described in section F.

Amendment of this Privacy Policy

We may change this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. If a change is material, we will provide more prominent notice, which may include an email, a notification in the app, or asking you to review and accept the updated Privacy Policy and Terms of Service the next time you open the app. Changes take effect on the date stated, and your continued use of the Services after that date signifies your acceptance of them. We keep prior versions available on request.

Contact Us

If you have any questions, comments or complaints about this Privacy Policy or our handling of your Data, or if you would like to access, correct or delete your information, please contact us:

Wander App Inc.
Email: info@wandermaps.com (general questions) or support@wandermaps.com (privacy requests and data deletion)

If you have a complaint concerning our compliance with applicable privacy laws, we will investigate it and, if it is justified, take appropriate measures.

The world is bigger than your feed.

Turn reels, links, and friends' recommendations into real trips
— on official maps that work offline. Free.

Download on the
App Store
GET IT ON
Google Play

© 2026 Wander App Inc. All rights reserved.