Privacy Policy
Closed beta · last updated October 2026
Waylo is a travel-planning app made by a small team. This policy says what we
collect, why, and what we never do with it — in plain words, because we read
these things too.
What we collect
- Account: your phone number (for login by OTP) and the name you choose.
- Your trips: itineraries, chat messages with Waylo, saved places, and the
preferences you share (like "vegetarian" or "no early starts") so plans fit you.
- Shared content: reels and links you share into Waylo, processed to extract
the places in them.
- Booking requests: what you asked us to book, so we can book it.
- Diagnostics: crash reports and basic device info when something breaks.
The waitlist
If you join the waitlist on this website, we collect your phone number with its
country code, the date you joined, and that you signed up from the website. That's all.
- Why: to send you one text when your invite is ready.
We don't use it for marketing, and we won't call you.
- Who sees it: our team, our database host, and the SMS provider
that delivers the invite text. Nobody else.
- How long: until the waitlist closes at the end of the beta, then we
delete it. If you'd rather not wait, ask and we'll delete it sooner.
- Removing it: email us with the number and we'll delete it.
What stays on your phone
Your photos never leave your device. The trip book builds its pages from your
camera roll locally; only captions and place notes sync. Keepsake cut-outs are
processed on-device and stored on-device.
If you connect Gmail
Connecting Gmail is optional. It lets Waylo find your booking confirmations and
tickets and put them in the right trip, so you don't forward them by hand. We ask
Google for read-only access; Waylo can't send, change or delete your email.
- What we look at: emails that have attachments. For those, the
sender, subject, date, a short preview and the attachment names are checked against
your trips' destinations and dates to decide whether the email is a booking for one
of them. Our AI model provider makes that check. Nothing about emails that don't
match is kept.
- What we keep: for an email that clearly matches a trip, its
attachments are saved to that trip's Files (everyone on the trip can see them), and
booking details (what was booked, the date and time, the booking reference) are added
to the itinerary. We also keep an encrypted access token so we can check again later.
- What we never do: no person at Waylo reads your email. We don't
use Gmail data for ads, don't sell it, don't use it to train AI models, and don't
share it beyond the processors that run this feature.
- Turning it off: remove Waylo under your Google Account →
Security → Third-party connections, or email us. Deleting your Waylo account revokes
the access too. Files already saved to a trip stay there until you or the trip
removes them; ask us and we'll delete them.
Waylo's use and transfer of information received from Google APIs adheres to the
Google API
Services User Data Policy, including the Limited Use requirements.
What we never do
- We don't sell your data. To anyone, ever.
- We don't show ads or share your data with advertisers.
- We don't read your camera roll server-side — photo processing is on-device.
- Private notes you write for yourself are never pooled or shown to other travellers.
Who else touches data
We use a small set of processors to run the service: cloud hosting and database,
an AI model provider for planning conversations, Google Maps for place data,
Twilio for login codes, Firebase for push notifications, Mixpanel for product
analytics, and Razorpay for Pro subscription payments. Each receives only what it
needs to do its job. Your card, UPI or bank details go straight to Razorpay; we never
see or store them.
What we measure
During the beta we record which features get used — a plan was created, a stop
was reordered, a briefing was opened — so we can tell what's working. These events
carry counts and screen names, never the content of your messages, your notes, or
your photos, and you're identified to our analytics by an account id rather than
your phone number.
Deleting your account
Settings → Delete account removes your profile, preferences, devices and pending
data. Group itineraries you contributed to remain with the group, with your name
removed. Or email us and we'll do it by hand.
Contact
hello@waylo.club