Privacy Policy

1. Information we collect

Information you provide

• Account information, such as your email address, display name, account identifier, and sign-in provider.
• Rider profile information, including your cycling disciplines, preferred pace, distance, terrain and climbing preferences, route avoidances, break preferences, bikes, units, alert choices, and connected-service choices.
• Profile content, such as a profile photo you choose to upload.
• Route and journey content, including prompts and chat history, chosen places and stops, route coordinates, saved journeys, route edits, and journey-sharing choices.
• Communications, including information you send when you ask for support or make a privacy request.

Information collected when you use Waay

• Location. With your permission, Waay uses precise device location to start routes near you, show your position, find nearby places, and support navigation. Your live position is not intentionally stored as a standalone location history, but saved and shared routes may reveal places you start, finish, or visit.
• Usage and diagnostics. We may receive basic technical information such as request times, feature activity, error details, device and app information, IP address, and security logs. This helps us operate, secure, and improve Waay.
• Subscription information. Apple and our purchase management provider give us purchase status, product, entitlement, and renewal information. We do not receive your full payment-card details.

Connected services

If you connect Strava or another supported service, Waay receives the information needed for the feature you choose, such as account and route identifiers, saved route details, route geometry, or an access token. The connected service controls information it processes under its own terms and privacy policy. You can disconnect a service from Waay’s settings or the provider’s settings.

2. How we use information

We use information to:

• create and secure your account;
• plan, explain, save, sync, import, and share cycling routes;
• personalize routes to your riding profile and preferences;
• provide maps, place search, weather, route briefings, and navigation;
• manage subscriptions and restore purchases;
• answer support requests and send service communications;
• detect abuse, troubleshoot errors, and protect the Service; and
• understand and improve how Waay performs.

Where applicable law requires a legal basis, we rely on performing our contract with you, your consent, our legitimate interests in operating and securing the Service, and compliance with legal obligations. You can withdraw consent through device settings or by contacting us, but withdrawal does not affect earlier lawful processing.

3. Route request processing

When a route-planning feature uses a model provider, Waay may send the information needed to answer the request—such as your prompt, recent conversation, rider preferences, route context, and relevant location—to that provider and to mapping providers. We configure model requests not to be stored by the provider where that option is available. Operational traces may be processed by our observability provider to diagnose quality and reliability; known secrets and email addresses are filtered from those traces before they are sent.

4. When we share information

We share information only as needed with:

• Service providers that support hosting, authentication, cloud storage, mapping, place search, route generation, weather, automated request processing, diagnostics, and subscriptions. These currently include Apple, Google Firebase and Google Places, Stadia Maps, OpenAI, Langfuse, RevenueCat, and weather or radar data providers used by the app.
• Connected services such as Strava, when you choose to connect or export information to them.
• People you choose. If you create a journey-sharing link, anyone with the link may be able to view the shared journey until the link expires or you revoke it.
• Authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud or abuse, or complete a merger, financing, acquisition, or sale of assets subject to appropriate safeguards.

Waay does not sell your personal information or use it for third-party targeted advertising.

5. Storage, retention, and security

Account profiles, photos, and saved journeys are stored in cloud services so they can sync across sessions. Some preferences and temporary route state may also remain on your device. We keep information for as long as your account is active or as reasonably necessary to provide the Service, resolve disputes, prevent abuse, meet legal obligations, and maintain legitimate business records. Retention periods vary by the type of information and its purpose.

We use technical and organizational safeguards designed to protect information. No storage or transmission method is completely secure, so we cannot guarantee absolute security.

6. Your choices and rights

• Change location, photo, and tracking permissions in iOS Settings.
• Update rider preferences, units, alerts, and connected services in Waay’s settings.
• Delete individual saved journeys or revoke sharing links.
• Request access, correction, deletion, restriction, portability, or objection where these rights apply to you.
• Lodge a complaint with your local data-protection authority if you believe your rights have been infringed.

To make a privacy request or request account deletion, use the developer contact shown on Waay’s App Store product page. We may need to verify your identity before completing a request.

7. International processing

Waay and its providers may process information in countries other than the one where you live. Where required, we use recognized safeguards for international transfers and require providers to protect the information they process for us.

8. Children

Waay is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information to Waay, contact us so we can review and remove it where appropriate.

9. Changes to this policy

We may update this policy as Waay changes. We will post the revised policy here and change the date above. If a change materially affects your rights, we will provide additional notice when required.

10. Contact

For privacy questions or requests, contact Waay using the developer contact listed on the app’s App Store product page. Please include “Privacy” in the subject so your request reaches the right place.