Privacy Policy

This policy explains what information Wayfarer collects when you use this site, why we collect it, which outside services we share it with, and the choices you have. It covers the account system, the destinations and guides catalog, and the AI itinerary planner.

Information we collect

Account information

When you sign up, we collect the email address and password you provide. Authentication is handled by Supabase Auth — we never see or store your password in plain text; Supabase hashes and manages it on our behalf. If you upgrade to a paid plan in the future, billing details will be collected and processed directly by our payment provider, not stored on our servers.

Itineraries and trip preferences

When you use the AI itinerary planner, we collect the inputs you provide — your chosen or typed destination, trip length, travel styles (e.g. relaxed, adventure, culture, food), and budget level — along with the itinerary generated from them. This is saved to your account so you can view or delete it later from My Itineraries.

Cookies and session data

We use a small number of first-party cookies, set by Supabase Auth, to keep you signed in between visits. These are strictly functional — we don't use advertising or third-party tracking cookies on this site.

How we use this information

• To create and secure your account, and keep you signed in.
• To generate itineraries: your trip preferences are sent to Anthropic's Claude API to produce the day-by-day plan, and the result is saved to your account.
• To display your saved itineraries back to you and let you delete them.
• To operate, maintain, and improve the site.

We do not sell your personal information to anyone.

Third-party services we use

We rely on a small number of infrastructure providers to run Wayfarer. Each only receives the data it needs to do its job:

• Supabase hosts our database and handles authentication. Your account credentials, saved itineraries, and related account data are stored in Supabase's infrastructure. See Supabase's privacy policy.
• Anthropic processes the trip details you submit to the planner (destination, trip length, travel style, budget level) in order to generate your itinerary via the Claude API. Anthropic does not receive your email, password, or any other account information — only the specific inputs needed to write that itinerary. See Anthropic's privacy policy.

Data retention

We keep your account information for as long as your account is active. Saved itineraries are kept until you delete them individually, or until you close your account. If you'd like your account and all associated data removed entirely, contact us using the details below.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you. In practice, on Wayfarer today:

• You can delete any saved itinerary yourself, at any time, from My Itineraries.
• You can request a copy of your account data, or full account deletion, by emailing us — we'll act on it promptly.
• You can update your account email or password at any time by contacting us.

Security

Access to your account is protected by Supabase Auth, and data is transmitted over encrypted (HTTPS) connections. Row-level security policies on our database ensure that only you can view, create, or delete your own itineraries and subscription data — no other user, and no part of our own application code, can read another user's private data outside of that policy.

Children's privacy

Wayfarer is not directed at children, and we do not knowingly collect personal information from anyone under 16.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page. Continued use of Wayfarer after a change means you accept the updated policy.

Contact us

Questions about this policy, or requests about your data, can be sent to hello@wayalt.com.