WaddleTrip

Privacy Policy

Last updated: July 3, 2026

This policy explains what data WaddleTrip collects, why, who processes it on our behalf, and the choices you have. The short version: we collect what we need to run a collaborative trip planner, we don’t sell your data, and you can ask us to delete it.

1. What we collect

  • Account data. Your email address, display name, and a securely hashed password (managed by Supabase, our auth provider).
  • Viewing without an account. Public trip pages and read-only invite previews can be viewed without signing in; we do not require any personal information to view them.
  • Trip content. Everything you and your group add to trips: trip names, dates, destinations, places, pasted links, idea cards, votes, comments, and schedules.
  • Usage analytics. Product events (like creating a trip or sending an invite), pages visited, and basic device/browser information, collected via PostHog.
  • Cookies and campaign data. Cookies keep you signed in and support analytics. We also record UTM parameters (e.g. which link or campaign brought you here).
  • Payment data. If you subscribe to Pro, payment is handled by Stripe. We never see or store your full card number — we store only your subscription status and Stripe customer reference.

2. How we use it

  • To provide WaddleTrip: sync trips in real time between members, show maps and places, send invite and account emails.
  • To process Pro subscriptions and payments.
  • To understand how the product is used and improve it (analytics, funnels).
  • To keep the service secure and prevent abuse.

We do not sell your personal data or share it with third parties for their own advertising.

3. AI processing of pasted links

When you paste a URL into a trip, we fetch the linked page and may send its content (and the URL) to an AI service to extract place details and build an idea card. The pasted URL and the resulting card become part of the trip’s content, visible to its members. Don’t paste links to private or sensitive material.

4. Who processes your data

We use a small set of service providers to run WaddleTrip. They process data on our behalf, under their own privacy and security commitments:

  • Supabase — database, authentication, and realtime sync (stores account data and trip content).
  • Vercel — application hosting and delivery.
  • PostHog — product analytics (usage events, cookies).
  • Stripe — payment processing for Pro subscriptions.
  • Resend — transactional email (invites, account emails).
  • Google Maps & Places — maps and place search. Your search queries and map interactions are sent to Google and are subject to the Google Privacy Policy.

We may also disclose data if required by law, or as part of a merger or acquisition (in which case this policy continues to apply to it).

5. Sharing within trips

WaddleTrip is collaborative by design. Content you add to a trip — including your display name next to your ideas, votes, and comments — is visible to everyone in that trip. If a trip is shared publicly, its content is visible to anyone with the link.

6. Data retention and deletion

We keep your data while your account is active. You can delete trips you own at any time. To delete your account and personal data, email contact@waddletrip.com from your account email and we will delete it within 30 days. Content you contributed to shared trips may remain in those trips for the other members, no longer linked to you.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to certain processing. Email us at contact@waddletrip.com and we will honor these requests.

8. Security

All traffic is encrypted with HTTPS, passwords are hashed, and access to trip data is enforced with database-level access rules. No system is perfectly secure, but we take reasonable measures to protect your data and will notify you of any breach as required by law.

9. Children

WaddleTrip is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child under 13 has given us personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy as WaddleTrip evolves. Material changes will be posted here with an updated date at the top.

11. Contact

Privacy questions or requests: contact@waddletrip.com. See also our Terms of Service.