Privacy Policy

Who we are

Vladyslav Shynder, an individual trading as Waylit, based in the United Kingdom, is the controller of the personal information described here.

What we collect

• Account information: email address, account ID, sign-in provider and authentication records. Email sign-in uses a password and email confirmation; Apple sign-in can use a relay email. Google sign-in also supplies your name and profile avatar. Authentication is handled by Supabase Auth.
• Precise location and travel history: coordinates and timestamps, time-zone offset, accuracy, altitude, speed, course, device and recording identifiers, and capture state. The phone stores recordings locally and uploads them to your account. We also record visit arrivals/departures and motion activity spans, such as stationary, walking or travelling, with timing, step counts and distance where available. Motion helps adjust recording and interpret journeys; it is not a health diagnosis.
• Derived information: visits, stays, trips, routes, cities and countries, explored map areas, summaries and inferred home areas. You can also manually add countries. This history can reveal sensitive habits and places even though we do not ask you to label them.
• Diagnostics: Sentry crash, hang and session-health reports include stack traces, app/build/update metadata, OS/device information, locale/timezone, a random installation ID and your account ID while signed in. Scrubbing is designed to remove coordinates, place/address fields, routes and map tile identifiers; account email, name and device name are excluded. We do not enable Sentry session replay, screenshots, tracing or profiling. Network providers, including Sentry, receive connection IP addresses, which may reveal approximate location.
• Anonymous usage stats: onboarding steps, permission prompt outcomes, screens opened, recording choices and a bucketed time to your first processed day. These use a random anonymous identifier, app/build/update information, device model and OS version. They exclude account IDs, email, names, coordinates, places, routes, timezone, locale, carrier and screen dimensions. We disable person profiles, automatic interaction capture, session replay, surveys and IP-based geolocation. The provider receives a connection IP address to deliver events; it is discarded rather than stored or used for geolocation. We do not join these events to your account or travel history.
• Support: messages and any files you choose to send. “Share diagnostics” prepares a local troubleshooting file that can contain precise coordinates from geofence logs, battery level and low-power state, as well as recording and sync diagnostics. It is separate from exporting your travel history. Sharing sends the file to the recipient you choose; review it before sending.
• Website and waitlist: joining stores your email, signup source and signup time in our private waitlist. Hosting and network services receive ordinary request information, including IP address, to deliver and protect the site. The site has no advertising or analytics scripts and does not set marketing cookies.

Apple Health stays on your iPhone

If you choose to allow access, Waylit reads your steps and flights climbed from Apple Health to display them on your timeline. Waylit reads these values on your iPhone only, when needed for display. We never upload, store or share them, include them in logs, crash reports or shared diagnostic files, use them for advertising, or put them in iCloud. Your existing Apple Health records remain under Apple Health’s controls.

Access is optional. You can change it in the Health app: tap your profile picture, then Apps, then Waylit. Health values are separate from the Core Motion activity spans described above, which are uploaded to interpret your travel history.

Why we use it

Under GDPR and UK GDPR, we rely on performance of our contract with you to manage accounts, record and sync the history you request, and show your maps and summaries. We request device permission before accessing location or Motion; you can withdraw that permission at any time. Where consent is legally required for location or motion processing, consent is the basis for that processing.

We rely on legitimate interests in security, diagnosing faults and answering support requests, balanced against your privacy. Waitlist invitation emails rely on your consent to join; ask us to remove you at any time. We use legal obligation where we must retain or disclose information by law. We do not use travel history to make automated decisions with legal or similarly significant effects.

Service providers and transfers

Supabase provides authentication and database storage for accounts, uploaded recordings, derived history and the waitlist.

Mapbox provides the native map SDK and map content. Requests reveal your IP address, device/SDK information and the map areas requested. We disable optional location and usage events collection before creating maps. Requests needed to load maps and manage SDK billing still reach Mapbox, including installation/device identifiers and technical request information. See Mapbox’s privacy policy.

PostHog processes anonymous usage stats in European Union (EU Cloud). We use these only to understand and improve the app, with no advertising or cross-app tracking.

Country and city matching in our backend uses locally held Natural Earth boundaries and GeoNames settlement data; the pipeline does not send your coordinates to those sources for reverse geocoding. Mapbox still receives the requests needed to load maps.

Sentry processes the diagnostic reports described above using a German ingestion endpoint. Expo/EAS delivers app updates and receives update requests and technical connection information. Cloudflare hosts the website. Apple and, if you choose it, Google handle their respective sign-in services under their own privacy policies. Infrastructure and email providers may also process service and security logs.

Providers may process information outside the UK or EEA, including in the United States. The Supabase region alone does not determine every processing location. Where required, international transfers must use an adequacy decision or appropriate contractual safeguards, such as EU Standard Contractual Clauses and the UK Addendum or International Data Transfer Agreement. Contact us for current destinations and applicable safeguards.

We disclose information when required by law or necessary to protect users and service security. We do not give advertisers or data brokers your history.

Storage, retention and deletion

Your phone holds pending recordings and cached information. Synced history is associated with your account so it can be restored on another phone. Unsynced recordings cannot be restored from the server. We keep account recordings and derived history while your account remains active; the current service has no automatic age-based deletion of raw history.

Deleting your account removes the authentication account and cascades through its profile, registered devices, uploaded points, capture events, processing records and derived history in the live database. After server confirmation, the app removes that account’s local capture queues and native recordings and clears map coverage. Deletion requires a connection; a failed offline attempt does not delete the account or queue a future server deletion. Other devices and copies you exported or shared may retain local information. Deleting your Waylit account does not currently revoke Sign in with Apple authorisation; you can manage that separately in your Apple Account settings.

The waitlist is separate from your account; request its removal by email. Sentry records, support correspondence, infrastructure logs and provider backups are separate from the account deletion operation. We keep these only as needed for troubleshooting, requests, security or legal duties, then delete or de-identify them under the relevant provider’s retention arrangements. We cannot promise immediate erasure from backups or another provider’s systems.

Anonymous analytics are separate from account history. Signing out, deleting an account or turning usage stats off clears queued events and resets the anonymous identifier. We cannot look up earlier anonymous events using your account details.

Anonymous analytics retention: 12 months on PostHog's free plan.

Sentry diagnostic retention: 30 days on Sentry's Developer plan.

We use authenticated access and account-scoped database access controls to protect history. No storage or transmission system can guarantee absolute security.

Your choices and rights

Anonymous usage stats are on by default for the UK launch. Turn off “Share anonymous usage stats” in Settings at any time to stop sending and clear queued events. Turning them back on uses a fresh anonymous identifier.

You can change location and Motion access in iOS Settings and disable background recording in Waylit’s Tracking settings. Notifications are optional local sync reminders. Revoking permission stops the relevant future access; it does not delete information already recorded or invalidate earlier lawful processing.

Subject to legal conditions, you can request access, correction, erasure, restriction, a portable copy of information you provided, or object to processing based on legitimate interests. You can withdraw consent without affecting its earlier use.We may need proportionate identity verification. A full-history in-app export is not currently available; request a copy by email. We normally respond to GDPR rights requests within one month, with any lawful extension explained.

You may complain to the UK Information Commissioner’s Office or your local data protection supervisory authority, including in the EEA.

For California residents, the categories above include identifiers, geolocation, motion/activity information, customer communications and diagnostics; precise geolocation is sensitive personal information. We use it to provide the features you request, not to infer characteristics for advertising. We do not sell or share personal information as defined by CCPA/CPRA. Where those laws apply, you may request knowledge/access, correction, deletion and portability, use an authorised agent, and exercise rights without discrimination. There is no advertising sale or sharing to opt out of; we do not use sensitive information beyond providing the requested service and other legally permitted purposes.

Children and changes

Waylit is intended for people aged 16 and over. It is not directed at children under 13 or at children under 16 in the EU/EEA or UK. Our minimum service age is 16; the App Store rating should be set to 16+ to reflect that requirement. If we learn that we collected information from a child below our minimum age, we will take steps to delete it. Contact us if you believe this has happened.

We update this policy as the service changes and show the revision date above. We will give notice of material changes through the app or another suitable channel, and seek consent where required before a new use.