We respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy describes how we collect, use, process, and secure your information when you use Wantogo.

1. Information We Collect

Account Data: Email, username, password, or Google account profile information (when using Google Sign-In).
Travel Content: Saved places, travel itineraries, notes, reviews, and custom trip details.
Documents: Scanned flight tickets, hotel reservations, passports, and visa details uploaded to Cloudflare R2. (Note: Passports/visas are blocked from AI extraction and stored purely as images).
Location Data: GPS coordinates to enable proximity alerts, maps auto-centering, and walkability calculations.

2. How We Use Your Information

We use your data to run and personalize the App:

Storing your itineraries and saved places.
Processing scans using on-device ML Kit and Groq APIs.
Querying Google Gemini AI for customized travel responses on the Explore tab.
Calculating distance circles and walking times.

3. Third-Party Sharing

We do not sell your personal data. We share data only with service providers necessary to operate the App:

Google APIs: Maps, location searches, and Gemini AI.
Groq API: To perform structured metadata extraction from document OCR text.
Cloudflare R2: For storage of profile pictures and uploaded documents.

4. Security of Sensitive Documents

Sensitive travel documents (like passports and visas) are stored as raw images on Cloudflare R2 behind secure access links. For privacy protection, these document types are blocked from automated AI parsing. However, you should secure your device passcode to prevent local unauthorized access.

5. Data Deletion & Retention

You have full control over your data. Tapping "Delete Account" in the Danger Zone of your profile will trigger a database cascade, permanently deleting all of your trips, reviews, profile records, and Cloudflare R2 uploaded files within 30 days.

6. Additional Disclosures for EU/EEA Users (GDPR)

If you reside in the European Economic Area (EEA) or Switzerland, the General Data Protection Regulation (GDPR) grants you specific rights:

Legal Basis for Processing: We process your data to perform our contract with you (providing the travel planning service), with your explicit consent (for GPS location services and document uploads), or under our legitimate interests (app optimization and security).
International Data Transfers: Your data is transferred, stored, and processed outside the EEA (such as in the United States) on servers operated by Cloudflare, Google, and Groq. We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.
Your GDPR Rights: You have the right to access a copy of your personal data, request rectification of inaccurate data, request erasure of your account (the "Right to be Forgotten"), restrict processing, request data portability, and object to processing. To exercise these rights, please email sparrow313dev@gmail.com.
Supervisory Authority: You have the right to lodge a complaint regarding our processing of your personal data with a Data Protection Authority in your country.

7. Updates & Contact

We may update this policy occasionally. If we make material updates, we will notify you in the App. If you have any questions or wish to exercise your data rights, please contact support or email us at sparrow313dev@gmail.com.