1. Introduction
This Privacy Policy explains how WanderBuddies ("we", "us") collects, uses, and protects your personal data when you use our service at wanderbuddies.com. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR).
2. Data Controller
The data controller is WanderBuddies. You can contact us at support@wanderbuddies.com.
3. What We Collect
- Account data: email, password (stored as a hash), optional phone number, gender, age.
- Profile data: name, profile picture, bio, languages spoken, home country/city.
- Trip data: trips you create or join, messages with other travelers, trip requests.
- Technical data: IP address, browser type, device type, log files, cookies.
- Authentication data: if you sign in with Google, we receive your name, email, and profile picture from Google.
4. How We Use Your Data
We use your data to:
- create and manage your account;
- show your profile and trips to other users of the Service;
- facilitate communication between travelers;
- send transactional emails (account activation, password reset, trip requests);
- prevent fraud and abuse;
- improve the Service and fix bugs;
- comply with legal obligations.
5. Legal Basis (GDPR)
We process your data on the following legal bases:
- Contract (Art. 6(1)(b) GDPR): to provide the Service you signed up for.
- Legitimate interest (Art. 6(1)(f) GDPR): to prevent fraud and improve the Service.
- Consent (Art. 6(1)(a) GDPR): for non-essential cookies and marketing (where applicable).
- Legal obligation (Art. 6(1)(c) GDPR): to comply with applicable laws.
6. Sharing Your Data
We share data with:
- Other users: your public profile and the trips you publish are visible to other users of the Service.
- Service providers: hosting, email delivery, analytics (acting as processors under GDPR).
- Authorities: when required by law or to protect rights.
We do not sell your personal data.
7. Data Retention
We keep your account data while your account is active. If you delete your account, we delete your personal data within 30 days, except for records we must keep for legal or security reasons (for example, anti-abuse logs may be kept for up to 12 months).
8. Your Rights
Under GDPR you have the right to:
- access the data we hold about you;
- correct inaccurate data;
- request deletion of your data ("right to be forgotten");
- restrict or object to processing;
- receive your data in a portable format;
- withdraw consent at any time;
- lodge a complaint with a data-protection authority.
To exercise any of these rights, email support@wanderbuddies.com.
9. International Transfers
Your data is primarily processed within the European Economic Area (EEA). When service providers outside the EEA process data on our behalf, we ensure appropriate safeguards are in place (Standard Contractual Clauses).
10. Security
We use industry-standard security measures, including encryption in transit (HTTPS), password hashing, and access controls. However, no method of transmission over the internet is 100% secure.
11. Children
The Service is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it.
12. Cookies
For details about cookies, see our Cookies Policy.
13. Changes to This Policy
We may update this Policy from time to time. We will notify you of material changes via email or in the Service.
14. Contact
Questions about this Policy? Email support@wanderbuddies.com.