Privacy Policy

1. Who We Are

We are the developer and operator of the Wayplora mobile application ("App"). If you have questions about this Privacy Policy, please contact us via the feedback feature in the App.

2. What Information We Collect

2.1 Account information. When you create an account, we collect your email address, name, username, and date of birth.

2.2 Profile information. You may optionally upload a profile photo and set default activity paces.

2.3 Location data. When you use the App, we access your device's GPS location to show your position on the map, generate routes from your current location, and provide turn-by-turn navigation. Location is used in real time and is not stored on our servers.

2.4 Activity data. If you complete a route, we store a summary of that activity (distance, duration, date, route coordinates) so you can review your history.

2.5 Saved routes. Routes you choose to save are stored so you can access them later.

2.6 Feedback. If you submit in-app feedback, we collect the text of your message, your category selection, app version, and device operating system. Your user ID is included if you are signed in.

2.7 Technical information. We may collect basic technical information such as app version and device OS type for the purpose of resolving bugs and improving the App. We do not collect advertising identifiers or track you across other apps.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the App
• Generate and display personalised routes based on your location and preferences
• Store your activity history and saved routes
• Respond to feedback and fix bugs
• Comply with our legal obligations

4. How We Share Your Information

We do not sell your personal information. We share data with the following third-party service providers solely to operate the App:

Supabase (supabase.com): Our database and authentication provider. Your account data and activity history are stored on Supabase infrastructure, hosted on Amazon Web Services (AWS) servers located in the United States.

OpenRouteService / HeiGIT (openrouteservice.org): Route generation. Your approximate starting location and route preferences are sent to this service to generate route options. No account information is shared.

Mapbox (mapbox.com): Map display and navigation. Mapbox may receive your location and map tile requests as part of rendering the map. See Mapbox's privacy policy for details.

Railway (railway.app): Our backend server host. Route generation and feedback requests pass through servers hosted on Railway.

We may disclose your information if required to do so by law or in response to a valid legal request.

5. Data Storage and Security

Your data is stored on Supabase infrastructure hosted on AWS servers. We use industry-standard security measures including encrypted connections (HTTPS/TLS) and row-level security on our database.

Please be aware that no method of transmission over the internet or electronic storage is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your account and activity data for as long as your account is active. If you delete your account, we will delete your personal information within a reasonable period, except where we are required to retain it by law.

Location data is processed in real time and is not stored on our servers.

7. Your Rights

Under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your account and associated data
• Make a complaint about how we handle your personal information

To exercise any of these rights, please contact us via the feedback feature in the App.

8. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it.

9. Third-Party Links and Services

The App integrates with third-party services (see Section 4). This Privacy Policy does not cover the privacy practices of those third parties. We encourage you to review their privacy policies before using the App.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the App. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

11. Contact and Complaints

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us via the feedback feature in the App.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.