Your data in Wayfinder

Who operates Wayfinder

Wayfinder is developed and operated by Riley Lawler, a sole trader operating RL Applications in Australia (ABN 92 363 169 656). Questions and privacy requests can be emailed to help.rlapplications@gmail.com. The studio privacy page explains how the RL Applications website and historical general enquiries are handled.

Information Wayfinder may handle

• Account information: email address, account identifier, sign-in and verification information, and an optional display name. Supabase handles account authentication and passwords.
• Personal activity: completed-adventure ticks and dates, shortlist choices, ratings and written memories. Eligible personal ticks, ratings and notes appear in a group together only after you choose to share when creating or joining it.
• Trips: trip names, dates, selected adventure identifiers and trip notes; these are visible to members of a group only when you explicitly share that trip.
• Photos: a photo you select, a resized device-local copy and related adventure or date metadata kept on that device.
• Sharing: group membership, sharing choices and records previously shared with a group.
• Community activity: submissions, votes, star ratings, reports and blocks if those features are used when available.
• Support: the email address, message and attachments you choose to send.
• Device data: session data, preferences, cached app files, local browser storage, IndexedDB records and queues used to support offline work and later syncing.

Location and network information

Wayfinder 1.1.3 and later do not request your location. Earlier released versions included an optional Near me action. If you used that action and consented, Wayfinder sent your coordinates to BigDataCloud to identify your region. That provider also received your IP address and described using observations from its free service to improve IP geolocation. Wayfinder did not save those coordinates in your account, link the lookup to your account, or track your route. The provider processed the request under its own terms; Wayfinder does not control its retention. How BigDataCloud uses this request.

How information is used

Information is used to operate accounts, sync personal progress, show saved trips and device-local photos, apply sharing choices, support optional Community functions, respond to support requests, investigate abuse or faults and protect the service. Wayfinder does not sell or rent your personal data and does not embed advertising networks or tracking SDKs. Optional Viator links are disclosed below and may earn RL Applications a commission.

Photos added in current versions

When you add a new photo, Wayfinder resizes it and stores the resulting in-app copy in that app or browser on the device. In the native app it is stored in Wayfinder's private app files, not automatically copied to the phone's Photos library. In the PWA it is stored in the browser's IndexedDB storage. Current clients cannot upload a new photo image or its related photo record to the RL Applications backend or GitHub. Wayfinder's in-app photo copies do not sync with account progress and will not appear when the same account signs in on another device.

Signing out keeps these device-local photos so they are available if the same account signs in again; Wayfinder filters them by account while another account is signed in. Removing the native app, clearing its app data, or clearing the PWA's browser/site storage can permanently remove them. Under Me → Settings, you can manually export your local photos as password-encrypted, numbered .wfpbackup files and import them on another device signed in to the same Wayfinder account. Save every part. Wayfinder does not upload a backup to RL Applications or automatically sync photos. You choose where to keep or transfer the files; Files, AirDrop, email or a cloud-storage provider may hold a separate copy under their own terms. RL Applications cannot recover a file if you forget its backup password. Native releases are configured to exclude Wayfinder's persistent app data, including new photos, from Android and iOS device or cloud backups. The PWA cannot control copies a browser, operating system or user-configured device backup may retain outside its site storage.

On supported iPhone and iPad versions, Me → Settings → Save photos to camera roll lets you copy all photos stored locally for the signed-in Wayfinder account into that device's Photos library after confirming the number and allowing add-only Photos access when needed. Wayfinder keeps its in-app copies. Adding a photo does not automatically copy it to Photos. Photos are never shared through a group, so another member cannot download them from your group. The web app and Android build cannot use this control to save to Photos. Copies saved to Photos are outside Wayfinder's account filter and are handled by Apple and your device settings; if iCloud Photos is enabled, they may sync to iCloud and other devices. RL Applications does not receive the exported images. Deleting your Wayfinder account or app does not delete copies in Photos.

On 15 September 2026, the 15 historical photo objects and all 11 active photo records were removed from Wayfinder's production cloud service. RL Applications still retains a separate Desktop backup of those historical originals and related database and storage snapshots for migration and rollback evidence. That backup is not available through the app and remains subject to a final retention decision. This means RL Applications must not claim that every historical company-held photo copy has already been destroyed.

Groups and shared trips

New join codes contain six letters or numbers. When creating or joining a group, you make one choice for that group: share your eligible personal completion ticks, dates, star ratings and written memories together with its current and future members, or join privately. A private member can still view what other members choose to share. The choice in one group does not change another group's choice. New personal entries share after a yes answer. Some older entries have uncertain ownership and remain unnamed, with their date, rating and note private, until their owner opens the adventure in My progress and taps Confirm for group sharing. Matching the wording of a note alone does not prove ownership. Group Memories shows consenting members' ticks, ratings and notes together for each adventure; without a shared note it says No memory written yet. Older group-only notes stay private unless their author copies them into a personal entry. Unfinished adventures, photos, purchases and shortlist are not included. Existing members keep their prior choices until they answer the new one-time combined prompt. Leaving removes your membership while your already-shared name, ticks, dates, ratings and notes remain in that group for current and future members as a fixed record labelled as a former member. Later edits to your personal list do not change that record. In Me, you can remove your shared history from a group you left; deleting your account or the group also removes it. If you are the last member, leaving deletes the group and its shared history. Your personal records stay with your account; others may retain separate copies already seen.

Trips are personal by default. When the owner explicitly selects Add to group on a trip, members of that group can see its name, dates, selected adventures and notes. Connected members receive changes as the owner updates the trip, but only the owner can edit or delete it. The owner can select Remove from group to revoke group access without deleting the personal trip; leaving the group also removes that owner's shared trips from it. Trip sharing is separate from the group's completed-adventure choice and does not share photos, shortlists or purchases; each member's own purchase controls access to protected gem place details. Another person may retain a copy of information already viewed or saved.

New and edited Community recommendations remain private until reviewed and may take time to appear to other people. You can see your own recommendation while it waits for review. Approved recommendations show your chosen display name. Votes, ratings, reports and block choices are stored to operate Community. You can report or block content; repeated reports can hide a recommendation pending review. Do not post private or sensitive information there.

If the optional AI-assisted Community review route is enabled, each new post or edit requires its own unchecked consent choice. With your choice, RL Applications may send your chosen public display name, title, place, country, optional region/category, description and source URL, plus an opaque post ID and revision, as a task email through Resend to its Google Gmail review mailbox. The connected OpenAI Codex/ChatGPT agent may check current post text and primary sources, then automatically approve a low-risk suggestion or reject clear abuse; uncertain or reported content stays private for operator review. Your Wayfinder sign-in email, account UUID, Memories photos and photo metadata, purchases and reporter details are not included in the review task email. A source link can reveal personal details or tracking parameters, so do not submit a private link. AI-assisted review does not guarantee every place, claim or access condition is genuine. Rejected content stays private with an author-only reason. Appeal or request data access/deletion through help.rlapplications@gmail.com. Withdrawing or deleting a post cannot unsend a task email or instantly erase copies already held by providers.

Service providers and hosting

• Supabase provides authentication and database infrastructure. Its former Wayfinder photo bucket and active photo table are currently empty, and client photo uploads are blocked.
• GitHub Pages hosts the current Wayfinder PWA.
• Cloudflare Pages hosts this support and policy website. These hosting providers may receive normal connection information such as IP address and browser details.
• BigDataCloud received coordinates and your IP address when you consented to an optional Near me lookup in a released version before 1.1.3. It may use free-service observations to improve IP geolocation. Wayfinder 1.1.3 and later do not make this request.
• Resend sends Wayfinder account confirmation and recovery email for Supabase. It receives the recipient email address, the authentication message and link or code, and delivery metadata needed to send and troubleshoot the message. The configured sending region is Tokyo (ap-northeast-1), but that setting does not mean all processing or storage stays in Japan. Open and click tracking are disabled. Resend does not receive Wayfinder photos through this account-email flow. Resend privacy policy.
• Google email infrastructure provides the current Gmail support mailbox and carried messages sent to the previous public support address. Google may continue to store those historical messages. The Resend no-reply address is only an automated account sender and is not a monitored support mailbox.
• Optional consented Community review, when enabled: Resend sends the limited post/display-name/source task email to the Google Gmail review mailbox, and OpenAI processes its text through the connected Codex/ChatGPT account. This is not the OpenAI Platform API; API retention defaults do not describe this connected account. Provider copies and retention depend on their applicable policies and account controls; no immediate cross-provider deletion is promised. No Wayfinder photo image or photo metadata enters this route. Resend privacy, Google privacy, OpenAI data controls.
• Apple and RevenueCat support the native iOS purchase and restore path. The account-linked identifier and purchase status are handled as described below.

Providers may process information outside Australia under their own infrastructure and terms. This website contains no advertising or analytics script and does not set advertising cookies.

Optional Viator booking links

Where a reviewed matching experience link is available, you can choose to open Viator outside Wayfinder. Links contain RL Applications' affiliate identifier and Viator's product-link attribution, not your Wayfinder account ID, email, progress, photos or location. Wayfinder does not contact Viator before you open a link and does not embed its tracking scripts. Once opened, Viator receives normal connection information, such as your IP address and browser details, and may use cookies under its Privacy and Cookies Statement. RL Applications may earn a commission on eligible bookings. Viator and the experience provider handle bookings, payments and cancellations separately from Wayfinder gem purchases.

Purchases and store status

Purchases are not active in the web review build. The iPhone and iPad app is available on the App Store and offers optional one-time packs. Apple handles iOS payments and RevenueCat processes the individual Wayfinder account's linked app-user identifier, purchase receipt information and entitlement status for purchase and restore. Joining a group does not transfer or share a paid entitlement with its members. An Android store release is planned but not live. Apple and, if an Android release is enabled, Google may keep transaction records under their own policies. RL Applications does not receive or store full payment-card numbers.

Deleting a Wayfinder account starts removal of its linked purchase-provider customer record. Creating another account with the same email does not recover the deleted account or its progress. Apple retains its transaction history; eligible purchases can be restored separately. Contact support if paid access is not restored. Account deletion does not itself issue a refund.

Optional reminders

Adventure reminders are off unless you enable them. They are generated on your device using your reminder settings.

Storage, security and retention

Wayfinder uses device storage for new photos, offline access and queued changes, and hosted services for accounts and progress syncing. No system can promise perfect security. iOS purchases are available through Apple; Community recommendations may wait for review before they are visible to others.

Hosted information is kept while needed to provide the service, resolve support or security issues, meet legal obligations and maintain proportionate provider backups. Precise production retention periods have not yet been finalised. The separately retained Desktop backup of historical photos is described above. Removing the app or clearing one browser can remove new device-local photos but does not itself delete hosted account data or the separately retained historical backup.

Your choices

• Use Wayfinder 1.1.3 or later to browse without any location request. In earlier released versions, you could decline the optional Near me permission and browse manually.
• Choose whether to add a device-local photo, save copies to Photos on a supported iPhone or iPad, manually export/import your encrypted photo backup, share eligible completed-adventure ticks, ratings and written memories together with a group, share an individual trip with a group, or submit a Community recommendation for review.
• Review or change personal content through the app where the relevant feature is operating.
• Email help.rlapplications@gmail.com with a privacy, access or correction request, or use the account-deletion instructions for in-app and email deletion options.

Children

Wayfinder is not directed to children under 13. A parent or guardian who believes a child has supplied personal information can email help.rlapplications@gmail.com.

Policy changes

This page may change as the app and its moderation processes evolve. Material changes will be reflected here with a new update date.