Wander Madeira Wander Madeira
Get the app
EN

Privacy Policy

Last updated: October 10, 2026

1. Introduction

Welcome to Wander Madeira ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about our policy, or our practices with regards to your personal information, please contact us at wandermadeiraapp@gmail.com.

When you visit our website https://www.wander-madeira.com, and use our mobile application, you trust us with your personal information. We take your privacy very seriously. In this privacy notice, we describe our privacy policy. We seek to explain to you in the clearest way possible what information we collect, how we use it and what rights you have in relation to it.

2. Information We Collect

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you create an account (which is optional for most features), make a purchase, participate in activities on the Services or otherwise contact us.

  • Credentials. We collect passwords, password hints, and similar security information used for authentication and account access.
  • Account Data. We collect your email address and display name.
  • Photos. Any images you choose to upload are stored in our cloud storage provider (Supabase).
  • Trail Share Data. When you post offers in the community marketplace, the content of your offers (e.g., meeting points, transport details, chosen contact methods) is stored and made publicly available on the platform.
  • Purchases. Purchases are processed by the App Store or Google Play and managed through RevenueCat; we never receive your payment card details. If you buy without an account, RevenueCat assigns your device a random purchase ID. We store that ID with the product, store and validity period of your purchase so that the content you paid for unlocks on that device. It contains no name or e-mail address. If you later sign in, the purchase is linked to your account.
  • AI Chat Queries. When you use the AI chat assistant, the text of your messages and recent conversation context (last 3 messages) are processed to classify intent and provide responses.
  • Workspaces and Collaboration. If you create or join a shared Workspace with a travel partner, your display name, avatar, masked email address, and realtime app navigation presence (which trip day or view you are actively viewing) are shared with other members of that Workspace via secure Realtime channels.

Health and Fitness Data (Apple Health & Google Health Connect)

When you complete a recorded hike, you may optionally choose to export your workout to Apple Health (iOS) or Google Health Connect (Android).

  • Export Only: Wander Madeira requests permission only to WRITE recorded hiking workouts (ExerciseSession), distance, GPS routes, and elevation gained. We do not request or read your health history, medical records, or biometric information.
  • Limited Use Compliance: Health Connect and HealthKit data is processed strictly on your device to execute your export request. We do not transmit your health or workout data to our servers, do not sell or share it with data brokers or advertising networks, do not use it for serving advertisements, and do not use it for training machine learning or AI models.

Information automatically collected

Some information — such as IP address and/or browser and device characteristics — is collected automatically when you visit our Services.

  • Usage and Analytics. With your explicit consent, we collect data about your interactions with the application (e.g., screens visited, features used) via PostHog, processed on EU servers.
  • Crash Reports. To fix bugs and improve stability, we automatically collect crash logs using Sentry (EU servers). These logs contain error details and may include app state at the time of the crash.
  • Location Data. GPS coordinates are used during trail navigation but are processed strictly on your device and are never transmitted to our servers.
  • Push Notifications. We collect push tokens to deliver route alerts you subscribe to.
  • Alert E-mails. If you subscribe to ticket availability alerts, we use the e-mail address of your account to send them.

3. How We Use Your Information

We use personal information collected via our Services for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.

  • To facilitate account creation and logon process.
  • To send administrative information to you.
  • To fulfill and manage your orders and subscriptions (processed via RevenueCat), including unlocking content bought without an account.
  • To deliver targeted notifications and updates about trail status.
  • To process voice for the AI chat feature (transcription provided via device OS integrations with Apple/Google).
  • To process AI chat requests and classify user intent using semantic workflow routing.

4. Will Your Information Be Shared With Anyone?

We only share and disclose your information with the following third parties:

  • Cloud Computing Services: Supabase
  • Web & Mobile Analytics: PostHog
  • Error Monitoring: Sentry
  • Payments: RevenueCat, Apple App Store, Google Play Store
  • Sign-in: Google and Apple, when you choose to sign in with them
  • Maps: Mapbox (map display and map images; receives your IP address and the map area requested)
  • Notifications: Expo Push Service (push notifications) and Resend (alert e-mails)
  • AI & Intent Classification Processors: OpenAI (generates conversational responses) and TypeSafe AI / Jev API (api.typesafe.ai — classifies user intent using message content and recent 3-message context). Your conversation data is not used to train AI models.
  • Affiliate & Booking Partners: when you tap a partner offer (transport, tours, activities, accommodation, car rental), we record which offer you interacted with via PostHog; you are then redirected to the partner's own website, which is subject to their own privacy policy.

We do not sell your personal data to third parties.

5. Affiliate Disclosure

Some of the offers shown in our Services are affiliate links. If you book or purchase through them, we may earn a commission at no extra cost to you. This never affects which offers are shown to you or the price you pay. Paid or sponsored placements are labeled as such within the app.

6. How Long Do We Keep Your Information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements).

Purchase records, including those of purchases made without an account, are kept for as long as the purchase can give access to content and afterwards only as long as needed for support, accounting and legal obligations.

Account Deletion and Recovery: If you request account deletion (via Profile → Delete account), your account enters a 30-day recovery grace period before permanent erasure. After 30 days, your account and all associated personal data are permanently purged from our servers.

7. Your Privacy Rights

In some regions (like the European Economic Area), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability.

To delete your account and all associated data, you can go to Profile → Delete account within the mobile application, or contact us at wandermadeiraapp@gmail.com.

If you bought without an account, you can ask us to delete the purchase record kept for your device by e-mailing wandermadeiraapp@gmail.com with the order number of the purchase. Your access to the content bought on that device then ends.

8. Updates To This Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.