Your data
What we store, and how to get it back
What Wander stores
| What | Why we store it | Kept for |
|---|---|---|
| Your name and email | To identify your account and send you transactional messages | Until you delete your account, then 30 days |
| Password hash | To sign you in. We never store the password itself | Until you delete your account |
| Trips you plan | To save your plans so you can revisit and tweak them | Until you delete them or delete your account |
| Trip adjustments | So we can rebuild only the affected day and leave the rest intact | Until you delete the trip or your account |
| Subscription and billing records | Legal requirement and so we can answer billing questions | 7 years from the transaction date |
| Usage counts | To enforce the free tier and bill correctly | 24 months |
| Server logs | Security and reliability. These contain IP addresses but never trip content | 30 days |
Exporting your data
On Traveler and Voyager plans you can export any trip as a clean PDF itinerary from Settings or directly from the trip view. The export includes the full day-by-day plan, every stop with its note and tag, the rough timings, and the walkable cluster for each day.
On the free plan you can view and copy your trip at any time. A full PDF export is a paid feature.
Deleting your data
To delete individual trips, open the trip from your trips list and choose Delete trip.
To delete your entire account and all data associated with it, go to Settings and choose Delete account. This removes your trips, plan history and account information from our active database. The deletion is permanent and cannot be undone.
We keep billing records for the period required by law (see the table above). Everything else is gone within 30 days of the deletion request.
- Account deletion is in Settings, not behind a support ticket.
- We do not require a phone call or a waiting period.
- We will send a confirmation email when the deletion is complete.
- Billing records are retained as required by law, separate from your personal and trip data.
Your rights
You have the right to access, correct, export and delete the personal information Wander holds about you. Most of that is self-serve from Settings. If you want a copy of everything in a structured format, email privacy@wandertrip.org and we will send it within 30 days.
If you are in California, the CCPA rights to know, delete and opt out of sale apply. We do not sell personal information.
For anything else, or if you believe something has gone wrong, email privacy@wandertrip.org. We will respond within 30 days and we will not ask you to jump through hoops.
Data sent to the AI layer
When you plan a trip, your brief (destination, dates, budget, pace and taste preferences) is sent to a language model to produce your itinerary. This happens under a business API agreement that prohibits the provider from training on that data.
The itinerary structure (walkability, pacing, Zod schema) is enforced in our own code before and after the model is involved. The model writes the plan. The code validates it.
Read more
The full privacy policy, including legal bases and international transfer details, is on the privacy page. Security measures, encryption standards and our approach to third-party access are on the security page.
To delete your account or export your data, go to Settings. The full privacy policy is on the privacy page. Questions go to privacy@wandertrip.org.