WRLD

Privacy Policy

Last updated October 16, 2026

WRLD (wrldtrips.com and the WRLD apps) is a trip planner run by WRLD. This policy explains what we collect, why, who we share it with, how long we keep it and the choices you have. Questions or requests: privacy@wrldtrips.com.

The short version

  • We collect only what the app needs to plan your trips.
  • We don’t sell or share your personal information for advertising, and we don’t show ads.
  • We use only the cookies needed to keep you signed in. Our visitor statistics don’t use cookies.
  • You can get a copy of, correct or delete your information at any time.

What we collect

  • Account: your name, email address and password. Passwords are stored hashed by our sign-in provider; we never see them. We also record when you agreed to our Terms and this policy, and which version.
  • Profile (optional): photo, home country, home currency and home airport.
  • Trips: cities, dates, activities, stays, flights and other travel legs, prices, budgets, expenses, checklists, document reminders, votes, saved links and group chat messages. People you invite to a trip can see that trip’s content, your name, photo and travel type.
  • Tickets and files: boarding passes, tickets and confirmations you upload to a trip. They’re stored privately; only people on that trip can open them. Delete them any time from the trip’s Export tab.
  • Forwarded emails: booking confirmations you forward to your WRLD import address, with their PDF, calendar and image attachments. They wait in your private inbox until you review them; dismissing one deletes its attachments. Emails sent to an address that isn’t yours are discarded.
  • Travel type: your quiz answers and interests, used to suggest things to do.
  • Points wallet: loyalty balances you type in, or that AwardWallet sends if you choose to connect it. We never ask for airline or bank passwords.
  • Location: only when you tap “Show where I am” on the map. It stays on your device and is not stored.
  • Usage information: the days you open the app, and when you open a booking link or see bookable suggestions, linked to your account. We use it to understand which features help and to measure partner bookings. Our hosting providers keep standard server logs (such as IP address and browser type) for security and troubleshooting, and count page visits without cookies (see Analytics below).

We don’t collect payment card details, government ID or passport numbers, or your location history.

Why we use it, and our legal basis

  • To provide WRLD (performing our contract with you): run your account, show and sync your trips, share them with the people you invite, place things on the map, fill in official ticket links, prices, time zones and travel-document reminders, and suggest things to do from your travel type.
  • To keep WRLD secure and working (our legitimate interests): prevent abuse, fix problems and measure which features are used.
  • When you ask us to (your consent): connect AwardWallet, or show your location on the map. You can withdraw consent at any time.
  • To meet legal obligations: for example, responding to valid legal requests.

Who we share it with

We share information only with services that help run WRLD, and only what each one needs:

  • Supabase: database, sign-in and photo storage, on servers in the United States.
  • Vercel: website hosting and cookieless visitor statistics, United States.
  • Anthropic (United States): when you import a screenshot or photo of a booking, the image may be sent to Anthropic’s Claude model to read the flight, stay and traveler details, which you then check before anything is saved. Under Anthropic’s commercial terms, this data isn’t used to train its models.
  • Map and place services: Photon (komoot), Nominatim (OpenStreetMap), OpenFreeMap, Wikidata and Wikipedia. They receive the place names, addresses or map areas you search for or view. Map tiles are requested by your browser, so OpenFreeMap sees your IP address.
  • Booking and price partners: Viator receives activity searches (a city and a kind of activity, never your name or email). When you open a partner link (Viator, GetYourGuide, airlines, ticket sites), you leave WRLD and that site’s privacy policy applies. Some links carry a WRLD partner code, so we may earn a commission. When you open a GetYourGuide panel in your plan (more tours, or dates and prices for a tour), it loads from GetYourGuide’s servers, which see your IP address and the search (a city and a kind of activity), never your name or email.
  • Images from other sites: tour photos and previews of links you save (for example from TikTok, Instagram or YouTube) load from those companies’ servers, which can see your IP address.
  • Links you save: our server fetches each link’s public title and preview image.
  • AwardWallet, only if you connect it.
  • Seats.aero, only if you link your Seats.aero account: WRLD sends your Points or cash searches (airports, dates, cabins, programs) to Seats.aero with your own access token to show live award seats. Your Seats.aero password never reaches WRLD; the access token is stored encrypted and deleted when you disconnect.
  • For legal reasons: if the law requires it, or to protect people’s safety or WRLD.

We do not sell personal information or share it for cross-context behavioral advertising, as those terms are used in U.S. state privacy laws.

Analytics

We use Vercel Web Analytics to count visits and see which pages are used. It doesn’t use cookies, doesn’t store anything on your device and doesn’t follow you to other sites. We don’t use advertising trackers or social media pixels. Because we don’t track you across sites, there’s nothing for a browser “Do Not Track” or Global Privacy Control signal to turn off. More in the Cookie Policy.

International transfers

WRLD is run from the United States and our providers store data there. If you use WRLD from another country, your information is transferred to the U.S. Where the law requires, we rely on our providers’ standard contractual clauses or similar safeguards.

How long we keep it

We keep your information while your account exists. When you delete your account, we delete your profile, photo, wallet, travel type, saved links, reminders and the trips you created. Messages and expenses you added to someone else’s trip stay with that trip without your name. Backups roll over within 30 days. Hosting providers keep server logs for a short period.

Your rights and choices

  • Correct your details at any time on the Account page.
  • Leave a trip from its Group tab.
  • Delete your account in the app (Account → Delete my account) or follow these steps.
  • Ask for a copy of your data, a correction or deletion, or to object to or restrict a use, by emailing privacy@wrldtrips.com. We answer within 30 days, or 45 days where U.S. state law allows. Using these rights won’t change how we treat you.
  • If you’re in the EU, UK or Switzerland, you can also complain to your local data protection authority.

Security

Data is encrypted in transit (HTTPS) and at rest by our providers, and each person can reach only their own information and the trips they belong to. No system is perfectly secure; if a breach affects you, we’ll tell you as the law requires.

Children

WRLD is not for children under 13 (under 16 in the EU and UK). We don’t knowingly collect their information. If you think a child has given us information, email privacy@wrldtrips.com and we’ll delete it.

Changes

If we change this policy in a way that matters, we’ll tell you in the app or by email before the change takes effect and update the date above.