← Back to WayFur

Privacy Policy

Last updated: April 2026 · Effective: April 2026

WayFur ("we", "us", "our") is a platform owned and operated by Delphi Rose Consulting Incorporated. We are committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, the legal basis for doing so, and how you can control it. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the EU General Data Protection Regulation (GDPR), and the UK Data Protection Act 2018, as applicable.

Data controller

The data controller responsible for your personal data is Delphi Rose Consulting Incorporated, operating the WayFur platform. For any privacy-related enquiries, contact us at privacy@wayfur.app.

Data we collect

A free account is required to use the Service. When you register, we collect:

  • Email address and display name: used to identify your account
  • Pet profiles you create (name, species, size, temperament, age group)
  • Trip details and generated itineraries you choose to save
  • Analytics events linked to your account ID (not your email), only if you consent

Legal basis for processing

Under GDPR, we rely on the following lawful bases:

  • Contract: storing your account data (email, pet profiles, saved trips) in order to provide the service you signed up for.
  • Contract: sending your trip details and pet information to our AI provider (Anthropic) to generate your itinerary. This is the core function of the service.
  • Legitimate interest: sending destination queries to Google Places API to enrich your itinerary with real venue data (vets, accommodation, pet services). We rely on legitimate interest because enriching your itinerary with verified venue data provides significant safety value to you, and we minimise data transfer by sending only your destination name, not your email or pet data.
  • Consent: collecting product analytics via PostHog and Google Analytics. You can withdraw this consent at any time via the consent banner.

Under PIPEDA (Canada), we rely on your implied consent (given when you agree to these Terms) for collecting and using your account data and pet information to provide the Service. You may withdraw consent for analytics at any time via the consent banner.

Analytics

With your consent, we use PostHog and Google Analytics to collect product analytics: events like which steps you complete, whether generation succeeds, and which features you use. This data is used solely to improve the product. No personal data is sold or shared with advertisers.

PostHog and Google Analytics are service providers operating under their own privacy policies:PostHog and Google. We use PostHog's US cloud region under a Data Processing Agreement. Declining before consent prevents analytics from loading. Withdrawing consent stops future analytics collection but does not delete previously collected data. Previously collected PostHog data remains in PostHog for up to 1 year from the date of collection, after which it is automatically deleted.

Cookies and local storage

We use browser local storage to remember your consent preference and, if you are signed in, to maintain your session. Analytics cookies are only set after you accept the consent banner. No advertising or third-party tracking cookies are used.

Data storage

Account data (email, pet profiles, saved trips) is stored securely in Supabase, a cloud database provider operating under SOC 2 Type II certification. Data is stored in the US East region. Supabase's privacy policy is available at supabase.com/privacy.

AI itinerary generation

Itineraries are generated using the Anthropic Claude API. Your trip details (destination, dates, transport mode, pet information) are sent to Anthropic's servers to generate the itinerary. Anthropic does not use API inputs to train its models. For Canadian users, this transfer to the US is permitted under PIPEDA as the data is used solely to provide the Service. Anthropic's privacy policy is at anthropic.com/privacy.

Location enrichment

After your itinerary is generated, we use the Google Places API to enrich it with real venue data, including pet-friendly accommodation, restaurants, pet service providers, and emergency vets near your destination. Your destination name is sent to Google's servers for this purpose. Google's privacy policy is at policies.google.com/privacy.

Rate limiting

We use Upstash to prevent abuse and ensure service availability for all users. Your request metadata (such as a hashed identifier) is sent to Upstash's servers solely to enforce rate limits and is not retained beyond the rate-limit window. Upstash's privacy policy is available at upstash.com/privacy.

International data transfers

Our service providers (Supabase, PostHog, Anthropic, Google, Stripe, and RevenueCat) are based in the United States. If you are located in the UK or European Economic Area, your data is transferred to the US under Standard Contractual Clauses (SCCs) as approved by the European Commission and UK Information Commissioner's Office, which provide appropriate safeguards for your personal data.

Payments

If you subscribe to WayFur Pro or purchase a one-time Trip Readiness Pass, payment processing is handled entirely by our third-party payment processors. We never see or store your credit or debit card details directly.

On the web, payments are processed by Stripe. Stripe's privacy policy is available at stripe.com/privacy.

On iOS and Android, purchases are processed through Apple's and Google's respective in-app purchase systems and managed by RevenueCat, which handles subscription status and entitlements on our behalf. RevenueCat's privacy policy is available at revenuecat.com/privacy.

These processors receive purchase and subscription status data (linked to your account) in order to grant and manage access to paid features. They do not receive your pet profiles, trip details, or itinerary content.

Data retention

  • Account data (email, pet profiles, saved trips): retained for as long as your account is active. Deleted promptly upon account deletion.
  • Analytics data: retained by PostHog for up to 1 year from the date of collection.

Your rights

Under GDPR, UK GDPR, and PIPEDA, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your account and all associated data
  • Portability: receive a copy of your data in a structured, machine-readable format
  • Withdraw consent for analytics at any time via the consent banner
  • Object to processing or request that we restrict it

To exercise any of these rights, email us at privacy@wayfur.app. We will respond without undue delay, typically within 30 days.

You also have the right to lodge a complaint with your local data protection authority. In Canada: Office of the Privacy Commissioner of Canada (OPC). In the UK: Information Commissioner's Office (ICO). In the EU: your national supervisory authority.

Contact

Questions about this policy? Email privacy@wayfur.app.

© 2026 WayFur. Operated by Delphi Rose Consulting Incorporated.