Version 1.0 · Effective on public release
Privacy Policy
This Privacy Policy explains how Wentfar handles personal data in the Wentfar mobile app and on wentfar.com, including our support, abuse-report, and account-deletion pages. It applies to people who use those services. This version takes effect when Wentfar publicly launches. Earlier versions will be listed on this page when available.
Controller and contact
Sokkio OÜ (registry code 17532051), registered in the Estonian Commercial Register at Tartu maakond, Tartu linn, Tartu linn, Raua tn 20-15, 50106, Estonia, is the controller of personal data processed for Wentfar. You can contact us at support@wentfar.com.
Data we handle
We may receive data that you provide, data generated while you use Wentfar, data from other users who share a trip with you, and data from sign-in providers and your device. This can include account and profile details; friendships and invitations; trips, journals, comments, reactions, packing lists, achievements, and expenses; photos, video, audio, and their associated metadata; precise location and travel-tracker records; notification preferences and device tokens; diagnostics; reports and moderation records; and support, abuse-report, and account-deletion form details.
Why we use it
We use this data to provide and secure your account and the features you choose to use; make trips and shared content work; show maps and place information; deliver notifications and updates; process media; provide support; prevent fraud and abuse; enforce our Community Guidelines; and meet legal obligations that apply to us. Where applicable, we rely on performing our agreement with you, our legitimate interests in security, reliability, and moderation, your consent for genuinely optional processing, or a legal obligation. Device permissions are choices in your operating system; they are not themselves the legal basis for processing.
Sharing and service providers
Content and trip details are visible to the people you choose to share them with, subject to trip roles, privacy settings, and the visibility you select. We also use trusted service providers to operate Wentfar, including providers of authentication, data hosting, media processing and storage, maps and place information, app updates, push notifications, and abuse prevention. These providers may process only the data needed to provide the relevant service. Our providers include Clerk, Convex, Cloudflare, Mux, Mapbox, Expo, Apple, and Google. Protected forms may send an abuse-prevention provider your IP address and browser or device signals to verify that a submission is legitimate.
Some providers may process personal data outside the European Economic Area. Before this Policy takes effect, we will publish the relevant processing locations and safeguards for those transfers. If you have questions about a recipient or transfer, contact support@wentfar.com.
Our planned first public release is free and has no advertisements, paid features, subscriptions, or marketing analytics. We do not use your information to sell advertising.
Permissions and location
Camera, photo-library, microphone, notification, and location permissions are optional and are requested when you use a feature that needs them. You can change them in your device settings; denying a permission can limit the related feature. The travel tracker can record location while a trip is being tracked, including when the app is not open if you allow background location. You start and stop tracking in the app. Synced trip location is available only to the people allowed to view that trip. The tracker is not an emergency service.
Retention and account deletion
We keep active account and trip data while your account remains active or until it is removed by you or an authorised trip member. Some information needed to operate the service is kept for shorter periods. When you delete an account, we start the deletion process for the account and associated data. It includes a 90-day security and moderation hold for necessary records. Some information may take longer to delete or de-identify, including information retained by service providers. We will publish the applicable retention periods before this Policy takes effect.
You can start deletion in the app or through our verified-email account-deletion page. If you own a trip with other participants, the review flow lets you remove participants in Wentfar or choose to delete the trip for everyone. Other participants’ independent content and any necessary shared financial context may not be removed with your account. We will explain any retention that applies to a particular request.
Security
We use technical and organisational measures intended to protect personal data, including authentication and access controls. No method of transmission, storage, or deletion is completely secure, and we do not claim that every copy of data on every device is encrypted or can be remotely erased.
Age
Wentfar is for people aged 13 and over and is not directed to children under 13. If optional processing requires consent, additional age or location-specific requirements may apply. If you believe a child has provided us information contrary to this Policy, contact us at support@wentfar.com.
Your privacy choices and rights
Depending on where you live and the processing involved, you may ask for access, correction, deletion, portability, restriction, or objection, or withdraw consent for optional processing. We verify requests proportionately to protect you and other people. Where applicable, we provide requested data securely through support. Read how to make a request on Privacy Choices.
Please contact us first so we can try to resolve your concern. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, info@aki.ee, +372 627 4135, or with the data-protection supervisory authority in the EEA country of your habitual residence, place of work, or the place of the alleged infringement.
Changes to this Policy
We will post the current version and effective date here. If a change is material, we will provide additional notice in the app or by another appropriate channel. Notice of a Policy change is separate from any consent required for optional processing.