Privacy and personal data processing policy
Your trips are yours
Waymark plans your trips and outings. Here is, without fine print, what data we use, why, who we share it with, and how you can see, correct, download or delete it.
In short
- You can use Waymark without an account: your trips stay on your phone.
- If you sign in with Google, your trips are stored in the cloud so you can sync and share them.
- AI features send what is needed (for example, your trip's cities or a photo you choose) to AI providers to answer you. We do not sell your data or use it for advertising.
- The microphone is only used while the voice copilot is on, and the photos you pick for recap videos never leave your phone.
- You can download your data and delete your account in the app, under Profile → Settings.
1. Who is responsible
The controller of your personal data is Kevin Bayter (Skyfold Labs), based in Bogotá, Colombia (“Waymark”, “we”).
For anything privacy-related write to contact@skyfoldlabs.io. This address is also the channel for data protection requests and complaints.
2. What data we process and why
| Data | When | Why |
|---|---|---|
| Account: name, email, Google profile photo and user ID | If you sign in with Google | Identify you, sync your trips across devices, share trips and groups, apply your plan (free, Pro or Ultra) and its daily limits |
| Trips: destinations, dates, days, activities, places, notes, companions you type, budgets, expenses, bookings (flights, stays, tours) and preparation checklists | Whenever you create them; in the cloud only when signed in with sync on | Provide the service: show, organize, sync and share your plans |
| Booking confirmations (PDFs or photos you attach) | When you attach them | Keep them at hand during the trip; uploaded to the cloud only if you sync |
| Saved places and collections | When you save a place | Your place library, synced with your account |
| Groups: group name, members, email invitations, polls, votes and shared expenses | If you create or join a group | Organize plans with your people, compute balances and notify members |
| Creator profile: display name, handle (@), photo, bio and the itineraries you publish | Only if you choose to publish | Show your public itineraries to other Waymark users; check them for spam, offensive content or personal data |
| Preferences: travel style, home city, nationality for travel requirements, currency, theme | When you set them | Personalize plans, getaways, preparation checklists and currency conversions |
| Location (approximate or precise) | Only if you grant the permission and use a feature that needs it | Detect your city, show what is nearby, today's plan and the copilot. We do not store it on our servers or track it in the background |
| Voice (microphone audio) | Only while the voice copilot is open | Talk with the copilot. Audio goes straight to Google's Gemini API and we do not store it |
| Smart camera, receipt and inspiration photos | Only those you take or pick for these features | Explain a menu, monument or sign; read a receipt; inspire a plan. They are sent for analysis and not stored on our servers |
| Photos and videos for your memories (trip video, your year) | When you pick them | Build the video on your phone. They never leave the device unless you share them |
| Gmail messages (read-only) | Only if you connect Gmail to import bookings | Find booking confirmations; only the emails you pick are read in full and sent to the AI to extract the booking. See section 13 |
| Shared videos or links (TikTok, Instagram, YouTube) | When you share one with Waymark | Find the places in it and save them to your map |
| Purchases: product, subscription or pass status, Google Play purchase token | If you buy Pro, Ultra or a trip pass | Verify the purchase, unlock your plan and keep it current. We never see or store your card details |
| Technical data: notification token, device model, app version, daily usage counters, crash reports and usage statistics | When you use the app | Send notifications, apply your plan's daily limits, protect the service from abuse (App Check) and fix bugs. Usage statistics can be turned off in Settings → Privacy |
We do not sell your data, do not use it for personalized advertising and do not make automated decisions with legal effects on you. AI suggestions are just that: proposals you decide whether to accept.
Sensitive data. We do not ask for sensitive data. If you enter accessibility preferences (for example, avoiding stairs) or health information in your notes, you do so voluntarily and we only use it for your plan; you are not required to provide it.
3. Phone permissions
- Location: for your city, what is nearby, today's plan and the copilot. Waymark does not request background location.
- Microphone: only for the voice copilot, while the session is open. Closing it turns the microphone off.
- Camera: for the smart camera and for receipt photos.
- Photos: Waymark uses Android's photo picker; it only accesses the ones you choose.
- Notifications and exact alarms: for trip reminders, today's plan and group updates.
You can revoke any permission in Android settings; the related feature stops working and the rest of the app keeps working.
4. Artificial intelligence
Features such as creating a plan, importing documents, the assistant, explore, getaways, plan B, reading receipts, the smart camera, audio guides, places from a video and the review of public itineraries use AI models. Your phone sends the request to our intermediary server (on Google Cloud), which passes it to Google Gemini or DeepSeek and returns the answer.
- We send only what the task needs (for example cities, dates, travel style, the text or photo you choose). We do not send your name or email.
- Our server does not store the content of your requests. Its technical logs include neither your user ID nor the content.
- We use the providers' paid APIs, whose terms do not allow your requests to be used to train their models. Each provider may keep them for a limited time to prevent abuse, under its own terms.
- The voice copilot connects directly to Google's Gemini Live API with a temporary single-use permission.
5. Providers that process data for us
We work with these providers, acting as processors or as independent services, only for the purposes described:
| Provider | What it does | Data |
|---|---|---|
| Google Firebase and Google Cloud (Google LLC / Google Ireland Ltd.) | Sign-in, database, file storage, notifications, analytics and crash reports, App Check, intermediary server | Account, trips, groups, attachments, technical data |
| Google Gemini API | AI for plans, documents, photos, voice and videos | The content of each AI request and the copilot's audio |
| DeepSeek API (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) | Text AI: assistant, plan B, getaways, audio guides, text imports, itinerary review | The text of those requests |
| Google Maps Platform | Maps, place search, place photos and routes | Searches, places and coordinates |
| AeroDataBox (via RapidAPI) | Live flight status (only if you turn it on) | Flight number and date |
| Travelpayouts (Aviasales and other travel partners) | Flight prices and affiliate booking links; on this site's home page, a script that measures clicks on travel offers | Origin, destination and dates of the searched flight; on the site, technical browser data and clicks |
| Open-Meteo | Weather forecast | Coordinates of the trip's places |
| Nager.Date and public exchange-rate services (jsDelivr, Cloudflare) | Public holidays and exchange rates | No personal data (a country or currency code) |
| Google Play | Payments and subscriptions | Google processes the payment as an independent controller; we receive the purchase status |
When you share a trip or a group, the people you invite see its content and your name and photo. If you publish an itinerary, any Waymark user can see it along with your creator profile. We may also disclose data when required by law or a competent authority.
6. Legal bases and authorization
If you are in the European Economic Area or the United Kingdom (GDPR):
- Performance of a contract (Art. 6(1)(b)): account, trips, sync, groups, AI features you request, purchases.
- Consent (Art. 6(1)(a)): location, microphone, camera, Gmail connection, flight status and publishing itineraries. You can withdraw it at any time without affecting earlier processing.
- Legitimate interests (Art. 6(1)(f)): security, abuse prevention, crash reports and usage statistics to improve the app (you can turn them off in Settings).
- Legal obligation (Art. 6(1)(c)): when the law requires us to keep or hand over information.
If you are in Colombia (Law 1581 of 2012 and Decree 1377 of 2013): we process your data with your prior, express and informed authorization, given by accepting this policy when you sign in or use each feature, for the purposes in section 2. You can revoke it or ask for your data to be deleted at any time (section 9), unless a legal or contractual duty requires us to keep it.
7. International transfers
Our providers process data outside your country, mainly in the United States and other countries where Google operates, and, for requests served by DeepSeek, in the People's Republic of China. With Google we rely on the European Commission's Standard Contractual Clauses and the EU–U.S. Data Privacy Framework where applicable. China has no EU adequacy decision and is not among the countries with an adequate level according to Colombia's Superintendence of Industry and Commerce; so we only send there the text of AI requests, without your name or email, and do so with your explicit consent when you use those features (GDPR Art. 49(1)(a) and Art. 26 of Law 1581 of 2012). If you do not want your requests to go to DeepSeek, do not use the text AI features.
8. How long we keep it
- Data on your phone: until you delete it, uninstall the app or delete your account.
- Account, trips, groups, library and profile in the cloud: while you have an account. When you delete it we erase them immediately; technical backups, if any, are overwritten within 35 days.
- Daily usage counters: about 8 days.
- Server technical logs (without your ID or content): 30 days.
- Purchases: while you have an account. Google Play keeps its own payment records under its policies.
- What you added to other people's trips or groups (for example, an expense) stays there without your profile when you delete your account, because it is part of the group's accounts.
9. Your rights and how to exercise them
You can know, access, update, correct and delete your data; ask for proof of your authorization and revoke it; be informed of how we use it; object to or restrict certain processing; receive your data in a portable format; and complain to the data protection authority: in Colombia, the Superintendence of Industry and Commerce (after going through our process); in the European Union, your country's authority.
How
- In the app: Profile → Settings → Download my data or Delete my account. You can edit your trips, name and preferences directly.
- By email to contact@skyfoldlabs.io, from your account's email address, with your name, what you are asking for and, if acting for someone else, proof that you may.
Deadlines
- Inquiries: answered within 10 business days, extendable by 5 business days with notice of the reason (Art. 14, Law 1581).
- Claims (correction, update, deletion or revocation): within 15 business days, extendable by 8 business days with notice of the reason (Art. 15, Law 1581). If a claim is incomplete we will ask you to complete it within 5 days.
- GDPR requests are answered within one month, extendable by two more months for complex cases.
Exercising your rights is free.
10. Downloading your data and deleting your account
Download: Settings → Download my data builds, on your own phone, a ZIP file with your trips, days, activities, bookings, expenses, saved places, collections and preferences as JSON, plus the attached confirmations stored on the phone.
Delete: Settings → Delete my account. We erase your account, your trips in the cloud and their files, your groups (the ones you created are deleted with their polls and expenses; you leave the others), your creator profile and published itineraries, and your plan data. Then the app erases everything stored on your phone. More details, and how to ask without the app, at waymark-510606.web.app/en/delete-account.
Important: deleting your account does not cancel a Google Play subscription. Cancel it in Google Play → Payments & subscriptions before deleting your account.
11. Children
Waymark is not directed to children under 16 and we do not knowingly collect their data. In Colombia, people under 18 may only use Waymark with their legal representative's authorization, respecting the minor's best interests. If you believe a minor gave us data without that authorization, write to us and we will delete it.
12. Security
Connections are encrypted (HTTPS/TLS) and data is encrypted at rest on Google Cloud. Database rules only let you and the people you share a trip or group with access it. The AI services' keys are never on your phone. No system is infallible: if an incident affects your data, we will tell you and report it to the authorities when the law requires.
13. Google data (Gmail)
If you connect Gmail, Waymark asks for read-only access (gmail.readonly) to find flight, stay and tour confirmations. The permission stays on your phone; the app shows candidate emails and only reads in full, and sends to the AI, the ones you pick. We do not store your emails, use them for advertising, or share them with third parties except to extract the booking you asked for, and no human reads them. You can disconnect Gmail in Settings or in your Google Account.
Waymark's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
14. Changes to this policy
If we change this policy we will tell you in the app before the change applies. If the change affects the purposes you authorized, we will ask for your authorization again.
15. Contact
Kevin Bayter (Skyfold Labs) · Bogotá, Colombia · contact@skyfoldlabs.io