Legal

Privacy

Wayla uses the information you provide to help you plan trips and share them with your fellow travellers. This includes your account and profile details, travel plans, attachments, photos and videos. We also record sign-in times and browser information to help operate and secure the service.

Sharing your trip

Trips are not publicly listed. Trip members can see the trip's destinations, traveller list and bookmarks. Booking details are available to their creator and attendees. Activities marked visible to the trip appear on its shared itinerary; a booking's shared itinerary entries do not make its private confirmation details available to everyone.

Attachments on a plan follow that plan's access permissions. Trip-level attachments are private to the person who added them until shared with other members. Profile pictures are served through public image URLs, so someone with the URL can view them.

Photos and videos

Everyone on a trip can view its gallery. When you add photos or videos, we may read embedded metadata, including the date and time, GPS location, camera information and media dimensions, to organise and display them. Original downloads may contain that metadata too. You can remove sensitive metadata from your media before adding it.

Attachments and gallery media are stored in private storage and served using signed links. Anyone with a signed link can use it until it expires: full-quality download links last one minute, photo display links last up to 24 hours, and video playback links last up to two hours. Copies someone has already downloaded cannot be recalled.

Leaving and deleting

If you leave or are removed from a trip, you lose access to it. Plans you created with other attendees pass to an attendee still on the trip. Plans with no other attendees and your bookmarks are deleted. Attachments on a plan follow the plan; trip-level attachments stay only if shared with another current member. Your gallery photos and videos stay with the trip when you leave.

Deleting a trip removes its plans and queues deletion of its stored attachments and gallery media. Stored media deletion runs in the background, so it may not be immediate. Previously issued signed links may continue to work until they expire or the media is removed from storage and caches.

Google Maps

Place searches and embedded maps use Google Maps Platform. Search queries and map interactions are sent to Google and handled according to the Google Privacy Policy.

Google Maps features are also subject to the Google Maps/Google Earth Additional Terms of Service.

Service providers and access

We use Bunny.net to store and deliver media, Postmark to deliver account and invitation emails, and infrastructure providers to host the application and database. Authorised administrators have access to account information, trip summaries and operational tools needed to run the service.

Calendar subscription links provide access to the itinerary available to the account that created them. Treat these links as private: anyone with a link can read the feed. You can remove or regenerate a subscription in Settings to stop its old link working. Calendar providers may retain information they have already received.