Waypeak · Privacy · Legal notice · Terms · Deutsch

Privacy policy

This policy explains how Miguel Garcia Müller (“we”) processes personal data when you use Waypeak. It follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

Miguel Garcia Müller, Montfortweg 7, 9470 Buchs SG, Switzerland, [email protected].

2. Data we process

• Account: username, display name, e-mail address, password (hashed only), optional profile picture, short bio, home town.
• Travel content: stays (country, place, dates, notes), photos and videos, regions, plans, collections, bucket list, documents in the travel vault.
• Social features: friendships, follows, messages, comments, likes, reports and blocks.
• Technical data: IP address (briefly, for abuse protection), the session cookie “ferne”, settings in your browser's local storage.

Embedded metadata (e.g. GPS location, camera model) is removed from photos when they are uploaded.

3. Purposes and legal bases

Providing the service (contract), security and abuse prevention (legitimate interest), handling reports (legal obligations / legitimate interest), password-reset e-mails (contract).

4. Visibility

You decide who sees your content (only you, friends, public). A public profile is off by default and shows only what you choose.

5. Recipients and processors

• Hosting: the operator's own server in Switzerland.
• E-mail delivery: Brevo (Sendinblue SAS), France (confirmation, password, notification and support e-mails).
• Travelpayouts (Travel Technologies Ltd.): only when you click a partner link (see 5a), for flight price lookups without personal data (see section 15) and – only when switched on – for the partner check on the public start page.
• Optional sign-in with Google / Apple: Google Ireland Ltd. (Ireland) or Apple Distribution International Ltd. (Ireland), only if you use it.
• Connection and encryption (tunnel/reverse proxy): Cloudflare, Inc., USA. Cloudflare forwards requests to our server and processes technical connection data such as the IP address.

5a. Partner offers (affiliate links)

In free accounts, country and stay pages may show labelled partner offers ("Ad · Partner") for flights, places to stay, tours or eSIMs. The links go through the Travelpayouts redirect service (Travel Technologies Ltd.) to the provider. Waypeak loads no third-party scripts, pixels or cookies for this. Only when you click a link do Travelpayouts and the provider receive the usual connection data (IP address, browser, time), Waypeak's partner id, the link type (e.g. "waypeak_country_flights") and the destination (country, possibly city). We do not pass on your name, e-mail address or profile. If you book, Waypeak may earn a commission; your price stays the same. Travelpayouts' and the provider's privacy policies apply on their sites. Legal basis: our legitimate interest in funding the free service (Art. 31 FADP / Art. 6(1)(f) GDPR). Waypeak Plus has no partner offers.

Partner check on the start page: Only when we switch on the partner-site check does waypeak.app load a script from Travelpayouts (emrldtp.cc) on the public start page for visitors who are not signed in, so that Travelpayouts can confirm the website as a partner site. Travelpayouts then receives technical data from your browser (including IP address, browser, page visited, time) and may use cookies or similar technologies. This script is never loaded inside the app after sign-in (account, settings, payments).

6. Transfers abroad

Your data is stored in Switzerland. Recipients abroad are: Brevo (France, EU) for sending e-mails, Cloudflare (USA) for the connection to our server and – only if you use that sign-in – Google or Apple (Ireland, EU; group companies in the USA). For the EU, the adequacy of data protection applies; for the USA we rely on the providers' certification under the Swiss-U.S. or EU-U.S. Data Privacy Framework or on standard contractual clauses. For Travelpayouts see section 5a.

7. Retention and deletion

Data is kept as long as your account exists. You can delete your account yourself at any time in the settings; this removes all content, photos, documents and messages. Backups are overwritten on a rotating basis: daily backups after 14 days, weekly ones after 8 weeks. Our server logs requests without the visitors' IP address; for abuse protection it is only kept briefly in memory.

8. Your rights

Access, rectification, erasure, restriction, objection and data portability. You can download an export of all your data (ZIP with JSON and photos) yourself in the settings. Requests to: [email protected]. You may lodge a complaint with the Swiss FDPIC or an EU supervisory authority.

9. Cookies

Waypeak itself only sets a strictly necessary session cookie and stores settings locally in your browser. There is no third-party tracking or analytics. Partner offers are plain links (see 5a); cookies from Travelpayouts or providers only arise on their sites after a click, or on the public start page only while the partner check is switched on. Fonts are served from our own server.

10. Usage statistics without third parties, and plans

To run and improve Waypeak we count accounts and active accounts. We use no third-party analytics, cookies or scripts for this; all numbers are produced on our own server in Switzerland and are visible only to the operator.

• Active days: for signed-in use we store one entry per account and day ("account X was active on day Y"), no time, pages, device or IP address. Entries are deleted after 35 days and immediately when you delete your account.
• Feature counters: for some features (e.g. share image, PDF, import, support) we only count daily totals, without any link to your account.
• Overview figures: numbers of entries per feature, storage use and feedback status are counted from existing data; no new personal data is created.
• Plan: each account has a plan ("free", "plus" or "family") that only controls which features are available. Nothing can be bought at the moment; we process no payment data.

Legal basis: our legitimate interest in secure and stable operation (Art. 31 FADP / Art. 6(1)(f) GDPR).

11. PDF photo book

When you create a PDF of a trip or a year, our own server in Switzerland builds it from your own stays, notes and photos, without third-party services. The file is delivered straight to you and not stored; temporary files are deleted right away. Your home town is never printed: stays in your home town show neither place nor map point, stays in your home country only an approximate point.

12. Import from photos and Google location history

You can have trips suggested from your photos and from an export of your Google location history (Takeout or the phone's Timeline export). This runs only on our own server in Switzerland, without third-party services.

• Photos: your browser sends only the start of each file with its header data (EXIF: date taken and GPS location), at most 256 KB per photo. The pictures themselves are neither uploaded nor stored.
• Location history: the file is uploaded in parts to a protected temporary folder, analysed and deleted right after, also on cancel or error, and in any case after 30 minutes at the latest or when the server restarts. It never goes into the database or any backup.
• Result: we only show summarised suggestions (country, nearest town, from–to). Only what you confirm in the review step is saved, like a manually entered stay (place snapped to the nearest town). Single location points, routes or times are never stored. Your home town is never proposed.

13. Family and family map

With Waypeak Family one person can create a family of up to 5 people with a shared family map, without third-party services.

• Joining only with consent: invitations go by username or invitation link. Nobody becomes a member without clicking "Accept". An invitation link lasts 7 days and can be turned off at any time; we store only a hash of the link, not the link itself.
• You decide what you share: "countries and places", "only countries" (the default when joining) or "nothing". You can change this at any time; it applies only to the family map, not to friends or your profile.
• Never shared: private stays, your home town and your home country. Places in your home country are shown only roughly (rounded to about 10 km). Notes, photos, expenses or transport details are not shared.
• Stored: the family (name, founder, creation date) and per member role, status (invited/active), your sharing choice and the invitation and joining dates. The map view is computed on each request and not stored.
• Leaving, removal, blocking, account deletion: you can leave at any time; the founder can remove members or dissolve the family. Your data disappears from the family map immediately; your own trips stay. Blocked people do not see each other on the family map. If you delete your account, you are removed from the family; if you own it, it is dissolved.
• Access and plan: the data export includes your family, your sharing choice and the members' usernames. While the founder's family plan is active, all members get the Plus features; we process no payment data for this.

14. Priority support and Labs

With Waypeak Plus or Family you can send a support request in the settings. We store topic, subject, your message, your username, your plan, time and status and, if you choose, technical details (app version, view, language, screen size, browser). The request stays in our inbox in Waypeak until we delete it or you delete your account. A notice with the content of the request goes via our e-mail provider Brevo (Sendinblue SAS, France) to [email protected]. Your e-mail address is included only if you choose "reply by e-mail" and your address is confirmed; we then reply to that address. To prevent abuse, at most 4 requests per hour and 10 per day per account are possible.

Labs unlocks features we are still working on (currently keyboard shortcuts and a compact trip list). We only store whether Labs is on and which features you picked. This is included in the data export and deleted with your account.

15. Flight prices and price alerts

When the feature is switched on, Waypeak shows the cheapest month and price for flights from your home airport (default Zurich, ZRH) to your bucket-list countries.

• Where prices come from: the data API of Travelpayouts / Aviasales. Our server only asks for routes (departure airport, destination airport, currency). No data about you is sent, neither name, e-mail address nor IP address; the request comes from our server, not from your device. Prices are cached for 24 hours per route and are indicative.
• What we store: your chosen home airport, currency, chosen destination airports per country, your language (for e-mails) and when you last looked at flight prices (after 21 days without a visit we stop querying your routes).
• Price alerts: country, your price limit, whether you also want an e-mail, and triggered alerts (route, price, month, time). E-mails only if you choose this and your address is confirmed, via Brevo (Sendinblue SAS, France), at most 3 per day.
• Partner links: "View flights" is a link labelled "Partner" via Travelpayouts (tp.media) to Aviasales, see 5a.
• All of this is included in the data export and deleted with your account. You can delete an alert at any time in the bucket list.

16. Inviting friends

You can invite friends with your personal invite link or code. Once the invited person confirms their email address and adds their first trip or place, you both get 1 month of Waypeak Plus as credit.

• What we store: your code, who was invited with which code, the status (pending, rewarded, rejected, reversed), timestamps and the Plus credit granted.
• Abuse protection: to detect self-invites we compare keyed hashes of the network (IP address) and of a random device ID from the browser, as well as the email domain. The IP address itself is not stored for this. Hashes collected at sign-in are deleted after 30 days; those attached to an invite are kept as long as the invite exists.
• Cookie: when you open an invite link we set a strictly necessary cookie (wp_inv) with the code for 7 days, so the invite survives a sign-up with Google or Apple.
• The inviting person sees your display name and the status of the invite. Everything is included in the data export and deleted with the account; if an account is deleted within 14 days, the reward is reversed.

17. Waitlist and home page

• Waitlist: if you sign up on the home page, we store your email address, the language, the time and a keyed hash of the IP address (against abuse) and send you a confirmation email (double opt-in). Without confirmation the entry is deleted after 7 days. After confirming, we will email you once when Waypeak opens to everyone. You can unsubscribe any time with the link in the email; the entry is then deleted. Emails are sent through our email provider (see section 5).
• Language: if you choose a language on the home page, we remember it in a strictly necessary cookie (wp_lang, 1 year) so the page appears in your language.
• The home page loads no scripts, fonts or images from third parties.

Last updated: 22 October 2026