Privacy, in plain English.

If you create an account: your email address and a securely stored password. If you save trips: the itineraries, your margin notes, and the trip brief you filled in. If you send us a question: your message, your email, and your name if you gave one. That's the list.

Like every website, our hosting also keeps short-lived technical logs (things like error reports) that help us fix what breaks.

We also count, anonymously, how the planner is used: which places itineraries visit (that's the public tally on our Popular page), the titles and routes the AI writes, the shape of trip briefs (lengths, budgets, months — never your own words), and which steps people reach, keyed to a random number that isn't connected to you and resets when you close the tab. Counts, not people — we couldn't pick you out of them if we tried.

To write your itinerary, we send your trip brief — destination, dates, interests, notes — to an AI provider, together with our own guidebook notes. Your name and email are never part of that. Worth knowing: anything you type into the planner form travels with the brief, so there's no need to put personal details in your notes.

We don't sell your data. We don't run advertising or ad trackers. We don't email you marketing you didn't ask for — right now we only email you if you've asked us a question.

Accounts and saved trips are stored with Supabase on servers in the EU (Ireland). The site runs on Vercel. When we reply to an enquiry, the email goes through Resend. Each of these companies only processes your data to run Waypora — nothing else.

One job only: keeping you signed in. No tracking cookies, no third-party pixels, nothing riding along.

Delete any saved trip whenever you like — it's gone from our database, not just your screen. Want your whole account removed, or a copy of what we hold about you? Just ask a travel person and we'll sort it, usually within a couple of days.