Wawa privacy notice

Updated 5 October 2026 (version 2026-10-05). Wawa can be used in guest mode without an account. Guest trip plans and local notes stay on your device unless you choose to import them into an account. Signed-in trip plans synchronize to Wawa. Public posts, comments, trips and routes are shared only when you choose to publish them.

Data we process

• Account and security data: email address, chosen name, authentication events, session and MFA settings.
• Identity profile data you choose to add: locale, country, birthday, address, and profile photo.
• Private Passport data: role, verification state, and stamps.
• Short-lived operational logs used to keep the service secure and reliable.

Trip plans and account synchronization

When signed in, creating or changing a trip sends its destinations, itinerary, travel dates, traveller count, budget, notes, transportation details and checklist progress to Wawa so the plan is available to your account. Favourites and travel inquiries also synchronize; inquiries contain the contact name, email, requested dates and other details you provide. Guest trip plans and local notes remain on your device until you explicitly import them into your account. Emergency contacts and device-only pet preferences remain local.

Public posts, comments and trips

The Watch community feed contains public posts and comments, including photos or short videos that people choose to publish. It is separate from the companion Apple Watch app. Publishing sends the content, attachment and account attribution to Wawa and makes them visible to other people. Likes, saved posts and report/block choices are stored for your account. Public content can be copied by others.

If you publish a trip, its public snapshot can include titles, destinations, descriptions, budget, day count, selected places/activities, tags and author attribution. Private travel dates, private notes, checklist items and transportation booking details are excluded from that public snapshot; the private plan still synchronizes to your account. Review all public fields before publishing. Public content remains available until removed by its author, moderation or the applicable account-deletion process. Deleting it cannot retrieve copies already retained by other people.

Public skills and provider profiles

Published skills and provider listings can show their owner or instructor account identifier alongside the profile and content provided. A listed skill or ownership link does not itself establish a verified professional qualification. Only an explicitly shown verification status describes verification.

Apple Health and route sharing

With your permission, the iOS app reads Apple Health workouts, activity metrics, and recorded workout routes for display and route following. Wawa does not write to Apple Health. Health access is optional and can be revoked in your device settings. Apple Health workouts are not uploaded merely by granting Health access. The optional Strava connection described below has a separate upload choice. If you explicitly publish a route, including one taken from an Apple Health workout, Wawa uploads its precise route coordinates, your chosen title and description, activity type, and profile attribution. It does not include heart rate, calories, or workout timestamps in that public route upload.

Public routes can be viewed and downloaded by anyone. Start and end points may reveal your home or other private places. Review the full route before consenting to publication. You can remove your published route; Wawa cannot retrieve copies already downloaded by others. Public route records remain until removed by their author, moderation, or account deletion.

Optional Strava connection

If you explicitly connect Strava and enable workout upload, Wawa may upload future workouts automatically under that connection. Older workouts require a separate selection and history-upload permission. Wawa stores the installation identifier, Strava athlete identifier, encrypted authorization tokens and upload status needed to operate the connection. Temporary workout files contain the activity data selected for upload and expire within seven days. You can disconnect Strava in the app or revoke Wawa access in Strava. Strava processes the data you send under its own privacy policy.

Location, maps, and routing providers

When you choose a location feature and grant permission, Wawa uses your location to center maps, guide you along a route, or record a trace. iPhone location features run while their relevant screen is active; an active Apple Watch trace can continue while your wrist is lowered. Recorded traces remain local unless you choose to share them. Map and directions requests may send coordinates, search queries, network identifiers such as your IP address, and technical request data to the selected provider. Apple Maps, Google Maps, and OpenStreetMap/FOSSGIS routing process these requests under their own privacy terms. Google Maps may also process device identifiers, diagnostics, performance data, and interactions as described by its SDK disclosures. See Apple privacy, Google privacy, and FOSSGIS routing information.

Live chat, attachments, and notifications

When you enable live chat, Wawa stores your display name, username/account identifier, private and group conversations, participant memberships, invitations, messages, read positions and attachments so participants can communicate. People can find you by username; group codes allow invited people to join. Linking a trip shares its destination and dates with chat members. Listing-linked conversations also identify the relevant place, activity or team. Recipients can view and retain copies. Blocking and reporting store the information needed to enforce the block or investigate a report. Wawa processes hosted chat data on Amazon Web Services. Chat records remain available while the conversation is retained; deletion from the Wawa iOS or web account controls immediately removes associated Wawa travel, chat and public-feed data before requesting Identity erasure. Attachment availability may expire earlier as shown by the service. If you allow notifications, Wawa registers a device token and uses Apple Push Notification service to deliver chat alerts. You can disable notifications in device settings.

How we use and share data

We use this data only to authenticate you, synchronize requested Wawa features, protect accounts, moderate profile photos, handle abuse reports, deliver chat and requested notifications, publish posts, comments, trips and routes you explicitly choose to share, and operate the service. We do not sell personal data, use it for third-party advertising, or track you across other companies’ apps and websites. Amazon Web Services processes hosted data for Wawa. If you choose a social login provider, that provider processes the sign-in under its own privacy terms.

Optional AI safety permission

Before new content is sent to third-party AI, you can choose Allow AI safety screening in Wawa Settings. This separate, optional permission covers content you choose to share: display names, messages, posts and comments, trip and route details, profile photos, images, PDF pages and video/audio. Amazon Web Services processes that content using Bedrock Guardrails, Amazon Nova, Rekognition and Transcribe, as applicable, to detect unsafe content; processing may occur in AWS Asia-Pacific regions outside Singapore. Video speech may be transcribed. We have configured the AWS AI services opt-out policy for Rekognition and Transcribe to exclude content use for service improvement. AWS still processes content needed to provide the requested screening. The permission applies across iOS and web and is not granted by sign-in or Terms acceptance. You may withdraw it in Settings to stop new submissions; checks already submitted may finish. Browsing and device-local features remain available. We retain a versioned record of each choice, its date and time, and the client-declared app and language with your Identity account. Older content without this permission is not newly submitted for automated AI review; reports can still receive human review.

Terms and privacy records

When you explicitly agree to the Terms of Service and acknowledge this notice, Identity stores a receipt bound to your account, with the document versions and content hashes, the server-recorded date and time, and the app and language declared by your client. Viewing a document or using an existing account does not record agreement. Older privacy records remain labelled as historical privacy acknowledgements and are not evidence of agreement to the Terms. These records are included in your account data export and erased with your Identity account under the deletion process below.

Storage and protection

Connections use HTTPS. Hosted account data is encrypted at rest in Amazon Web Services’ Singapore region (ap-southeast-1); safety screening may also process content in other AWS Asia-Pacific regions as described below. Persistent iOS credentials are stored in Keychain; web credentials use secure HttpOnly cookies. Wawa asks only for the permissions needed by the feature you choose.

Your choices and rights

You can update your profile, sign out all Wawa sessions, or initiate permanent account deletion inside Wawa. The independent Identity deletion portal removes Identity records only; it does not initiate erasure in the separate Wawa travel, chat or public-feed service. Use the Wawa iOS or web account controls for the complete Wawa deletion flow before deleting Identity through the portal. You can withdraw optional feature permissions, request access to the personal data we hold about you, or ask us to correct it: use the in-app profile tools, the signed-in Identity data-export endpoint (GET /users/me/export, covering Identity profile, consent history, all Passport stamps, public routes and your route reports), or contact us at the address below. The Identity export does not include the separate Wawa travel, chat and public-feed records: request those through the same privacy contact. Role applications may include contact numbers, qualifications, business addresses and website details, used by authorized administrators to review the role you request. If you no longer want the data processing required to operate your account, you can delete the account. Acknowledging this privacy notice records that it was presented; it does not grant permission for optional AI screening, Health, location, notifications, Strava, marketing, or public sharing.

Safety screening and reports

Before sharing, chat text, display names, public posts/comments, public-trip and route descriptions, images, PDF chat pages and video content are checked by AWS safety and AI services (Bedrock Guardrails, Amazon Nova, Rekognition and Transcribe as applicable). Video speech may be transcribed for this check. Screening may process content in AWS Asia-Pacific regions outside Singapore. Attachments remain private until approved. Reports and uncertain results may be reviewed by authorized operators, who receive only the relevant content and limited conversation context. Applicable community/chat/route report evidence and moderation decisions are kept for up to 90 days, with expired records excluded from review even while storage cleanup completes. This period does not describe the ordinary lifetime of messages or public posts. Video transcripts are removed after successful processing or expire after one day. Account erasure covers unsent and rejected attachments as well as sent attachments. Their access is fenced immediately; physical deletion waits for outstanding upload links and processing leases to expire, and runs through the scheduled cleanup retry. Encrypted backups age out under their retention schedules. Account/avatar audit records follow their service retention and account-erasure rules. To appeal a decision or report a safety concern, email whalejay@whalejay.com.

Deletion and retention

Deleting from the Wawa iOS or web account controls first immediately and irreversibly erases Wawa cloud trips (including budgets, notes and checklists), favourites, inquiries, associated chat data, public posts/comments and published trips. It then requests deletion of the Identity login, profile, private Passport, published routes, addresses, birthdays, profile photos and stored photo versions. Account caches on the device used for deletion are cleared; guest-only data remains. Wawa cannot remotely clear other devices or copies saved by recipients. Cancelling Identity deletion does not restore erased Wawa content.

Identity access is blocked when its deletion request is accepted. Any available Identity grace period and its deadline are shown when you request deletion. During an available grace period, the authenticated cancellation endpoint can cancel Identity deletion; cancellation cannot restore Wawa data already erased. Otherwise removal starts without a grace period. Processing normally completes within 24 hours after removal starts. Encrypted disaster-recovery copies expire within 35 days and are not restored into active service. Security and operational logs expire within 30 days. We retain information longer only when required by law, and will disclose that requirement when it applies.

Children

Wawa is not directed to children under 13 and does not knowingly collect their personal data. Accounts whose stored birthday indicates the user is under 13 are flagged for review under our children’s-data procedure. Contact us if you believe a child provided personal data.

Wawa support

For help with Wawa Travel, email whalejay@whalejay.com. Include your app version, device model, and a description of the issue. Do not send passwords, verification codes, precise home locations, or private health records.

• Account access: use the password-recovery option on the sign-in screen. You can use guest mode for local trip planning without an account.
• Health and location: access is optional. Review permissions in iPhone Settings and Apple Health. Health routes require workouts with recorded location data.
• Trips and posts: guest plans stay local until imported; signed-in plans synchronize. Watch posts/comments and explicitly published trips/routes are public.
• Report abuse: use the report/block controls beside community content, published trips/routes or chat participants. Manage blocked people in the supported safety controls. You can also email the contact above with the affected route or conversation reference. Please do not forward unnecessary private message content.
• Delete an account: use the Wawa iOS or web account controls for Wawa and Identity erasure. The Identity deletion portal covers Identity records only.

Wawa Travel is provided by 10:10 Media Productions Pte Ltd.

Data protection officer

Wawa has designated a Data Protection Officer responsible for our compliance with the Singapore Personal Data Protection Act. Our Data Protection Officer can be reached at whalejay@whalejay.com (mark the message “Attention: DPO”).

Changes

Material changes will be dated here and, when appropriate, explained in the app before they take effect.