Privacy Policy

Effective date: October 18, 2026. This policy applies to Wandery version 1.0 for iPhone and to this website.

Wandery collects no data. There's no account, no server, no analytics, no advertising and no third-party code.
Your location history and photo details are processed on your iPhone. They're kept on your iPhone and in your own private iCloud, which only you can access. They're never sent to us.
Your photos are never uploaded or changed. Wandery reads only the date and place saved with them.
Purchases are handled by Apple. We receive no personal data when you buy Wandery Plus.
You can delete everything from inside the app, at any time.

Who we are

Wandery is made by Johnny Liao, an independent developer ("we", "us"). If you have a question about this policy or your privacy, email wumbusapps@gmail.com.

What we collect

Nothing. We don't collect, receive, sell or share any information about you, where you go, or how you use the app. In particular, Wandery has:

no account or sign-up;
no server of its own: nothing you record in Wandery is ever sent to us;
no analytics, crash-reporting or advertising software, and no third-party code of any kind;
no tracking across apps or websites, and no use of the advertising identifier.

Wandery itself contains no networking code. The only internet connections made for the app are made by Apple's own services, described below: iCloud (to sync your records), Apple Maps (to draw the map) and the App Store (for purchases). The App Store privacy label for Wandery is "Data Not Collected".

What Wandery records on your iPhone

Wandery keeps a record of which places you were in on which days. For each day and place it stores:

the place: a country, and for the United States and Canada a state or province;
the local date, the time zone, and the times you were first and last seen there that day;
how it was recorded: location, photo, a flight you added, or entered by you, and your answer when Wandery asks whether you were there;
the coordinates of the first sighting that day, used to check whether a journey between two places was physically possible (for example, to catch a photo someone AirDropped to you);
a random identifier for each of your iPhones, created by Wandery and kept on that iPhone, so that two iPhones on one Apple Account don't both record your location.

It also keeps the periods when Wandery was recording your location, your home place, the rules you set up and your settings. For flights, it keeps the ones you added, from a boarding pass or by hand (see Flights you add), and your answers about flights it worked out (whether each one was a flight): the two places, their coordinates and when the flight left. Exports (CSV files and PDF reports) are made on your iPhone and go only where you send them.

Location

When it's used. Only if you allow it. With Location set to Always, iOS tells Wandery when you've moved a significant distance or arrived at or left a place, even when the app is closed. Wandery doesn't run continuous GPS.
How it's used. Wandery looks up which country, state or province a location is in, on your iPhone, using maps built into the app, and records the day and place as described above. It doesn't use online lookup services for this.
Where it goes. Only into Wandery's storage on your iPhone and your own private iCloud (see iCloud). Never to us.
Turning it off. In the Settings app, under Apps > Wandery > Location. What's already recorded stays until you delete it.

Photos

What's read. If you allow it, Wandery reads the date, location and altitude saved with each photo and video in your own photo library, and whether it's a screenshot. It uses these to work out where you were in the past. It doesn't read the pictures themselves, doesn't download photos from iCloud, and never reads shared albums.
What's kept. Only the days and places worked out from them, as described above. No photos, thumbnails or file names are stored.
What's never done. Wandery never uploads, changes or deletes your photos.
Limited access. If you give access to selected photos only, Wandery reads only those.

Flights you add

If you scan a boarding pass, with the camera or from a screenshot you choose, Wandery reads its barcode on your iPhone and keeps only the flight details: the airports, airline, flight number and date. Your name, booking reference, seat and frequent-flyer number are not kept, and neither the camera image nor the screenshot is saved. The camera is used only while the scanner is open.

If you enter a flight by hand, Wandery keeps what you typed: the two airports, the date and, if you add it, the flight number.

iCloud

If you're signed in to iCloud, Wandery syncs your records through your private iCloud database, so your other devices and a new iPhone have the same history. This uses Apple's iCloud service:

Your private database belongs to your Apple Account. Apple's documentation says only you can access it, and its contents aren't visible to us as the app's developer. We have no way to read, export or recover what's in it.
It's stored by Apple under the iCloud terms and Apple's Privacy Policy, and counts toward your iCloud storage.
To stop syncing, turn off iCloud for Wandery in the Settings app, under your name > iCloud. Apple's iCloud sync then removes Wandery's records from that iPhone; they stay in your iCloud and come back if you turn it on again. If you never want your records in iCloud, turn it off before you first open Wandery.

The map

Wandery's map is drawn by Apple Maps (MapKit), which downloads map images from Apple for the area on screen, as it does in any app that shows a map. That's covered by Apple's Privacy Policy. Wandery doesn't send your days or your location history to Apple Maps; the places you've visited are filled in on your iPhone.

Widgets and notifications

Widgets show today's place and, with Wandery Plus, days left under a rule, from a small file on your iPhone. Limit warnings are notifications created on your iPhone; there's no notification server.

Purchases

Wandery Plus is sold and processed by Apple through the App Store, under Apple's Privacy Policy. We don't receive your name, email address, Apple Account details or payment information. The app checks whether you have Wandery Plus on your iPhone, using purchase information signed by Apple; that isn't sent to us. Apple gives us sales reports, such as the number of purchases by country or region, which don't identify you.

Information Apple may share with us

If you've chosen, in your iPhone's settings, to share analytics with app developers, Apple may share crash reports and aggregated usage statistics (such as the number of installs) with us. These are collected by Apple, not by Wandery, and don't include your places, days or photos. You can turn this off in the Settings app under Privacy & Security > Analytics & Improvements. Reviews you post on the App Store are public and visible to us.

Deleting your data

Everything: in Wandery, Settings > Delete All Data deletes your records on this iPhone and, through iCloud, on your other devices.
A single day: open it in Days and change it.
Deleting the app removes the copy on this iPhone. The copy in your iCloud stays until you delete it in Wandery or in the Settings app under your name > iCloud, where you can manage storage for each app.

When you contact us

If you email us, we receive your email address and whatever you include in your message. We use it only to reply, we don't share it, and we keep it only as long as we need to help you. Ask us at any time and we'll delete it. Please don't send your travel history or exported files unless we ask for specific dates.

This website

This website is a set of static pages. It uses no cookies, no analytics, no scripts, no web fonts and no third-party resources. It's hosted on GitHub Pages. GitHub logs visitors' IP addresses for security purposes, as described in the GitHub Pages documentation and the GitHub General Privacy Statement. We don't have access to those logs.

What we can and can't see

We can't see	We can see
where you've been, on any day your location, now or in the past your photos or anything read from them your flights, boarding passes, rules, reports or exports anything in your iCloud your name, email address, Apple Account or payment details	sales reports from Apple that don't identify you crash reports and aggregated statistics from Apple, only if you opted in to share them public App Store ratings and reviews emails you send us

Because we never receive your records, we can't recover them for you, and we have nothing to hand over to anyone.

Children

Wandery doesn't collect personal information from anyone, including children.

Your rights

Depending on where you live, laws such as the GDPR (EU and UK) and the CCPA (California) give you rights to access, correct, delete or move personal information about you, and to object to certain uses. Your Wandery records are on your devices and in your iCloud, under your control: you can see, change, export and delete them in the app. The only information we might hold is email you've sent us; to make a request about it, email wumbusapps@gmail.com. If you're in the EU or UK, you can also complain to your local data protection authority. We don't sell or share personal information.

Changes to this policy

If we change this policy, we'll update this page and the effective date above. If a future version of Wandery changes how data is handled, such as the planned option to compare places with friends, we'll update this policy before that version is released, and any sharing will be off until you turn it on.

Contact

Johnny Liao
Email: wumbusapps@gmail.com