Last updated: November 1, 2026
Some account, reporting and on-device controls described below require the updated RouteWhiz app. If a control is unavailable in your installed version, contact support@routewhiz.com or privacy@routewhiz.com for help. Server-side AI processing requires the current consent version.
Who we are and how to contact us
RouteWhiz provides travel planning, routes, collaboration and AI-assisted travel tools. Contact support@routewhiz.com for support and privacy@routewhiz.com for privacy requests.
Information we process
- Account and profile information: names, email, authentication identifiers, sign-in method, avatar, bio, preferences, terms acceptance and AI consent version/timestamp.
- Travel information: destinations, dates, interests, pace, budget, routes, selected stops, activities, notes, reservations, accommodation, expenses and shared-trip participation.
- Uploaded files and metadata: travel documents and other files you choose to store, their filenames, types, sizes and storage paths. Storing a document does not authorize sending its image to AI. The reservation document AI parser is disabled in this release.
- Location: approximate or precise device location when permitted and needed for a feature. Device location permission is separate from consent to send relevant location to OpenAI.
- AI interactions: prompts, relevant conversation context, travel preferences, dates, selected places and relevant notes. Location is included in AI context for explicit nearby requests. Do not submit unnecessary sensitive information or other people's personal data.
- Social and collaboration information: invitations, membership, friend/block relationships, content and visibility settings you choose, and activity in shared trips.
- Subscription and technical information: store purchase/entitlement information, device/app details, push tokens, diagnostics and usage events used to operate and improve the app.
- Reports: the reported item's identifier/type, reason, optional explanation, submission time and review/action records. Reporting does not automatically attach private documents or an entire conversation. An AI response excerpt, limited to 4,000 characters, is attached only if you explicitly select it.
Purposes and sharing
We use this information to operate travel planning, maps, file storage, collaboration, purchases, notifications, support, service reliability, abuse prevention and content review. Content shared with collaborators or made public can be seen according to the relevant access settings.
Service providers include Supabase (hosting, authentication, database and file storage), OpenAI (AI processing), Google services (maps/places/directions and optional sign-in), RevenueCat and app stores (purchases), Mixpanel (product analytics), Sentry (diagnostics), Expo notification services, Open-Meteo (weather/geocoding), and public travel/geographic/image sources such as Wikipedia/Wikimedia, OpenStreetMap-based services, Photon, Nominatim and Unsplash. Apple Sign-In is available for authentication. Which providers receive information depends on the features used. We may disclose information when required by law or necessary to protect users and the service.
AI consent and control
Before personal travel data is sent to OpenAI, the app asks for explicit consent describing the provider and information involved. Updated sharing disclosures require acceptance of the current consent version. Without that consent you can continue using manual features and stored information that does not require new AI processing.
You can withdraw AI consent in Settings. New personal-data AI calls are blocked; queued work checks consent again before starting further provider calls. Data already transmitted cannot be recalled. Withdrawal does not by itself delete saved trips or conversation history. Provider processing/retention also depends on the applicable provider terms and account configuration; we do not promise that provider logs are absent or immediately erased.
Storage and retention
- Account, trip and uploaded-file data remains until deleted, subject to necessary legal/security retention.
- Trip assistant history uses a 30-day local retention/cleanup policy. The general assistant also removes expired saved messages on restoration. Locally cached/offline content remains until its expiry, removal or account cleanup.
- Apple revocation credentials are encrypted on the server, inaccessible to app clients, and retained only as needed for sign-in revocation. Pending revocation credentials may temporarily survive account deletion to complete retries.
- Completed account-deletion operational records are eligible for cleanup after 30 days once Apple revocation credentials have been removed and device cleanup has been acknowledged. Minimal recovery identifiers remain while acknowledgement is pending. Failed/pending requests remain until cleanup completes.
- Reports and review actions are retained as needed to investigate concerns and enforce content standards. Diagnostics and analytics retention follows the service configuration and relevant provider rules.
Account deletion
You can request account deletion inside the app. It removes your account, uploaded files and trips you own, including trips shared with others. Trips owned by other people remain. Your personal files and memberships are removed and financial participation in those trips is replaced with an anonymous trip-specific participant; financial amounts remain unchanged.
Deletion can continue through secure background retries if a provider or storage operation is temporarily unavailable. The app distinguishes an accepted request from completed cleanup. It also clears account-scoped chat, drafts, offline trip/map data and login information on the device; interrupted local cleanup is retried on launch. Files you separately exported or saved outside RouteWhiz remain under your control.
For Apple sign-in, we revoke stored authorization tokens. If historical revocation credentials are unavailable, we still delete your account and explain how to remove RouteWhiz access manually in your Apple Account settings. Deleting RouteWhiz or your account does not cancel an App Store subscription; manage subscriptions separately through your store account.
Your choices and rights
You can edit profile/preferences, choose sharing visibility, block users, report content, withdraw AI consent and manage device location/notification permissions. You can contact privacy@routewhiz.com to request access, correction or deletion and exercise applicable privacy rights. Processing may occur outside your country through service providers; applicable safeguards and rights depend on your location.
Security and children
We use encrypted connections, access rules and private storage controls. No system can guarantee complete security. RouteWhiz is not intended for children under 13. Contact us if you believe a child under 13 has provided personal information.
Changes
We will update the policy and date for material changes. A revised policy does not replace the separate explicit consent required before newly disclosed personal-data AI sharing.