Privacy policy
- Legal entity
- TBD
- Registered address
- TBD
- Privacy contact
- TBD
- General contact
- TBD
- Governing law
- TBD
- Effective date
- TBD
- Last draft update
- 30 October 2026
Who we are
wudi provides Accounts (accounts.wudi.world), Travel (travel.wudi.world) and Finance (finance.wudi.world). The legal entity and contact details remain TBD. Accounts manages identity, circles and invitations for integrated apps. Finance currently also has its own Google sign-in and household access model; this draft does not claim that its Accounts integration is complete.
What we collect and why
| Category | Examples and purpose |
|---|---|
| Account | Name and email from Google sign-in, additional emails you verify, and sessions used to sign you in and contact you. |
| Circles and people | Circle names, members, roles and person cards, including names and contact details supplied by owners or admins, to share with the right people. |
| Travel | Destinations, days, stops, reservations, costs, notes and participation choices to plan and share trips. Optional booking profiles can include phone, home address and birthdate. Travel Wallet can include traveler preferences, loyalty and trusted-traveler numbers and credits. |
| Photos | Uploaded photos, captions and chosen location metadata to display trip photos. Photos posted through Travel are public by unguessable link: anyone with a link can view, download and share them, including after leaving a circle. Publishing a trip exposes its photos to everyone. Retained GPS is embedded in downloadable images and explicit photo coordinates, so a link holder may learn the precise location. Saved copies cannot be recalled. Existing upload/publication controls require explicit acknowledgements. An additional participant photo-sharing agreement is planned. Externally hosted photos also follow their image host’s sharing and privacy rules. |
| Finance | Account and household membership; financial records, dated balances, source metadata, plans, scenarios, discussions and history you or your connected AI save. Private household access is not end-to-end encryption. |
| Plans and technical records | Plan entitlements and complimentary access, sign-in sessions, security logs and error reports used to apply limits and operate the service. |
Do not put payment card details in trips or notes. Travel's “Use my location” works on your device rather than storing your device location on the server.
Who can see it
Account, circle, trip and Finance household records follow their granted permissions. Photo links are a separate public-by-link sharing surface, as described above; leaving a circle does not revoke a link that someone already holds. Circle phone visibility follows your “Hide my phone” setting; you and the circle owner can still see it. Trip organizers see participation. Shared booking profiles and group records are not private personal notes. Service operators may have operational access; access controls do not mean end-to-end encryption.
Services we use
Cloudflare hosts Accounts and Travel, Neon stores their data, Google provides sign-in, and Resend handles enabled email delivery. Finance has its own hosting and database configuration. Provider-specific details for the combined policy remain subject to legal review. Google Analytics is used only as described in the Analytics section.
Connected AI assistants
If you connect an assistant such as Claude or ChatGPT, it can read or change records within its approved permissions and your current app access. What you share is also handled under the AI provider's policy. Disconnect Travel assistants from its AI connections page and Finance assistants from Settings → Connections. Disconnecting stops future authorized access; requests in progress may finish. It does not delete saved records or copies the provider already received.
Sponsored content
Sponsor cards are planned and off by default. Under the approved design, only participants and viewers may see cards marked “Sponsored”; organizers, organizer previews and signed-out demos do not. The browser chooses from a Travel-hosted list using the displayed place and date. No sponsor request, pixel or third-party ad script runs before a tap. Dismissals and daily frequency limits stay on the device; any counters are aggregate per card per day with no user ID. Sponsor destinations have their own policies after you follow a link.
Analytics
WUDI uses Google Analytics only after you accept optional analytics. Declining or withdrawing does not restrict the calculator, trip planning, sign-in or other app features. Advertising choices are separate.
On approved public pages, Google receives a fixed public page address and title, hostname, standard browser/device and network information, and analytics identifiers. The homepage can also send fixed Travel or Finance demo/open actions. Google processes this data to provide website visit statistics. Your account identity, financial amounts and inputs, private workspaces, trip or booking details, search inputs, private identifiers, URL queries and dynamic titles are excluded. Brain is excluded.
Analytics cookies can connect consented public visits across wudi.world subdomains for up to 60 days. Your acceptance or rejection is remembered separately on each site in browser local storage for 180 days. No Google Analytics scripts, cookies, events or consent pings are started before acceptance. Each site requires its own choice. Standard aggregate reports may persist beyond the two-month user/event retention setting.
Use Analytics choices on an eligible public page to reject or withdraw at any time. Withdrawal stops future collection and removes accessible WUDI analytics cookies; it does not automatically delete data already received by Google. Clearing browser storage also clears the remembered choice. Authentication/session storage needed to use the apps is separate.
Google Signals, advertising personalization, user-provided data collection and automatic enhanced measurement are disabled. Google Analytics is a third-party service; its code runs in a dedicated same-origin frame on approved public pages. The frame isolates its lifecycle and page context but is not a security sandbox against the service itself.
Google Privacy Policy · Google Analytics data safeguards
Finance advertising preferences
The public Finance calculator stores your optional advertising choice in the wudi_calculator_ads cookie for one year. It records the preference version and acceptance or rejection, not financial inputs or account identity. Use Ad privacy choices in Finance’s footer to change it. Advertising scripts and tracking are not enabled in the current Finance preview; provider details and applicable consent controls must be configured before activation. Rejecting optional advertising does not block the calculator.
Retention and deletion
Accounts browser sessions have a seven-day lifetime. Supported AI refresh access uses a sliding 90-day inactivity limit; token lifetimes can differ. New personal invitations default to seven days and may have another sender-selected expiry. Account deletion hides the account immediately and provides a seven-day cancellation period before purge starts. Minimal deletion receipts retain account identifiers, dates and app confirmations for coordination. Normal content history, operational records, backups and provider retention need review in the final policy; this draft does not promise every copy is erased immediately. Finance currently has no self-service account-deletion flow.
Your choices
Accounts lets you manage verified contact email, phone visibility, sessions and account deletion. Travel and Finance each let you disconnect their AI assistants. You can decline or withdraw optional analytics without losing app features. Existing upload/publication acknowledgements remain required; the additional participant agreement is being implemented separately. For data access, export or privacy questions, the contact is TBD; no working contact address is implied by that placeholder.
Children and changes
The minimum age and regional requirements are TBD pending legal review. This draft is not a statement that parental-consent requirements have been implemented. The final policy will carry its effective date and explain material changes.