Privacy Policy
How AREN AI LABS LLC handles your data in the Wander walking travel-guide app, on the web and on iOS and Android.
Last updated: 3 August 2026
The short version
- Your location never leaves your device. Wander uses it to show where you are on the map and to follow a walk. It is not sent to us, not stored on our servers, and not shared with anyone.
- We ask for an email address and password only if you create an account. You can browse Wander without one.
- We never see your card details — payments go directly to Stripe.
- We don't sell your data, and we don't run advertising or third-party tracking in the app.
- You can delete your account and data at any time: how to delete your account.
1. Who is responsible for your data
The data controller is AREN AI LABS LLC, a limited liability company registered in Illinois, United States, at 451 W Huron St, Unit 907, Chicago, IL 60654. For any privacy question or request, contact admin@arenailabs.com.
2. What we collect
| Data | When | Why |
|---|---|---|
| Email address and password (password is stored only as a secure hash, by our auth provider) |
If you create an account | To sign you in, secure your account, and send account emails such as confirmation and password resets |
| Profile — your subscription tier and optional display name | Created with your account | To know whether to unlock Premium content |
| Billing records — your Stripe customer and subscription identifiers, subscription status and renewal date | If you subscribe on the web | To manage your subscription and keep your access in sync |
| Feedback you send — your message, plus which city, walk and stop you were viewing, and your user ID if signed in | Only when you use the feedback button | To fix problems and improve the walks |
| Technical data — IP address, device and browser type, and request logs | Automatically, when your device loads the app, content or map tiles | Unavoidable in delivering a website; used for security, abuse prevention and diagnosing faults |
3. What we deliberately do not collect
- Your location. If you grant location permission, your position is read by the app on your device to draw your dot on the map and follow a walk. It stays there. We have no server that receives it and no record of where you've walked.
- Your card number. Card entry happens on Stripe's own checkout page. We only ever receive identifiers and the subscription status.
- Advertising and cross-site tracking identifiers. Wander runs no ad networks, no analytics SDKs and no third-party trackers.
4. Stored on your device, not on our servers
Wander keeps a few small items in your browser or app storage: your light/dark theme choice, whether narration is enabled, and any feedback written while offline (queued until it can be sent). Signing in also stores a session token so you stay signed in. Clearing site data or uninstalling the app removes these. We use no advertising or tracking cookies.
5. Legal bases (UK/EU GDPR)
| Purpose | Legal basis |
|---|---|
| Providing the app and your account | Performance of a contract |
| Taking payment and managing your subscription | Performance of a contract |
| Improving Wander using feedback you choose to send | Our legitimate interests in improving the product |
| Keeping the service secure and preventing abuse | Our legitimate interests in protecting the service and its users |
| Keeping payment and tax records | Compliance with a legal obligation |
6. Who else processes your data
We keep this list short on purpose. Each provider acts on our instructions, and we share only what that provider needs.
| Provider | Role | What it receives |
|---|---|---|
| Supabase | Accounts and database | Your email, password hash, profile and feedback |
| Stripe | Payments | Your email, payment details you enter with them, and billing history |
| Cloudflare | Hosting and content delivery | Technical data such as your IP address, as part of serving the app, its content and audio |
| MapTiler | Map tiles | Technical data such as your IP address when your device requests map tiles |
We may also disclose data if the law requires it, to enforce our terms, or to protect someone's rights or safety. If Wander is ever sold or merged, your data may transfer to the new owner, who would remain bound by this policy or give you notice of a new one.
7. International transfers
We are based in the United States and our providers may process data in the United States and other countries. If you're in the UK, EEA or another region with transfer restrictions, your data may therefore be transferred abroad. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, and our providers maintain their own transfer mechanisms.
8. How long we keep it
- Account and profile — until you delete your account, then removed.
- Feedback — kept after account deletion but permanently anonymised: the link to you is severed, so the remaining text is no longer associated with any person.
- Payment and invoice records — retained by Stripe as long as tax and accounting law requires, typically several years. These cannot be deleted on request.
- Technical logs — kept for a short period for security and diagnostics, then discarded.
9. Your rights
Everyone
You can access, correct or delete your account data. The fastest route to deletion is in the app — see Delete your account — or email us and we'll do it for you.
UK and EEA (GDPR)
You have the right to access your data, correct it, erase it, restrict or object to processing, receive it in a portable format, and withdraw consent where processing relies on consent. You can also complain to your local data protection authority — in the UK, the Information Commissioner's Office.
California (CCPA/CPRA)
You have the right to know what personal information we collect and why, to request deletion or correction, and to not be discriminated against for exercising those rights. We do not sell or share your personal information as those terms are defined by the CCPA, and we do not process it for cross-context behavioural advertising.
We respond to requests within the time your local law allows, and we may need to verify your identity — normally by confirming you control the account's email.
10. Children
Wander isn't intended for children under 13, or under 16 in the EEA and UK, and we don't knowingly collect their data. If you believe a child has given us personal data, email us and we'll delete it.
11. Security
Traffic is encrypted in transit with HTTPS. Passwords are stored only as salted hashes by our authentication provider. Database access is restricted by row-level security rules so one account cannot read another's data, and payment credentials never reach our systems. No system is perfectly secure, but we take these safeguards seriously and will notify you and the relevant regulator if a breach legally requires it.
12. Changes to this policy
If we change this policy we'll update the date above, and for material changes we'll give notice in the app or by email before they take effect.
13. Contact
Privacy questions or requests: admin@arenailabs.com.