Privacy Policy

Overview

Wanderbook is built on a simple principle: your personal data belongs to you. We collect the minimum information necessary to provide the service, we never sell your data, and we never show you ads.

This policy explains what data we collect, why, and how we protect it.

Data that never leaves your device

The following data is processed entirely on your iPhone and is never uploaded to our servers unless you explicitly place a print order:

• Apple Health data — your workout history, routes, and step counts are read locally via HealthKit. We do not store or transmit raw HealthKit data.
• Original photos — your Camera Roll photos are accessed locally to generate your book. Original images are never uploaded. Only a print-ready PDF you explicitly export is ever sent anywhere.
• Location data — GPS route data embedded in your workouts is used locally to render map snapshots. No raw location data is uploaded.

Data we collect when you create an account

You can use Wanderbook to create and preview books without an account. An account is only required when you place a print order.

When you sign in with Apple, we receive and store:

• Your Apple user identifier (a stable, app-specific ID)
• Your email address, if you choose to share it (Apple lets you hide this)

This information is stored securely in our database (Supabase, hosted on AWS) and is used only to associate your orders with your account.

Data we collect when you place a print order

To fulfil your order, we collect and process:

• Your book PDF — the print-ready PDF generated on your device is uploaded to our secure private storage (Supabase Storage, private bucket). It is used solely to send to our print partner (Lulu) for production and is deleted after a reasonable retention period.
• Your shipping address — name, street address, city, state, postcode, country, and phone number. This is passed to our print partner for delivery and is not used for any other purpose.
• Order details — book title, quantity, order status, and tracking information.

Third-party services

• Lulu (print fulfilment) — your book PDF and shipping address are shared with Lulu to produce and ship your order. Lulu's privacy policy governs their handling of this data.
• Supabase — our backend database and file storage provider, hosted on AWS infrastructure in the United States.
• Apple Sign in with Apple — authentication is handled by Apple. We receive only the information Apple provides (user ID and optionally email).

We do not use advertising networks, analytics trackers, or social media pixels.

Data security

All data in transit is encrypted using TLS. Your book PDFs are stored in a private, access-controlled storage bucket — they are never publicly accessible. Database access is protected by row-level security.

Your session token is stored in the iOS Keychain, the most secure credential store on iPhone.

Data retention

• Book PDFs are retained for 90 days after your order ships, then deleted.
• Order records (without PDF) are retained for 3 years for accounting purposes.
• Account data is retained until you request deletion.

Your rights

You have the right to:

• Request a copy of the data we hold about you
• Request deletion of your account and associated data
• Correct inaccurate personal information

To exercise any of these rights, email us at hello@wanderbook.app.

Children

Wanderbook is not directed at children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you via the app or by email. Continued use of Wanderbook after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email us at hello@wanderbook.app.