Privacy Policy
Last updated: 6 October 2026
Controller
VALORICE BV, Route de Housse 1, 4672 Blegny, Belgium, VAT / enterprise number BE 1034.103.439, is responsible for your personal data in WayBuddy. Privacy questions and requests: info@valorice.be.
What we process and why
- Account: email address, display name and profile photo, and your sign-in method (email and password, Google or Apple). Used to create and secure your account.
- Trips: destinations, dates, itinerary items, transport, stays, bookings, budget, checklists, notes, journal entries and the travellers you add. Used to plan and show your trips, and shared only with people you invite.
- Travel needs you choose to enter, such as dietary or mobility needs. Used only to adapt the plan for your trip.
- Photos and files you upload (trip covers, journal photos, profile photos, documents). Stored in private storage.
- Purchases: plan, dates, amounts and payment references. Used to give you access and keep accounting records. We do not receive your full card details.
- Feedback and support messages you send us.
- Technical records of how features such as the Guide are used (for example the feature and whether it worked), used to run, secure and improve WayBuddy.
We process this data to provide the service you asked for (contract), to meet legal obligations such as accounting, and, where we ask, with your consent, which you can withdraw at any time.
Service providers
- Hosting, database, sign-in and file storage: Supabase, through Lovable Cloud.
- WayBuddy Guide and plan suggestions: your question and the relevant trip details are sent to an OpenAI model through the Lovable AI Gateway to generate the answer.
- Website payments: Stripe.
- App purchases: Apple App Store or Google Play, confirmed through RevenueCat using your WayBuddy account ID.
- Sign-in with Google or Apple, if you choose it.
- Maps and place search: Google Maps services.
- Trip cover photos found automatically come from Wikimedia Commons.
Google Calendar connection (optional)
If you choose to connect Google Calendar, WayBuddy asks for only two permissions: calendar.events, to add and update the trip events you select, and calendar.calendarlist.readonly, to list your calendars so you can choose one. Your Google connection keys are stored encrypted on our servers and used only when you export events. You can disconnect at any time in the calendar step, or remove access in your Google account.
WayBuddy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use this data only to provide the calendar export you request, do not use it for advertising, do not sell it, and do not use it to train AI models.
You can also export a calendar file (.ics) or subscribe in Apple Calendar without connecting Google.
Cookies and local storage
We do not set advertising or analytics cookies on the website. Your browser or app stores a few items locally that WayBuddy needs to work: your sign-in session, your language choice, short-lived Google Calendar connection steps, an offline copy of trip data, a layout preference, and in the apps whether you were already asked for a rating.
How long we keep data
| Data | Retention |
|---|---|
| Account and trip data | While your account is active; deleted within 30 days after you ask us to delete the account. |
| Invoices and accounting records | 7 years (Belgian accounting and VAT law). |
| Google Calendar tokens | Until you disconnect or delete your account. |
International transfers
Some providers (for example OpenAI, Stripe, RevenueCat, Google, Apple) may process data outside the EU/EEA. Where this happens we rely on the EU–US Data Privacy Framework where the provider is certified, or on EU Standard Contractual Clauses.
Children
WayBuddy is not directed at children under 13. If you plan trips with a child, you enter only what you choose to enter about the trip.
Deleting your account
Go to Profile and request account deletion, or email info@valorice.be. You can withdraw the request until it has been completed. Trip owners can also delete individual trips at any time.
Your rights
You have the right to access, rectify and erase your personal data, to data portability, and to object to processing. Email info@valorice.be to use these rights. You may also complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), www.gegevensbeschermingsautoriteit.be, or to the authority in your own country.