Privacy Policy

1. Who we are

Weno is a group-travel app operated by Weno B.V. ("Weno", "we", "us"). This policy explains what personal data we collect when you use the Weno mobile app and website, why we collect it, who we share it with, and the choices you have. Weno B.V. is the data controller.

2. Data we collect

• Account data: your name, email address and sign-in details. If you sign in with Google or Apple, we receive the name and email address that provider shares with us.
• Profile and preferences: travel preferences, wishlists, and settings you choose.
• Trip content: trips you create or join, the people you invite, votes, and messages you send in trip chats.
• AI assistant conversations: the messages you send to the in-app travel assistant and its replies.
• Booking data: the stays you search for and book, guest names, travel dates, and booking and cancellation history.
• Payment data: payments are handled by our payment providers. We receive a payment reference, the amount, the card brand and last four digits, and the billing details needed to complete the booking. We do not store full card numbers.
• Location: if you allow it, your approximate or precise location while the app is in use, to show places and stays near you.
• Photos and camera: images you choose to upload, for example a trip photo or a support attachment.
• Usage and device data: how you use the app (screens viewed, actions taken), device model, operating system, app version, language, IP address, and a push-notification token if you enable notifications.
• Diagnostics and session recordings: crash reports and performance data, and recordings of in-app sessions (screen interactions inside Weno only) that help us find and fix problems.
• Support requests: the content of tickets and emails you send us.

3. How we use your data

• To provide the service: accounts, trips, chat, search, bookings, payments, cost splitting, and notifications.
• To personalise search results and recommendations.
• To provide customer support and send service messages such as booking confirmations.
• To understand how the app is used, fix errors, and improve it.
• To prevent fraud and abuse and to meet our legal, tax and accounting obligations.

Where the GDPR applies, we rely on performance of our contract with you, our legitimate interests in running and improving a secure service, your consent (for example for location and notifications, which you can withdraw in your device settings), and legal obligations.

4. Who we share data with

We do not sell your personal data, and we do not share it for advertising. The app contains no third-party advertising. We share data only with:

• Other members of your trips, who can see your name, the content you add to a shared trip, and your messages in that trip's chat.
• Accommodation suppliers (through our booking partner Nuitee/LiteAPI), who receive the guest and booking details needed to make your reservation.
• Payment providers (Stripe, and Hands In for split payments), who process your payments.
• Service providers that process data on our behalf: Clerk (sign-in and accounts), Twilio (trip chat), OpenAI (the AI assistant), PostHog (product analytics and session recordings), Sentry (crash reports and session recordings), New Relic (service monitoring), Recombee (recommendations), SendGrid (email), Expo (push notifications), Google (maps and place search), FreeScout (support tickets), and our hosting and storage providers.
• Authorities, where the law requires it.

5. Retention

We keep your account data for as long as your account exists. When you ask us to delete your account, it is deactivated immediately and permanently deleted after 90 days; you can ask us to restore it during that period. Booking and payment records may be kept for longer, in limited or anonymised form, where tax, accounting or dispute-handling rules require it. Analytics and diagnostic data is kept for a limited period and then deleted or aggregated.

6. Deleting your account and data

You can delete your account in the app under Profile → Manage account → Delete account, or request deletion at weno.travel/delete-account or by emailing support@weno.travel.

7. Your rights

Depending on where you live, you have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know what personal information we collect, to delete it, to correct it, and not to be discriminated against for exercising these rights; we do not sell or share personal information as those terms are defined in California law. To exercise any of these rights, email support@weno.travel. If you are in the EU or UK you can also complain to your data protection authority.

8. Children

Weno is intended for adults. You must be at least 18 years old to create an account or make a booking. We do not knowingly collect personal data from children.

9. Security

Data is encrypted in transit, access to our systems is restricted, and payment card data is handled by PCI-compliant payment providers. No system is perfectly secure, so please use a strong, unique password.

10. International transfers

Weno B.V. is based in the Netherlands. Some of our service providers process data outside the European Economic Area, including in the United States. Where they do, we rely on appropriate safeguards such as standard contractual clauses.

11. Changes to this policy

We may update this policy as the service changes. The date at the top shows when it was last updated; we will tell you in the app or by email about significant changes.

12. Contact us

For privacy questions or requests, contact support@weno.travel.