Last updated September 30, 2026
Where2 helps groups plan trips together. We built it to be useful, not to mine your data. This policy explains what we collect, why, and the choices you have. In plain terms: we only use your information to run the app for you. See our Data Sharing Policy for our promise on never selling or profiting from it.
Solely to provide and improve the app for you: saving your trips, syncing them across your devices and trip members, running the AI features you use, showing maps, sending sign-in codes, the trip invitations you ask us to send and the occasional email from our team, and unlocking features you’ve paid for. For upcoming trips we also refresh destination weather, tips and things to do in the background so they load quickly; those requests contain only the destination’s name or its approximate coordinates, never who you are. That’s it.
Our team can open your account from our admin tools, including viewing the app as you, to help you or to keep the service running and secure. Every such access is recorded.
Where2’s AI features (reading a booking you upload or paste, summarizing a page you save, turning a saved page into an itinerary item, looking up details for a place, destination tips and things to do, and the trending destination on Home) send the content they need to an AI model. Every AI request goes through the AI Gateway run by Vercel, our hosting provider, and on to one of the AI providers we have approved: Anthropic, ByteDance, DeepSeek, Google, Mistral AI, OpenAI and Z.ai. Which of them handles a request can change as we choose the best model for each feature.
Destination weather does not come from an AI model: it is a forecast from the Norwegian Meteorological Institute (MET Norway), and travel advisories are the official levels published by the U.S. Department of State, shown with their source and date. Neither is an AI feature, so you see both whether AI features are on or off. When a destination does not name its country, the advisory shown is the one for the country where we found the place, labelled with that country’s name. Only when no live forecast is available, and only if you have AI features on, does an AI model describe the typical weather for the month, and the card then says it is typical, not a forecast.
Requests that contain your personal data (the documents and photos you upload, the text you paste, the pages and notes you ask us to summarize, and the details you ask us to look up) go only to providers that have agreed not to keep it (zero data retention) and not to use it to train their models. Destination tips, things to do, place details in Explore, the trending destination and typical weather use only place names, never your identity, and are never used to train models either.
You can turn AI features off at any time in Settings. While they are off, nothing you do sends anything to an AI provider, and trips you own are left out of the background refreshes described above. Destination weather and travel advisories keep working: to show them, our servers may still send the destination’s name to Google Maps Platform to find where it is, and its approximate coordinates to MET Norway, as described under Service providers. Members of a trip you share can still use AI features on that trip’s content.
We do not sell, rent, or trade your information. We do not show ads inside Where2, and we do not track you inside the app for advertising. We do not share your trips, reservations, or account data with advertisers or data brokers, and we do not build profiles of you to make money from your information. Full details in our Data Sharing Policy.
Where2 advertises itself on platforms like Facebook and Instagram. So that we can tell whether those ads actually work, our public marketing pages (such as this site’s welcome page) include a standard measurement pixel from the advertising platform. It records visits to those pages and clicks on their sign-up buttons, so we can tell whether a visit or a sign-up followed one of our ads.
Two limits on this, and we hold to both. It runs only on our public marketing pages, never inside the app itself, so nothing you do in your trips is ever tracked. And it is used only to measure our own advertising, never to advertise anyone else’s product to you and never to sell or share your information with third parties for their own marketing.
You can block this like any other web measurement, using your browser’s tracking protection, private browsing, or an ad blocker. Doing so has no effect on Where2 working normally.
To run the app we rely on a small set of providers. Each receives only what’s needed for its function, and only to provide the service to you, never for its own marketing:
Like any website, some content loads straight from its host onto your device, and that host sees your device’s network address: the map itself (OpenFreeMap, OpenStreetMap, Esri and OpenTopoMap), map pin images (unpkg.com), icons (Google Fonts), some photos (Wikimedia and Unsplash), and destination videos (YouTube: the video pictures load when you open a destination’s videos, and its privacy-enhanced player only when you play one).
When you take a photo of a booking or upload a confirmation document, we send that file through Vercel’s AI Gateway to one of our approved AI providers, under zero-data-retention and no-training terms, so it can read the details (dates, times, confirmation numbers) and fill in the reservation for you. This happens only when you choose to capture or upload something. We store the file as soon as you pick it, so we can show you the source document alongside the reservation. It is never used for advertising, never sold, and never used to train AI models. Deleting your account removes your uploaded files along with the rest of your data. Deleting a single reservation or trip does not remove its uploaded file yet: the file stays in our private storage until you delete your account.
You can permanently delete your account and its data at any time, directly in the app: open Settings → Your data → Delete my account and confirm. Your account is removed immediately, along with your private trips and the reservations, itinerary items, notes, addresses, and uploaded files you added. Trips you share with other people are kept for those members, but you are removed from them and your contributions are no longer linked to your account. Entries already in a shared trip’s activity feed, and notices members already received, keep the name you used when you made those changes. We may retain a limited set of records where the law requires it (for example, transaction records for purchases). You can download a copy of your data first from Settings → Your data → Export my data. If you no longer have access to the app and need help deleting your account, contact us through the app or our website and we will remove it on request.
We keep your data while your account is active. When you delete your account, we remove your access immediately and permanently delete your associated data within a reasonable period, except where we must retain limited records to comply with law.
Where2 is not directed to children under 13, and we don’t knowingly collect their data.
If we update this policy we’ll revise the date above and, for significant changes, let you know in the app.
Questions? Contact us at support@where2.tlh88app.store.