wayly
FeaturesMapPlannerLog in
Legal

Privacy Policy

Version 1.2 — Effective 22 October 2026

Wayly is a mobile app (iOS and Android) that turns your outdoor activity into an exploration game: you move through the real world to reveal a personal "fog of war" map, track your activities, plan routes and sync them to a compatible watch or bike computer.

Wayly is developed and operated by Andrii, an individual developer based in Ukraine. If you have any questions about this policy or your data, contact us at wayly.contact@gmail.com.

This policy explains what personal data we process, why, on what legal basis, who we share it with, and the rights you have.

1. Who this applies to (age 13+)

Wayly is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with data, contact us and we will delete it.

2. Data we process

We only collect what the app needs to work. You control most of it through system permissions, and you can revoke any permission at any time in your device settings.

Account data

  • Email address (used to create and sign in to your account).
  • Display name and avatar, if you add them.

Location data (GPS)

  • Precise location while you use the app, and in the background while you are recording an activity. This is the core of the app: it lets us draw your track, reveal the map around you and grow your territory.
  • Background location is used only during an active recording session; you can stop it at any time.

Exploration and activity data

  • The areas you have revealed ("fog of war"), explored places, territory, waypoints, collected items, level and XP.
  • Activity statistics such as distance, duration, elevation, sport type and, where available, heart rate.

Health data (optional)

  • With your explicit permission, Wayly reads steps, distance, active energy, heart rate and workouts from Apple Health to reflect the activity you do while exploring. This data is read on your device and is used only to render your own map and stats. It is never sold.

Photo location (optional)

  • With your permission, Wayly reads the location saved in your photos entirely on your device to pin your photos to the places you explored. Your photos are never uploaded.

Bluetooth and connected devices (optional)

  • With your permission, Wayly uses Bluetooth to connect a watch or bike computer so you can sync activities and routes.

Connected third-party services (optional)

  • If you choose to connect a service such as Strava, Garmin, Suunto or Coros, Wayly exchanges the activity and route data needed for that integration, using the access you grant. You can disconnect at any time.

Purchase data

  • Your subscription status. Payments are processed by Apple (App Store) or Google (Google Play). We never see or store your card details.

Advertising measurement on this website

  • We advertise wayly on Instagram and Threads. To learn whether those ads work, the public pages of wayly.cc use the Meta Pixel (Meta Platforms Ireland Ltd.): it reports a page visit and a tap on an App Store or Google Play button, together with your browser details and Meta's cookies. Meta may link this to your Meta account under its own privacy policy.
  • The pixel does not run in the EU, EEA, United Kingdom or Switzerland, and never on signed-in pages or share links. The wayly app itself contains no advertising SDKs.

We do not sell your personal data.

3. How we use your data

  • To provide the core features: reveal the map, track activities, plan and sync routes, and maintain your profile, level and collections.
  • To sync your data across your devices and back it up to your account.
  • To manage subscriptions and access to Pro features.
  • To respond to your support requests.
  • To keep the service secure and prevent abuse.

4. Legal bases (GDPR)

Where the EU/UK GDPR applies, we rely on:

  • Performance of a contract — to provide the app and features you sign up for.
  • Consent — for optional permissions such as location, background location, Apple Health, photos, Bluetooth and third-party connections. You may withdraw consent at any time by revoking the permission or disconnecting the service.
  • Legitimate interests — to keep the service secure and working correctly, in a way that does not override your rights.

5. Who we share data with (processors)

We use a small number of service providers who process data on our behalf, under appropriate agreements:

  • Supabase — authentication, database and storage hosting for your account and app data.
  • Mapbox — map rendering, route snapping and map preview images. To serve map tiles, Mapbox may receive technical data such as your device's IP address and the map area being displayed. To draw a preview image of an activity or route, or to snap a track to paths, it receives that track's coordinates.
  • Cloudflare — hosting of the wayly.cc website, which shows your activities to you when you are signed in and the ones you choose to share.
  • Google Firebase — crash reports and anonymous app usage statistics (Crashlytics and Analytics). These contain device and app information, not your activities, tracks or health data.
  • Apple — App Store billing and, if enabled, HealthKit (health data is handled on-device under Apple's frameworks).
  • Google — Google Play billing, and sign-in if you use it.
  • Third-party services you connect — such as Strava, Garmin, Suunto or Coros, only when you choose to connect them.

We may also disclose data if required by law, or to protect our rights, users or the public.

6. Garmin data

If you connect your Garmin account, Wayly receives data from Garmin Connect only with the access you grant on Garmin's consent screen.

What we receive and how we use it

  • From the Garmin Activity API: the activities you record on your Garmin device, including sport type, start time, duration, distance, elevation, heart rate, calories and the GPS track.
  • We use this data only to provide Wayly to you: to import your activities into your profile, to reveal your exploration map from the GPS track, to update your progress (explored places, peaks, trails, streaks and challenges) and to show you the activity and its statistics. Activities imported from Garmin are private by default; they are visible to others only if you choose to share one.
  • With the Garmin Courses API, Wayly sends routes you plan in the app to your Garmin device, only when you ask it to.

Who processes Garmin data

  • Supabase (database, storage and server functions, hosted on Amazon Web Services in the EU, Ireland) receives Garmin's notifications and stores your imported activities.
  • Mapbox receives the coordinates of an activity's track when it draws a preview image of that activity.
  • Cloudflare hosts wayly.cc, which shows your activities to you when you are signed in and the ones you choose to share.

No other third party receives Garmin data. Wayly does not sell Garmin data, and does not share it with advertisers, data brokers or anyone else for their own use. It is not used for advertising or profiling.

AI transparency statement

Wayly does not use artificial intelligence or machine-learning systems to process, analyse or store Garmin data. Garmin data and anything derived from it are never used to train, evaluate or improve AI models. If this ever changes, we will update this policy first and ask for your explicit consent, with an easy way to withdraw it, before any such processing.

Access, correction, export and deletion

  • Access and correct: your imported activities are in your Wayly activity list, where you can edit an activity's details (Edit activity).
  • Export: you can export a single activity as a GPX file (Share as GPX) or all of your activities at once (Settings → Export all as GPX), or ask us for a copy of all your data at wayly.contact@gmail.com.
  • Withdraw consent: disconnect Garmin in Wayly (Settings → Connected services) or remove Wayly from your Garmin Connect account. Either way Garmin stops sending us data.
  • Delete: when you disconnect Garmin, we delete the data we received from Garmin, including activities imported from it. You can also delete a single activity in the app (Delete activity), or delete your whole account (see "Deleting your data").

7. International transfers

Our providers may process data outside your country, including outside the EEA. Where required, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) offered by these providers.

8. Data retention

We keep your account and app data for as long as your account exists. When you delete your account, we delete or anonymise your personal data, except where we must retain limited records to comply with legal obligations.

9. Your rights

Depending on where you live (including under the GDPR), you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Erase your data ("right to be forgotten").
  • Restrict or object to certain processing.
  • Data portability — receive your data in a portable format.
  • Withdraw consent at any time, without affecting prior processing.
  • Complain to your local data protection authority.

To exercise these rights, contact wayly.contact@gmail.com.

10. Deleting your data

You can delete your account and associated data from within the app (Profile → Settings), or by emailing wayly.contact@gmail.com. Deletion removes your account, exploration data, activities and profile. Some data may persist for a short period in encrypted backups before being overwritten.

11. Security

We use reputable infrastructure providers and industry-standard measures (encryption in transit, access controls) to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and to notify you where legally required in the event of a breach.

12. Changes to this policy

We may update this policy as the app evolves. We will change the version and effective date above, and where changes are significant we will notify you in the app. Continued use after an update means you accept the revised policy.

13. Contact

Wayly — developed by Andrii (Ukraine)
Email: wayly.contact@gmail.com