Privacy Policy

Information we collect

• Your name — required to join a trip.
• Email address — optional, only if you create an account; used solely to sign you in.
• PayID — optional. Often an email address, phone number, or ABN, so others can pay you back directly.
• Home airport — optional, used to build flight search links.
• Trip activity — date availability, destination and accommodation proposals and votes, and notes and links you add.
• Hangout activity — for a single-day hangout: the dates you propose, whether you can make each one, any short message you add when you can't, and venues you suggest or back.
• Your route — for a multi-stop adventure: the places you're going and the order you're going in, the dates or rough number of nights at each, where you're staying there (including an optional booking reference and who booked it), how you're travelling between them and any reference for that, and any note you add.
• Trip asides — if you tell the group you're doing your own thing before, after, or partway through the trip: the dates, who's in it with you, and any note you add.
• Comments — anything you write in the discussion under a decision, plus when you last opened each discussion (that's what marks it read, and only you see it).
• Flight details — flight numbers you look up or enter, and the resulting times and routes.
• Expenses — descriptions, amounts, the currency each amount is in, which stop on your route it was spent at if you say, and who paid or is owed.
• Accommodation booking status — optional; once someone books the group's decided accommodation, who booked it, an optional booking reference, and the check-in and check-out dates.
• Wallet items — booking references, links, reference numbers, and any files you attach (PDF, JPEG, PNG or WebP, up to 10 MB each — travel insurance, check-in screenshots, tickets), added for the group or privately for yourself.
• Session data — cookies that keep you signed in, plus one short-lived cookie used only while an anonymous session is being turned into an account. No advertising cookies, and nothing that follows you to other websites.
• Your IP address — recorded briefly, and only to enforce rate limits when a trip is created or joined, or when destination search or flight lookup is used. It isn't linked to your name, your account, or any trip, and these records are cleared periodically — typically within a day.

Who can see your information

Other members of the same trip can see your name, your PayID if you've added one, your date marks, your votes, your comments, any expenses you log, any asides you declare, who's booked the group's accommodation (and the reference, if one was added), and any Wallet items (including attached files) added to the group section. That visibility is the point of the app — it's how the group coordinates. Your own private Wallet items — and their files — are the exception: visible only to you, never to other trip members. People outside your trip never see any of it, and none of your data is shared between trips.

Two things worth knowing up front. A trip is joined through a shareable invite link, and that link doesn't expire — anyone who ends up holding it can join and see the trip, so treat it like a key rather than something to post publicly. And if you leave a trip, your name and your votes go with you, but things you wrote for the group — comments, proposals, venue suggestions — stay where they are, shown as "Someone" rather than your name. The trip's activity feed also keeps a record of what happened, including the name you were using at the time.

Where your information is held

Your trip data, sign-in records and Wallet files are stored in Australia. Some information is also handled overseas: the company that hosts Wralli, and the providers behind destination search and flight lookups, operate from outside Australia — including in the United States. That's the case wherever our own servers happen to be running.

Third parties we use to run Wralli

• Hosting — serves the app. Every request passes through our host, including your IP address and browser details, and they work out which country you're in from it.
• Database, sign-in and file storage — holds everything above, and sends the sign-in emails. Live updates connect from your browser straight to this provider, so they see your IP address and browser too.
• Destination search — powers search-as-you-type. We call this provider from our server, not your browser: we send the text you type, plus the country your request came from, so that searching "Perth" from Australia offers the right one. Your IP address is never sent.
• Flight lookups — finds flight details when you search by flight number. Only the flight number and date are sent; nothing identifying you.

Links to other sites

Links members paste — an accommodation listing, a venue — are stored and shown as plain links. We don't pull images or any other content from those sites into Wralli, so nothing is loaded from them until you actually click a link.

We also build search links to third-party travel sites for flights and accommodation. Nothing is sent in the background — but if you click one, the link itself carries your trip's details (destination, dates, and for flights your home airport) to that site, because that's what makes the search work. Which flight site we send you to depends on the country your connection appears to come from, worked out as described above — nothing is sent to that site to decide it. The flight search link is a partner link, so the commission and cookie described in the next paragraph apply to it as well as to the Marketplace.

The Marketplace tab lists links to partner travel services. Nothing loads from them until you click. Most go to the partner's own home page and carry nothing about your trip at all; one is a search link that carries your trip's destination so the results are relevant. Which partners are listed depends on the country your connection appears to come from — worked out as described above, so an Australian insurer isn't offered to someone in London. Nothing is sent to any partner to do that; it only decides what we show you. We may earn a commission on these, and on the flight search link above — see Terms — and where we do, the partner sets its own cookie on their site to record that you arrived from Wralli. That cookie belongs to them, not to us: we never see who clicked, only whether a purchase happened at all.

How sign-in works

By default, Wralli doesn't use passwords. Joining a trip creates an anonymous session tied to your browser via a cookie, which is what lets you leave and come back without redoing anything. That also means access is tied to that one browser — a different device, a cleared cache, or a closed private-browsing window starts a new, separate identity. You can optionally add a free account at any time, either by an emailed link or by continuing with Google — never a password — and your existing trips carry over to it automatically. One limitation: if you already have a different account and sign into it from a browser that separately has anonymous trip access, those anonymous trips don't merge in — they stay reachable only from that original anonymous session.

If you use Google, Google passes on your email address, name, profile picture and Google account ID to the service that handles our sign-ins. We use the email address to identify you; we don't display or store your Google profile picture, and the name your group sees is always the one you typed yourself.

How long we keep information

Trip content — dates, votes, comments, expenses, flights and Wallet items — is kept for as long as the trip exists, and trips aren't currently deleted automatically. The short-lived exceptions are the rate-limiting records described above, cleared periodically and typically within a day, and the one-time token used when an anonymous session becomes an account, which is discarded within the hour.

There's no self-service "delete my account" button yet. You can remove individual things yourself — a Wallet item, an expense, a comment, a flight, an aside — and leaving a trip removes your membership along with your votes and date marks, though as noted above it leaves what you wrote for the group in place, de-attributed.

The organiser of a trip can also delete the whole trip. That is different from leaving, and it is worth being clear about: it removes the trip for every member, not just the organiser — all dates, votes, comments, expenses, settlements, flights, asides, your route and Wallet items, including any files members uploaded. It cannot be undone, and we can't restore it afterwards.

For anything beyond that — deleting your account itself — email us at the address below and we'll do it by hand.

Your choices

PayID and home airport are both optional — you can use Wralli without adding either. You can remove your PayID at any time from the Ledger page. An account is optional too: a trip can be joined and used without ever creating one.

What we don't do

We don't sell your information, and we don't share it with advertisers. We set no advertising cookies, and nothing we run follows you around other websites. The one thing that comes close is described above: if you click a Marketplace partner link, that partner may set a cookie on their own site recording that the visit came from Wralli. It is theirs, not ours, it only exists once you click, and it never tells us who you are. We may use privacy-respecting analytics and error reporting to see how the app is being used and when something breaks — which pages get visited, which features get used, what errored — but never to build a profile of you or to work out who you are. Your email address is used only to sign you in — we never email you about trip activity, and there is no mailing list.

Your rights and complaints

You can ask us what personal information we hold about you, ask for a copy of it, or ask us to correct it if it's wrong — email the address below and we'll come back to you. If you're unhappy with how we've handled your information, tell us first so we have a chance to put it right. If that doesn't resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Children

Wralli isn't directed at children, and creating a trip or a Wralli account requires confirming you're 18 or older. A trip's organiser (who must be an adult) may invite guests of any age for trip coordination — if you believe a child has provided us with personal information outside that context, contact us and we'll remove it.

Changes to this policy

If this policy changes, we'll update the date at the top of this page.

Contact

Questions, access requests or deletion requests: hello@wralli.app