Where2
Privacy Policy
Last updated 31 October 2026
The short version
- We collect what Where2 needs to plan your outings: your name, how you sign in, your area, your plans and what you tell Buddy.
- We never sell your personal information, and we don’t use it for advertising by other companies.
- Your storybook photos and journal are stored privately in your account. We remove location details from photos before they’re saved.
- Venues and partners only see totals for groups of 10 or more people, never who you are.
- You can change your details, turn off anonymous stats, or delete your account (and everything in it) from Me in the app.
1. Who we are
Where2 is an outing-planning app made in Australia. In this policy, “Where2”, “we” and “us” means [LEGAL ENTITY NAME], ABN [ABN]. We follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Contact us about privacy at privacy@wheretooapp.com.
2. What we collect
When you sign up and use your account
- How you sign in: your email address or mobile number, or an identifier from Apple, Google or Facebook if you sign in with them. We don’t use passwords.
- Your profile: your first name and, if you add one, a profile photo.
- Age and consent: that you confirmed you’re 18 or older, which version of our terms you accepted, and whether you want marketing emails.
When you plan with Buddy
- Your area: the suburb or town you choose. If you tap “Use my location”, we round it to about 1 km before saving it. We don’t track your location in the background.
- Your answers: the occasion, day, time, budget, vibe, suburb and group size for each plan, and your general preferences (such as what you plan most).
- Dietary needs: used only to build the plans you asked for, then discarded. We don’t store them.
- Your plans: the plans you save, changes you make, and the places you were shown, chose and visited, so Buddy can suggest new places rather than repeat the same ones.
- Guests: the first names of people you invite, and their replies. Guests don’t need an account.
After an outing
- Ratings and reviews you leave for places you went to.
- Storybooks: photos, notes and a journal you choose to add.
Technical information
- Basic information needed to run the service securely, such as the app version, the time of requests and error logs. Our sign-in pages use a bot check (Cloudflare Turnstile) to stop automated abuse.
We don’t collect payment details: the app doesn’t take payments.
3. How we use it
- To plan outings for you: matching places to your answers, opening hours, travel time and budget.
- To share fairly between venues, so plans don’t keep sending everyone to the same few places.
- To show the weather and suggest plans that suit it.
- To send you what you asked for: sign-in codes, plan updates, reminders and, only if you opted in, Buddy’s ideas and Where2 news.
- To keep Where2 safe and working: preventing abuse, fixing problems and improving the app.
- To work out de-identified statistics (see section 5).
4. Photos, storybooks and reviews
- Storybook photos and profile photos are stored in private storage linked to your account. Before a photo is saved, the app re-encodes it, which removes location and camera details.
- We don’t show your storybooks or photos to other users, venues or partners. If we add a way for you to share a storybook, it will only be shared when you choose to.
- Ratings help us work out how well each place is liked overall. Written reviews are not published in the app. If that changes, we’ll tell you before it happens.
- You can delete any photo, note or review at any time.
5. What venues and partners see
When you finish a plan, we count things like the places visited, the occasion, the day and the group size, without your name, contact details or exact times. Venues and partners only ever see totals for groups of 10 or more, and shared reports are rounded so no one can be picked out. You can turn this off under Me → Privacy → Share anonymous outing stats, which also unlinks your past outings.
6. Who we share it with
We never sell your personal information. We share it only with service providers who help us run Where2, and only what they need:
| Provider | What for | What they receive |
|---|---|---|
| Supabase | Database, sign-in and private photo storage, hosted in Sydney | The information described in this policy |
| Cloudflare | Our website and the bot check on sign-in | Technical information such as your IP address |
| Apple, Google, Meta | Signing in, only if you choose them | That you are signing in to Where2 |
| Email and SMS providers | Sending sign-in codes and messages | Your email address or mobile number |
| Open-Meteo | Weather forecasts | Your area, rounded to about 10 km, with nothing that identifies you |
When you tap Directions, your maps app opens with the venue’s address; we don’t send your location. We may also share information if the law requires it, or to protect someone’s safety.
7. Information stored overseas
Our main database and photo storage are in Australia. Some providers above, such as Cloudflare, Apple, Google, Meta, our email and SMS providers and Open-Meteo, may process information in other countries, including the United States and countries in the European Union. We choose providers that protect information to a standard consistent with the Australian Privacy Principles.
8. Keeping it safe
- Information is encrypted when it travels between the app and our servers.
- Database rules mean each person can only reach their own account, plans and photos.
- Sign-in and invite codes are stored only in scrambled (hashed) form.
- Staff access to our admin tools needs a second sign-in step, is limited to what each person needs, and is logged.
No system is perfectly secure. If a data breach is likely to cause you serious harm, we’ll tell you and the Office of the Australian Information Commissioner, as the law requires.
9. How long we keep it
| Information | How long |
|---|---|
| Your account, plans, storybooks and reviews | Until you delete them or your account |
| Staying signed in | Ends after 90 days without using the app |
| Plan options you didn’t choose | About 24 hours |
| Guest invite links | Stop working 7 days after the plan; removed 30 days after it |
| De-identified outing statistics | Up to 5 years |
| Admin activity logs | 2 years |
10. Your choices and rights
- See and correct your details in Me, or ask us for a copy of the information we hold about you.
- Delete your account in Me → Delete my account. This deletes your profile, plans, invites, reviews, storybooks and photos. De-identified statistics that can’t be linked back to you may remain.
- Marketing emails: off unless you turn them on, and you can turn them off any time in Me or from any email.
- Anonymous stats: turn off in Me → Privacy.
- Location: you can type your suburb instead, and turn off location access in your phone’s settings.
For anything else, email privacy@wheretooapp.com. We’ll reply within 30 days.
11. Age
Where2 is for people aged 18 and over. If we learn that someone under 18 has an account, we delete it.
12. Questions and complaints
If you’re worried about how we’ve handled your information, email privacy@wheretooapp.com and we’ll look into it and reply within 30 days. If you’re not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
13. Changes to this policy
If we make important changes, we’ll tell you in the app and ask you to agree again before you keep using Where2. The date at the top shows when this policy last changed.