Privacy Policy

Who is responsible

Wanderr operates this service and is responsible for the personal information described in this policy. This policy applies from September 21, 2026. For privacy questions or requests, email support@mkqr.io.

Information you provide

Wanderr stores account information such as your name, email address, and authentication records; travel content such as trips, dates, destinations, flights, itineraries, notes, journals, packing lists, saved places, and visited countries; and planning settings such as work schedules and holidays.

If you enter them, the app also stores nationality, residency, visa details, and travel preferences. Preference records include suggestions, confirmation status, corrections, timestamps, source attribution, and revision history. Avoid putting unnecessary sensitive information into free-text fields.

Operational information

The service uses session cookies and authentication records to keep you signed in and protect your account. It stores integration token hashes, grants, and audit records of API and assistant activity. Server and hosting logs may include technical request information used for security and troubleshooting.

Your browser may store theme settings and cache pages, images, maps, and application assets for performance and offline use. On a shared device, sign out and clear site data when appropriate.

How information is used

Information is processed to run your account, organize your travel, calculate planning suggestions, maintain confirmed preferences, provide sharing and integrations you enable, and investigate failures or abuse.

When configured AI features are used, travel context and search preferences are sent through the configured AI service to generate suggestions. The app stores prompts, results, and job information. This is separate from assistants you connect using integration tokens.

Service providers

Hosting and database services process stored information. Configured identity providers, such as Homebase, process authentication information. AI providers process the context supplied to enabled AI features. The providers used depend on the features and connections enabled. Contact support@mkqr.io for information about the providers handling your data and their processing locations.

Destination image search sends destination names to Pexels. Browser requests for Google Fonts, map resources, or other external assets expose connection information such as an IP address to those providers. Their own privacy policies apply to their services. This app’s data flows are not limited to its own server.

Assistants and shared links

Scoped REST and MCP connections can read selected trips and, when explicitly granted, confirmed global preferences and preferences for those trips. Suggestions and archived preferences are excluded from those preference reads. Legacy full-account tokens and OAuth connections can have broader access.

Connected services receive the data you authorize and process it under their own policies. Deleting a token prevents subsequent authorized requests; it does not recall previous responses or necessarily stop an in-progress request.

If you enable a public trip link, anyone with the link can access the shared view. Disabling sharing stops access through that link, but others may retain copies.

Retention and deletion

Content remains stored while it is available in your account. Some deletion actions mark records as deleted rather than immediately erasing them. Archiving a preference removes it from assistant preference responses but retains the owner’s revision history.

We retain information to provide your account and travel history, investigate security incidents or failures, and meet applicable legal obligations. Retention depends on those purposes and the type of record; the app does not enforce a single automatic deletion deadline for all account data, audit records, or AI jobs. To request account deletion, email support@mkqr.io. We will assess the request under applicable law and explain any information that must be retained. Removing content from the app may leave backup copies, and connected services may keep their own copies.

Your choices and rights

You can edit supported account and travel fields, review or archive preferences, disable trip sharing, and revoke integrations in Settings. To change a scoped token’s access, revoke it and create a replacement with the intended permissions.

Depending on applicable law, you may have rights to access, correct, erase, or obtain a copy of your information, restrict or object to processing, withdraw consent where processing relies on it, or complain to a data-protection authority. Send these requests to support@mkqr.io.

Security and updates

Wanderr uses authentication, access checks, and hashed API tokens to help protect information. No service can guarantee absolute security. Protect your passwords, tokens, and sharing links.

We will update this notice when the service’s data practices change and bring material changes to users’ attention. Operator: Wanderr. Privacy contact: support@mkqr.io.