Privacy Policy

This Privacy Policy (the "Policy") has been drafted to inform you about the practices and conditions under which Wander Hearts (hereinafter referred to as "Wander Hearts," "we," "us," or "our") collects, uses, discloses, and retains your personal information (hereinafter referred to as "Data"). 

This Policy explains the types of Data we may collect and/or process when you use our services, access our website, and our mobile application (collectively, the "Platform"). The use of the Platform is subject to this Policy. 

If any part of this Policy is found to be invalid or unenforceable under applicable law, that part will be treated as removed, and the rest of the Policy will continue to apply in full. 

This Policy is drafted in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL) for marketing communications, and applicable provincial privacy legislation. If you are a resident of Quebec, additional obligations under Quebec's Act respecting the protection of personal information in the private sector (“Law 25”) also apply, as described in Section 12. 

By creating an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy.

 

1. Personal Information We Collect 

When you create an account, build your profile, or use the Platform, we collect the following categories of personal information: 

• Identification data: name, date of birth/age, gender, ethnicity, sexual orientation or preferences, profile photo(s), and bio. Ethnicity and sexual orientation are used to support match filtering when you choose to set these preferences and are treated as sensitive personal information as described below. 

• Matching & preference data: interests, travel preferences, prompt/bio answers, likes, passes, and matches. 

• Location data: city/region, and, if you enable it, precise device location, to support matching and trip logistics. 

• Contact data: email address and phone number. 

• Emergency contact data: the name and phone number of an emergency contact, which we collect before you attend a trip or experience and use only for safety purposes during that trip. 

• Communication data: information you provide when contacting our support team, including your inquiries, requests, and correspondence with us. 

• Trip & booking data: experiences you express interest in, book, or attend, and related preferences (e.g. dietary or accessibility needs you choose to share). 

• Photos and videos: photos and videos taken by our hosts during trips and experiences, which we may use for marketing on our website and social media (Instagram, TikTok, Facebook). You may opt out of appearing in marketing content by telling your host or contacting us at privacy@wanderhearts.ca. 

• Payment data: processed securely through Stripe, our third-party payment processor (see Section 4). We do not store your full card details ourselves. 

• Verification data: to help members build trust and reduce fake accounts, we offer an optional on-device liveness check — a live selfie or short video used to confirm you match your profile photos, which adds a Verified badge to your profile if completed. We do not ask for or collect a photo of any government-issued ID. 

• Photo screening data: when you upload a photo to your profile, we generate an automated assessment of whether that photo violates our Community Guidelines (for example, nudity or graphic violence), as described below. 

• Ethnicity and sexual orientation are treated as sensitive personal information. We only use them to power match filtering when you choose to set these preferences in your profile — they are not shared with advertising partners or used for any purpose beyond matching.  

​

Face Verification 

Face verification data is sensitive personal information. We only collect it with your consent, at the time you complete verification, and we use it solely to confirm your identity and reduce spam and fake accounts. 

As part of verification, we use Google ML Kit's on-device liveness detection to confirm that your selfie was captured from a live person at the time of verification, rather than a photo, video, or other spoof. This check runs entirely on your device — no images or video are sent to Google or any third party, and there are no per-verification API calls or charges associated with this step. Google ML Kit downloads its detection model files from Google's servers the first time this feature is used on your device, and reports usage and diagnostic data to Google by default as part of that process; your selfie or video is never included in this data. 

Once verification is complete, we keep only a record of your verification status (verified/not verified). We do not retain the underlying selfie or video, as described in Section 3. 

​

Photo Screening 

When you upload a photo to your profile, we use automated image analysis, provided by Amazon Web Services' Rekognition service, to screen for content that violates our Community Guidelines, including nudity, sexually explicit imagery, and graphic violence. Photos identified as violating these guidelines are automatically rejected and will not be published to your profile. 

Because Amazon Rekognition's content-moderation feature is not supported in AWS's Central Canada region, this specific screening analysis takes place on Rekognition servers located in the United States. As a result, photos submitted for screening may be subject to United States law, including potential access requests by U.S. authorities. All other photo storage and processing remains in Central Canada 

 

Information collected automatically 

• Device and browsing data: IP address, device type, operating system, browser type, and app version. 

• Usage data: pages viewed, features used, session duration, and crash/error logs. 

• Cookies and similar technologies (see Section 7). 

​

2. How We Collect Your Information 

We collect personal information: 

• Directly from you — when you register, complete your profile, book an experience, or contact support. 

• Automatically — through cookies, SDKs, and analytics tools when you use the Platform. 

• From third parties — for example, if you sign up or log in using a third-party account (such as Google or Apple Sign-In), or through Stripe and our trip/experience partners. 

​

3. Why We Collect and Use Your Information, and How Long We Keep It 

Under PIPEDA, Wander Hearts generally collects, uses, and discloses personal information with your knowledge and consent, except where otherwise permitted or required by law. We collect and use personal information only for purposes that a reasonable person would consider appropriate in the circumstances. 

​

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, provide and improve our Services, maintain safety and security, resolve disputes, enforce our agreements, and comply with applicable legal, accounting, tax, and regulatory requirements. When personal information is no longer required for these purposes, we securely delete, erase, or anonymize it as appropriate. 

​

Creating and Managing Your Account 

We collect and use information necessary to create, maintain, and manage your Wander Hearts account and profile. This information is used to provide the Services you request, including allowing you to create a profile, discover other members, and use the features of the App. 

 

Your account and profile information is retained while your account is active. When you delete your account, Wander Hearts deletes the personal information associated with your account from its active systems and does not retain your account or profile information. 

 

Matching and Connecting Members 

We use information from your profile and preferences to provide matching and discovery features and to facilitate connections between members. 

This information is retained while your account is active. When you delete your account, Wander Hearts does not retain your profile or matching information in its active systems. 

​

Organizing and Confirming Trips and Experiences 

We use information necessary to organise, coordinate, confirm, and administer trips and experiences, including information required for bookings, participant coordination, payments, cancellations, refunds, and related communications. 

Trip and experience information is retained only for as long as reasonably necessary to provide the applicable Service and to meet applicable legal, accounting, tax, dispute-resolution, or record-keeping requirements. Where information forms part of a financial or tax record that Wander Hearts is legally required to retain, it may be retained for the applicable statutory period even after other account information has been deleted. For records subject to applicable CRA business record-keeping requirements, Wander Hearts generally retains the applicable records for six years from the end of the relevant tax year. 

​

Payment Processing and Invoicing 

We use information necessary to process payments, refunds, deposits, purchases, and other transactions and to maintain related invoices and transaction records. 

Payment card details are processed by our payment service providers, such as Stripe. Wander Hearts does not receive or store your full payment card details. 

Financial and tax records are retained for as long as required to comply with applicable accounting, tax, and legal obligations. For records subject to CRA business record-keeping requirements, Wander Hearts generally retains the applicable records for six years from the end of the relevant tax year. 

​

Facial Liveness Check 

Wander Hearts uses a facial liveness check during the account verification process to help determine whether a real person is present and to reduce fraudulent or inauthentic accounts. 

This process is not used to verify or confirm your identity against a government-issued ID, external database, or biometric database. 

The liveness check runs entirely on your device using Google ML Kit. Your selfie or video is not transmitted to Wander Hearts or Google for this liveness check. Wander Hearts does not receive or store the selfie or video used for the liveness check and does not create or maintain a biometric database from this process. 

Because the liveness check is used only to determine whether a live person is present and is not used by Wander Hearts to identify or authenticate you against another identity or biometric record, Wander Hearts does not use this feature for identity verification. 

 

Automated Photo Screening 

When you upload a photo to your profile, Wander Hearts uses automated image analysis provided by Amazon Web Services' Rekognition service to screen the photo for content that violates our Community Guidelines, including nudity, sexually explicit imagery, and graphic violence. 

Photos identified by the automated system as violating our Community Guidelines are automatically rejected and will not be published to your profile. Wander Hearts does not currently use human review as part of this photo-moderation process. 

Because Amazon Rekognition's content-moderation feature is not supported in AWS's Central Canada region, the specific moderation analysis is performed by Amazon Rekognition in the United States. As a result, photos submitted for this screening may be processed in the United States and may be subject to applicable United States laws, including potential access requests by U.S. authorities. 

The photo is stored in Wander Hearts' Canadian storage while being processed. If Amazon Rekognition rejects or flags the photo, the stored image file is deleted from Wander Hearts' Canadian S3 storage within seconds. There is no ongoing retention period for the rejected image. Wander Hearts retains only a record that the photo was rejected and does not retain the rejected photo itself. 

 

Trust, Safety, and Fraud Prevention 

We may collect and use information relating to reports, suspected misuse, fraudulent activity, safety incidents, and investigations to protect members, prevent abuse, enforce our Community Guidelines and Terms of Service, and maintain the safety and integrity of the Platform. 

We retain this information only for as long as reasonably necessary for these purposes or as required or permitted by applicable law. 

 

Customer Support 

We use information provided through customer-support requests to respond to questions, complaints, technical issues, and other requests. 

Customer-support information is retained only for as long as reasonably necessary to respond to and manage the request, maintain appropriate business records, resolve disputes, and comply with applicable legal requirements. 

 

Marketing Communications 

Where required, Wander Hearts obtains consent before sending commercial electronic messages, including marketing emails and promotional communications, in accordance with Canada's Anti-Spam Legislation (CASL). 

You may withdraw your consent to marketing communications at any time by using the unsubscribe mechanism included in our messages or by contacting us. 

Wander Hearts retains records relating to marketing consent and withdrawal of consent for as long as reasonably necessary to demonstrate compliance with applicable legal requirements. 

 

Analytics and Service Improvement 

We may collect and use technical, usage, and analytics information to understand how the Website and App are used, diagnose technical issues, improve performance, develop features, measure the effectiveness of our Services and advertising, and improve the user experience. 

We retain analytics information only for as long as reasonably necessary for these purposes and in accordance with the settings and retention practices of the applicable analytics providers. 

 

Cookies and Tracking Technologies 

Wander Hearts may use cookies, pixels, SDKs, and similar technologies for purposes such as essential functionality, analytics, advertising measurement, audience building, retargeting, and improving the Website and App. 

Where consent is required, we will obtain consent in accordance with applicable law. You may manage certain cookie and tracking preferences through applicable consent tools, your browser settings, or your device settings. 

The retention period for cookies and similar technologies varies depending on their purpose and the provider that places or processes them. 

 

Deletion of Your Information 

If you delete your Wander Hearts account, we will delete the personal information associated with your account from our active systems, subject to information that we are required or permitted to retain by law, including certain financial, tax, accounting, fraud-prevention, safety, dispute-resolution, or legal records. 

Where information is retained for one of these purposes, we will limit its use to the purpose for which it is retained and will securely delete or anonymize it when it is no longer required. 

 

4. Who We Share Your Information With 

We disclose personal information only where necessary, with: 

• Other users — your profile information (as you choose to display it) is visible to other members for matching purposes. 

• Stripe (payment processing) — we use Stripe to process payments for bookings and trips. Stripe receives the billing information necessary to complete your transaction (such as name, billing address, and card details). Stripe acts as an independent organization responsible for that data and processes it under its own privacy policy. 

• Google ML Kit — the on-device liveness check used during face verification (see Section 1). Your selfie/video never leaves your device; Google receives only routine usage and diagnostic data when the detection model is downloaded, not your image. 

• Cloud hosting and automated content moderation — Amazon Web Services (AWS), which hosts parts of the Platform and provides automated photo screening for Community Guidelines violations (see Section 1). This processing may take place on servers located in the United States. 

• Firebase Cloud Messaging (Google) — used to deliver push notifications for matches and trip updates. This service receives your device's push token and the notification text, which may include another member's first name. 

• Unsplash / placeholder image services — some destination and discovery images in the app are loaded directly from these services, which receive your device's IP address and browser type when the image loads. 

• Meta Pixel and Conversions API: Wander Hearts may use Meta Pixel and Meta Conversions API to measure the effectiveness of our advertising, understand interactions with our Website and App, improve our advertising campaigns, and support advertising and audience measurement. Depending on how these tools are configured, information such as website or app events, device and browser information, and other identifiers or information provided through the applicable integration may be shared with Meta. Where required by applicable law, we will obtain your consent before using these technologies for advertising or tracking purposes. On iOS, certain tracking activities may require your permission through Apple's App Tracking Transparency framework. 

• Other service providers — companies that help us run the Platform, such as cloud hosting, email/SMS delivery, analytics, and customer support tools. 

• Trip and experience partners — where necessary to organise or confirm a booking you have made. 

• Professional advisers and authorities — where required to comply with the law, enforce our terms, or protect the rights, safety, and property of Wander Hearts, our members, or the public. 

• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to appropriate confidentiality protections. 

We do not sell your personal information to third parties. 

We may share certain information with advertising and analytics partners, such as Meta, for purposes including measuring, attributing, and improving the effectiveness of our advertising campaigns. Such sharing is conducted as described in this Privacy Policy and may involve information such as identifiers, device information, and website or app activity, depending on your settings and applicable consent requirements. 

 

5. Data Protection & Security 

We use appropriate technical and organisational safeguards to protect your personal information against loss, theft, and unauthorized access, use, disclosure, or modification, including encryption in transit, access controls, and secure hosting infrastructure. However, no method of transmission or storage is completely secure, and you are responsible for keeping your account credentials confidential. 

 

6. Marketing Communications & CASL 

We only send you commercial electronic messages (such as promotional emails) where we have your express or implied consent, in compliance with Canada's Anti-Spam Legislation (CASL). Every marketing message we send will identify us and include a working unsubscribe mechanism. You can withdraw consent and unsubscribe at any time by using the link in any marketing email or by contacting us directly.  

 

7. Cookies & Tracking Technologies 

We use cookies and similar technologies on the Wander Hearts website to help the website function properly, understand how visitors use our website, measure the effectiveness of our marketing, and improve your experience.

Cookies are small text files placed on your device when you visit a website. We may also use similar technologies, such as pixels, tags, and analytics technologies.

​

Types of Cookies We Use:

Essential Cookies
These cookies are necessary for the website to function properly and cannot be disabled through our cookie settings. They may support functions such as security, website functionality, and form submissions.

​

Analytics Cookies
We may use analytics technologies to understand how visitors interact with our website, such as which pages are visited and how visitors navigate the site. This information helps us improve the website and understand website performance.

​

Advertising and Marketing Cookies
We may use advertising technologies, including Meta Pixel and similar technologies, to measure the effectiveness of our advertising campaigns, understand how visitors interact with our advertisements, and help us deliver or measure relevant advertising.

 

Your Cookie Choices

Where required by applicable law, we will ask for your consent before placing non-essential cookies or similar tracking technologies on your device. You can accept or decline non-essential cookies through our cookie consent mechanism.

You can also manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

 

Meta Pixel and Conversions API

We may use Meta Pixel and Meta Conversions API to measure advertising performance and understand how users interact with our website following an advertisement. Depending on how these technologies are configured, information may be shared with Meta for advertising measurement and related purposes.

You can manage your cookie preferences through our cookie consent mechanism. For more information about how Meta processes information, please refer to Meta's privacy documentation.

 

8. Your Privacy Rights 

You have the right to: 

• See the personal information we hold about you. 

• Ask us to correct anything that's inaccurate or incomplete. 

• Withdraw your consent for us to collect, use, or share your information (this may limit what we can offer you). 

• Ask us questions about how we handle your information, or raise a concern if you think we're not following this Policy. 

• Ask us to delete your account and your personal information, though we may need to keep some records where the law requires it (for example, tax records). 

To use any of these rights, contact our Privacy Officer at privacy@wanderhearts.ca. We'll respond within 30 days. We may ask you to verify your identity first, so we know we're giving your information to the right person. 

If you're not happy with how we've responded, you can bring your concern to the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca, or your provincial privacy regulator if one applies to you. 

 

9. Children's Privacy 

The Platform is intended solely for adults. Users must be at least 18 years old to create an account. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor has created an account or provided us with personal information, we will delete that information and terminate the account promptly. 

Wander Hearts has zero tolerance for any content, behaviour, or activity involving or facilitating the exploitation of minors. Any such activity will result in immediate account removal and, where appropriate, reporting to law enforcement or relevant child protection authorities. 

Concerns can be reported via the in-app "Report" feature or by emailing privacy@wanderhearts.ca. All reports are reviewed promptly by our Trust & Safety team, and we cooperate with law enforcement and child protection authorities where required. 

 

10. Member Safety on Trips & Experiences 

Because our Service involves meeting other members in person and travelling together, we encourage you to review our in-app safety guidance before attending any trip or experience. We take reasonable steps to support member safety, but you remain responsible for exercising personal judgement when meeting and travelling with other members. 

Specifically, before each trip we: 

• collect an emergency contact for each attendee, as described in Section 1; 

• provide guidance on meeting your group in shared, hosted settings before spending time with any member one-on-one; 

• encourage you to share your itinerary and host contact details with someone outside the group; and 

• make an in-trip reporting channel available to every attendee, in addition to the in-app Report feature described in Section 9. 

​

11. Breach Notification 

If a breach of security safeguards occurs involving your personal information, we will take reasonable measures to reduce the risk of harm and prevent further incidents. Where the breach creates a real risk of significant harm, we will notify you, the Office of the Privacy Commissioner of Canada, and, for Quebec residents, the Commission d’accès à l’information (CAI), as required under PIPEDA and Quebec's Law 25. We keep a register of all such incidents, whether or not they meet the notification threshold, for the period each law requires. 

​

12. Additional Rights for Quebec Residents 

If you reside in Quebec, Law 25 provides additional protections, including the right to request that your personal information be de-indexed or deleted in certain circumstances, the right to data portability, and the right to be informed when a decision about you is made using automated processing. 

Facial Liveness Check 

Wander Hearts uses a facial liveness check during the account verification process to help confirm that a real person is present and to reduce fraudulent or inauthentic accounts. This process is not used to verify or confirm your identity againsta government-issued ID, external database, or biometric database. 

The liveness check runs entirely on your device using Google ML Kit. Your selfie or video is not transmitted to Wander Hearts or Google for this check. Wander Hearts does not receive or store the selfie or video used for the liveness check and does not create or maintain a biometric database from this process. 

Because the liveness check is used only to determine whether a live person is present and is not used by Wander Hearts to identify or authenticate you against another identity or biometric record, Wander Hearts does not use this feature for identity verification. 

Automated Decisions 

The automated photo screening described in Section 1 may use automated processing to detect prohibited content such as nudity or violence. If a decision about you is made exclusively through automated processing and applicable Quebec law requires additional notice, Wander Hearts will provide the information and rights required by law. 

The automated photo-screening process does not currently involve human review. 

 

13. Changes to This Policy 

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes through the Platform or by email and will update the "Last updated" date above. 

 

14. Contact Us 

If you have any questions about this Privacy Policy or how we handle your personal information, please contact our Privacy Officer at privacy@wanderhearts.ca.