
Last updated: 13 August 2026
This policy explains what personal data WHO’S GOING? collects, why, and the control you have over it. We only collect what the product genuinely needs to work.
We collect the following, most of which you provide directly:
To create and secure your account, to enforce the adult-only rule, to match you with travellers whose plans overlap yours, to deliver messages and notifications, to detect abuse and enforce our terms, and to understand which parts of the product work.
We do not sell your personal data, and we do not run third-party advertising networks inside the app.
Visibility is controlled by you. Each sensitive profile field can be set to Public, Connections only, or Only me, and every trip has its own visibility setting. Discovery can be switched off entirely in Settings.
Direct messages are visible to the participants of that conversation. Our staff access message content only where necessary to investigate a report or comply with the law.
Where the GDPR applies, we rely on: performance of a contract (running your account and the core features), legitimate interests (safety, abuse prevention, product improvement), consent (optional communications), and legal obligation (responding to lawful requests).
We use a small number of infrastructure providers to run the service, including cloud hosting, a managed database and authentication provider, object storage for photos, and email delivery. They process data on our instructions only.
Translation is optional and only happens when you tap Translate on a message. That single message is sent to our AI provider to produce the translation, which is shown only to you and is never stored or shared with the sender. Nothing is sent for translation unless you ask for it.
We keep your data for as long as your account exists. When you request deletion, the account enters a short recovery window and is then anonymised: profile fields and photos are removed, and content that other travellers rely on (such as messages in a shared thread) is detached from your identity.
Safety records such as blocks and reports may be retained longer where required to protect other travellers.
You can access and correct your data in the app, restrict visibility per field, deactivate your account temporarily, or delete it permanently from Settings. Depending on where you live you may also have the right to a copy of your data, to object to processing, or to complain to your local data protection authority.
To exercise a right that is not available in the app, contact support@joinwhosgoing.com.
The service is global, so your data may be processed in countries other than your own. Where required we rely on appropriate safeguards such as standard contractual clauses.
The service is for adults aged 18 and over. We do not knowingly collect data from anyone under that age, and we delete such accounts when identified.
We will post material changes to this policy in the app before they take effect. Privacy questions can be sent to support@joinwhosgoing.com.
© 2026 WHO’S GOING?