Public beta

Privacy Notice

Effective September 1, 2026

WellRoamed is operated by Liddell Educational Technologies LLC in Utah, United States. This notice explains the information used to provide and protect the service. WellRoamed does not sell personal information.

Information we collect

• Account information: email address, authentication identifiers, account-consent versions, and age-eligibility confirmation. Passwords are handled by Supabase and are not visible to WellRoamed.
• Trip information: planning inputs, saved trips, generated field guides, visited-place choices, memories you choose to write, and product feedback.
• Support information: contact details, the message you submit, request status, and an optional link to your signed-in account.
• Security and operations: request identifiers, limited error details, rate-limit counters, timestamps, and service-health events. We avoid recording access tokens, passwords, or trip contents in operational logs.
• Optional anonymous usage: If you opt in under More options, we count opening the finder, starting a search, opening a plan, saving, and sharing. These counts contain no account identifier, search text, location, trip contents or memory notes. Counts are retained for up to 90 days. Turn the option off to stop future counts; Do Not Track is respected. This is separate from email subscriptions.
• Device-local information: appearance, draft planning choices, and the current authentication session may be stored in your browser. The authentication session is kept in tab-scoped browser storage rather than persistent local storage.
• Tesla connection: if enabled and voluntarily connected, encrypted authorization tokens, the selected vehicle identifier, and connection timestamps. WellRoamed does not request continuous vehicle location history or general telemetry.

How we use information

We use information to authenticate accounts, create and save trip plans, provide requested routing and field-guide features, operate support, prevent abuse, enforce quotas, diagnose failures, honor account choices, and improve the service. We do not use trip or support content for targeted advertising.

Service providers and external requests

• Supabase provides account authentication and the reviewed activity catalog.
• OpenAI Sites and Cloudflare provide application hosting, delivery, security, and structured account-data storage.
• Google Maps Platform receives relevant origins, destinations, stops, restaurant searches, and optional coordinates when you request live routing or restaurant results. Saved Google restaurants retain the Place ID and refresh current details when needed.
• OpenAI may receive a bounded trip brief only when an AI-generated field guide is explicitly requested and that optional feature is configured.
• Tesla receives authorization and navigation requests only when you connect an account and choose a vehicle handoff.
• Viator or other linked providers receive information only when you follow an external link or use a separately identified live integration.

Those providers process information under their own terms and notices, including the Google Privacy Policy and Supabase Privacy Policy.

Retention

• Account, memory, and feedback records remain until you delete them or delete the account. Moving a trip to Recently deleted allows restoration for 30 days. Deleted trips and their field guides remain in account exports until permanent account deletion; the end of the restore window does not automatically erase them.
• Tesla connection records remain until you disconnect Tesla or delete the account.
• Resolved support requests are retained for no more than 24 months after their last update unless longer retention is required for a dispute or legal obligation.
• Operational events are retained for no more than 90 days, and daily usage counters for no more than 35 days.

Your choices and rights

Account settings let you download your WellRoamed data, change your email or password, sign out every device, and permanently delete the account. You can disconnect Tesla separately. You may also ask support to correct information, address an accessibility issue, or handle a privacy request. We may need to verify your identity before acting on a request.

Children

The service is not directed to children under 13, and account creation requires confirmation that the user is at least 13. If you believe a child under 13 provided information, submit a privacy request so it can be removed.

Security and international processing

We use access controls, encrypted transport, server-held credentials, encrypted Tesla tokens, request limits, and restricted operational logging. No internet service can guarantee absolute security. Information may be processed in the United States and other locations used by the providers above.

Changes and contact

Material changes will update the effective date and may require signed-in users to acknowledge the current notice. For privacy questions or requests, use the support form and choose “Privacy or data request.”