Privacy Policy

We use the information we collect to:

• Create, authenticate, and manage your account
• Deliver personalized travel recommendations and destination discovery
• Enable trip planning, collaboration, and itinerary management
• Power feed, happenings, and social features
• Support the creator marketplace and facilitate bookings
• Provide and improve our AI travel agent and planning assistant
• Send transactional notifications (trip updates, collaboration invites, booking confirmations)
• Send marketing communications where you have opted in — you may opt out at any time
• Detect and prevent fraud, abuse, and unauthorized access
• Conduct analytics to understand how the Platform is used and improve it
• Comply with applicable laws and legal obligations
• Enforce our Terms of Service and other policies

Worldoh uses location information to improve travel discovery — for example, showing nearby destinations, recommending local experiences, and auto-filling your hometown when you set up your profile.

We collect two types of location data:

• Coarse location — derived from your IP address or region settings. Collected automatically to surface relevant content.
• Precise GPS location — collected only when you explicitly use a feature that requires it (such as "Use current location" in your profile or when pinning a place on the map). We request device permission before accessing GPS; you may deny or revoke this permission at any time in your device settings.

Worldoh does not continuously track your GPS location in the background.

Worldoh offers an AI-powered travel agent that helps you plan trips, discover destinations, and answer travel questions. When you use the AI agent:

• Your messages and conversation history are sent to our AI infrastructure to generate responses.
• Relevant context about your trips, saved destinations, and travel preferences may be included to personalize the assistant's responses.
• Conversations may be stored to maintain context across sessions and improve the quality of AI responses over time.
• We do not use your personal conversations to train external AI models without your explicit consent.

Please avoid sharing sensitive personal information (such as passport numbers, payment details, or health information) within the AI agent.

Photos, videos, and other media you upload to Worldoh are stored on Cloudflare R2 — a secure cloud object storage service. Media files are:

• Associated with your account and the trip, post, or happening you uploaded them to.
• Accessible to other users only according to the visibility settings of the trip or post they belong to.
• Removed from our storage when you delete the associated content or close your account, subject to backup retention periods.

Media files may retain embedded metadata (such as EXIF data) at the time of upload. We do not automatically strip this metadata, so please review your device settings if you wish to remove location or device information before uploading.

You retain ownership of the content you create and post on Worldoh. By posting content you grant Worldoh a non-exclusive, royalty-free, worldwide license to display, reproduce, and distribute that content on the Platform and in promotional materials for Worldoh, in accordance with your privacy settings.

Public content (posts, happenings, and creator listings you mark as public) may be visible to all users and may appear in search results. Private trip data is visible only to you and collaborators you explicitly invite.

Please do not post content that contains sensitive personal information about yourself or others, including financial details, government IDs, or medical information.

We do not sell your personal information. We share information only in the following limited circumstances:

The Platform may contain links to third-party websites, services, or social media platforms. We are not responsible for the privacy practices or content of those services. We encourage you to review the privacy policies of any external services you use, including:

• Google Maps & Places API — governs location search and map data
• Google OAuth — governs sign-in via Google
• Social platforms you connect or link in your profile

We implement industry-standard technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS/HTTPS
• Encrypted storage for sensitive account credentials
• Access controls limiting which team members can access personal data
• Regular security reviews and dependency updates
• Secure, isolated cloud infrastructure through Cloudflare and Supabase

No system is perfectly secure. We cannot guarantee absolute security of information transmitted over the internet. If you suspect unauthorized access to your account, please contact us immediately at support@worldoh.com.

We retain your personal information for as long as your account is active or as needed to provide our services. Specifically:

• Active account data — retained while your account remains open.
• Deleted content — removed from active systems within 30 days; may persist in encrypted backups for up to 90 days.
• Closed accounts — personal information deleted within 90 days, except where retention is required by law or to resolve disputes or prevent fraud.
• Anonymized analytics — may be retained indefinitely in aggregated, non-identifiable form.

Depending on your location, you may have the following rights regarding your personal information:

To exercise any of these rights, contact us at support@worldoh.com. We will respond within 30 days. In some cases we may need to verify your identity before processing a request.

Worldoh is not intended for children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at support@worldoh.com.

The Worldoh website uses cookies and similar browser technologies to:

• Keep you signed in across sessions (authentication cookies)
• Remember your preferences and settings
• Understand which features are used and how (analytics)
• Maintain Platform security and detect abuse

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform (for example, you may need to sign in again on each visit).

The Worldoh mobile app uses equivalent on-device storage (AsyncStorage) for session management and preferences. No cross-app advertising trackers are used.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes we will:

• Update the 'Last updated' date at the top of this page
• Post a notice in the Worldoh app or send you an email if the change is significant
• Where required by law, obtain your consent before the change takes effect

Continued use of Worldoh after an updated policy is posted constitutes your acceptance of the new terms.

If you have questions, concerns, or requests about this Privacy Policy or your personal data, please reach out: