Privacy Policy

Effective date: August 12, 2026
Last reviewed: August 12, 2026
Supersedes: version effective July 29, 2026

1. Introduction

Wanderdriven Inc. ("wanderdriven", "we", "us", or "our") operates wanderdriven.com, the wanderdriven mobile application, and related services (collectively, the "Service").

wanderdriven is a storytelling platform designed to preserve, share, and where applicable monetize meaningful stories across personal, family, and organizational contexts.

This Privacy Policy explains:

what data we collect;
how we use it and on what legal basis;
how content behaves within the platform; and
your rights regarding access, deletion, anonymization, and control.

Unless otherwise defined, terms used here have the same meanings as in our Terms of Service. Where this Policy conflicts with the Terms of Service on a question of personal data, deletion, retention, or removal, this Policy controls.

2. Core Principles

wanderdriven is built on the following principles:

Your stories are yours. We provide infrastructure, not ownership.
We do not train on your content. Your stories are not used to train, fine-tune, or improve any model.
Trust is a feature. Attribution, payments, and access must be defensible.
Content may extend beyond individuals. Stories can live across families, communities, and networks.
Control includes identity. You can remove yourself from content even if the content persists.

3. Definitions

Personal Data. Information that identifies you as an individual.

Content. Stories, story arcs, segments, media, and associated metadata.

Story Arc. A collection of related stories, segments, and media published and, where Premium, offered for sale as a single unit.

Purchased Content. A Premium story arc that has been accessed through a financial transaction.

Tenant. An organizational or platform context in which users and content exist.

Attribution Data. Records related to invitations, attribution links, and revenue participation.

Anonymization. Removal of personal identity while preserving content.

4. Information We Collect

4.1 Personal Data

We may collect:

Name
Email address
Phone number (where provided)
Username and profile details
Optional information you choose to add, such as family relationships, location, or biographical details

4.2 Content Data

Stories, story arcs, and segments
Images, video, audio, and files
Titles, descriptions, and narrative content
Tags, relationships, and metadata
Content ratings assigned under section 16.2 of the Terms of Service, and the moderation signals underlying them

4.3 Usage Data

Device and browser information
IP address
Interaction data

4.4 Location Data

Optional location data for storytelling features
May be precise or generalized depending on your settings

Precise location is collected only where you enable it. Because geo-tagged content may reveal the location of a home, a family, or a burial site, precise location is not attached to publicly published content by default, and you may remove or generalize location data on any story at any time.

4.5 Financial and Attribution Data

We do not store payment card details. Payment card data is handled directly by our payment processor.

We retain:

transaction records, including Premium purchases;
attribution records; and
payout and escrow data.

4.6 Age Verification Data

Access to WD-A content, to purchasing Premium content, and to earning features requires age verification through a third-party verification provider, as set out in section 16.4 of our Terms of Service. Verification is completed once, at the account level.

Verification is performed by the provider, not by us. We do not receive or store the identity document you present. We receive and retain only:

confirmation of whether you met the age requirement;
the date verification was completed; and
a reference identifier supplied by the provider.

The provider's handling of your document is governed by its own privacy notice, which is presented to you at the point of verification.

4.7 Personal Data About Other People

The Service is designed for preserving stories that involve family members, ancestors, communities, and other third parties. When you upload content, you may be providing personal data about people who do not hold an account, including deceased persons and children.

You are responsible for having an appropriate basis to share that information. We provide a route for identified individuals to request removal or restriction under section 8.5.

5. How We Use Data and Our Legal Bases

We use data to:

provide and operate the Service;
enable storytelling and sharing;
provide assisted composition through Smart Story Builds, as described in section 6.1;
assign content ratings and apply the access rules in section 16 of the Terms of Service;
support monetization and attribution;
promote stories, storytellers, and story organizations within the Service, including labeled paid placements;
improve platform performance and security;
detect, prevent, and investigate prohibited content and conduct; and
comply with legal obligations.

Where the General Data Protection Regulation (GDPR), UK GDPR, or comparable law applies, we rely on the following legal bases:

Purpose	Legal basis
Providing the Service and your account	Performance of a contract
Providing Smart Story Builds at your request	Performance of a contract
Processing payments, payouts, and attribution	Performance of a contract; legal obligation
Content rating and age-appropriate access controls	Legal obligation; legitimate interests
Security, fraud prevention, and abuse detection	Legitimate interests; legal obligation
Detecting child sexual abuse material and other unlawful content	Legal obligation; substantial public interest
Reporting credible threats and terrorist or violent extremist content, and preserving associated records	Legal obligation; substantial public interest; legitimate interests
Handling copyright notices and counter-notices	Legal obligation
Promoting stories, storytellers, and organizations within the Service	Legitimate interests
Optional location features	Consent
Retention of financial and tax records	Legal obligation
Improving and developing the Service	Legitimate interests

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

6. Content Ownership, License, and Smart Story Builds

You retain ownership of your content.

By submitting User Content you grant wanderdriven a non-exclusive, worldwide, royalty-free license to host, store, reproduce, adapt, format, transmit, and display that content solely as necessary to operate, secure, and improve the Service, and only to the extent consistent with the visibility and distribution settings you have selected. Content marked draft or private is not published, promoted, or distributed by us. This mirrors the license in section 6.2 of our Terms of Service.

6.1 Smart Story Builds

Smart Story Builds is an assisted organization feature that helps you structure and assemble your own stories and arcs. It analyzes the material you upload and proposes structure — chapter groupings, themes, ordering, and gaps. It does not write your story, and it does not supply information you did not provide. It is described in section 6.5 of the Terms of Service.

We do not train on your content. We do not use your content to train, fine-tune, or otherwise improve any model, and we do not make your content available to any third party for that purpose.

Your content does not leave our infrastructure for this purpose. Smart Story Builds runs on infrastructure we operate. Your content is not sent to a third-party model provider.

Processing is for your output only. Where the feature draws on your existing stories, archives, or uploads in order to assemble an arc for you, that is retrieval of your own material to produce your own output. It is not training, and the material is not retained for any purpose beyond producing that output and the resulting content you choose to keep.

Content belonging to other people. Where you have been granted access to a family member's or collaborator's stories, Smart Story Builds may draw on that material only to the extent your existing access permits. It does not extend your access to content you could not otherwise read.

7. Content Categories, States, and Distribution

Content falls into one of three categories under section 3.1 of the Terms of Service — Legacy, Discovery, or Premium. Legacy and Discovery content is free and may be published as individual stories or as arcs. Premium content is sold only as story arcs, and only to purchasers who have completed age verification.

Ratings are assigned to stories and to arcs under section 16.2 of the Terms of Service. An arc carries the highest rating of any story within it.

Within those categories, content may exist in the following states:

State	Description
Draft	Private and editable
Private	Visible only to selected users
Shared	Distributed to specific users
Published	Available more broadly, subject to its content rating
Inherited	Propagated across networks
Purchased	Access granted via transaction. Subject to mandatory removal under section 8.2.

Content behavior depends on its category, its state, its content rating, and how it has been distributed.

8. Deletion, Removal, and Anonymization

8.1 Account Deletion

When you delete your account:

Personal Data is deleted or de-identified.
Authentication credentials are removed.
Contacts and direct identifiers are removed.

Deleting your account does not by itself delete content you have published. Content is handled under sections 8.2 through 8.5.

8.2 Mandatory Removal

This section overrides every other provision of this Policy and every access commitment made elsewhere in this Policy or in the Terms of Service, including commitments to purchasers.

We will remove content from the Service, regardless of its category, state, distribution, or whether it has been purchased, where the content:

violates our Acceptable Use Policy or Terms of Service;
is unlawful, including child sexual abuse material;
is the subject of a valid notice under our DMCA / Copyright Policy or comparable law, and has not been restored following a valid counter-notification;
infringes a third party's intellectual property, publicity, or privacy rights where the rights position cannot be substantiated; or
we are required to remove by court order, regulatory direction, or lawful demand from a competent authority.

Where content is removed under this section:

access ends for all users, including purchasers;
affected purchasers are notified and refunded or credited in accordance with, and subject to the conditions in, section 5.4 of the Terms of Service;
creator earnings attributable to the removed content are reversed under section 3.5 of the Acceptable Use Policy;
anonymization and archiving are not available as alternatives to removal; and
we may retain a copy of the content and associated records where retention is required for legal, investigative, reporting, or preservation obligations, including preservation for law enforcement in child safety matters.

8.3 Content Deletion by the Creator

Where content does not fall within section 8.2, deletion is handled according to its state and distribution:

Content Type	Outcome
Draft content	Permanently deleted
Private content	Deleted
Shared (non-purchased) content	Removed from the Service and withdrawn from further distribution. Copies already delivered to or downloaded by recipients are outside our control.
Inherited content	Remains with recipients
Collaborative content	Retained for other participants
Purchased or paid-access content	Not deleted — see section 8.4

8.4 Purchased and Paid-Access Content

Where content does not fall within section 8.2, and one or more users have purchased it, deletion is limited in order to protect purchasers and preserve transactional integrity. In these cases:

the content is not deleted from the Service;
existing purchaser access is preserved;
the creator may not revoke or remove purchaser access retroactively; and
the creator may instead anonymize the content, archive it, or both.

Anonymize. Your name, account linkage, and identifying profile details are removed from the content. The content remains accessible to existing purchasers under anonymous attribution.

Archive. The content is withdrawn from discovery, feeds, recommendations, broadcasts, organizational reach features, and further sale. It remains accessible to existing purchasers only. No new access is granted after archiving.

You may elect either or both. Archiving does not end existing purchaser access. Anonymization does not remove the content.

This section is subject in all cases to sections 8.2, 8.5, and 8.6.

8.5 Requests by People Identified in Content

You may remove yourself from content even where the content itself persists.

If you are identifiable in content published by another user, you may request:

removal of your name, tags, mentions, and identifying references;
blurring, muting, or removal of your image or voice;
restriction of the content's distribution; or
removal of the content.

We assess each request against the interests of the creator and any purchasers, and will ordinarily satisfy it by editing rather than removal. Where the content is inherently identifying — for example, a personal account in which you are the subject — and the request cannot be satisfied by editing, we will restrict distribution and may remove the content notwithstanding section 8.4.

Where content is removed under this section, affected purchasers are refunded or credited under section 5.4 of the Terms of Service. The creator's earnings are not reversed; wanderdriven bears that cost.

Requests concerning intimate imagery, minors, health information, safety risk, or content published by a person with no legitimate connection to you are prioritized and are ordinarily granted.

Requests concerning a deceased person may be made by a designated legacy contact, executor, or next of kin, subject to verification.

Requests may be made to privacy@wanderdriven.com. We may ask you to verify your identity.

8.6 Effect on Statutory Rights

Nothing in this section limits any right you have under applicable data protection law that cannot be limited by contract, including rights of erasure, objection, and restriction of processing.

Where we are unable to delete content because of the limitations in section 8.4, we will delete or de-identify the personal data associated with it to the fullest extent possible while preserving the content itself.

Where personal data cannot be meaningfully separated from the content, deletion of the content takes priority over the limitations in section 8.4.

Where content is removed under this section, affected purchasers are refunded or credited under section 5.4 of the Terms of Service, and the corresponding creator earnings are reversed.

8.7 Financial and Audit Data Retention

Certain data cannot be deleted due to legal and operational requirements, including:

financial transactions;
attribution records;
payout and escrow data; and
audit logs.

Where possible, such data is disassociated from personal identity. Retention periods are set out in section 13.

9. Shared and Inherited Content

wanderdriven enables content to be shared and inherited across networks. As a result:

content may persist beyond an individual account;
deleting your account stops future sharing but does not remove existing access; and
inherited content remains with recipients.

10. Attribution and Monetization

wanderdriven maintains records related to:

Premium purchases and the earnings arising from them;
invitations and attribution;
revenue attribution; and
payouts and escrow.

These records are required for audit and financial integrity, cannot be deleted, and may be anonymized where appropriate.

11. Multi-Tenant Data Context

Content on the Service may exist within organizational or community contexts that have their own access controls. We maintain separation between these contexts and apply security measures appropriate to each.

12. Location Data and Privacy

Location data is used to support storytelling features.

Precise location is used only when you enable it.
Discovery content may use generalized location.
You can control location settings at any time, including removing location from content already published.

13. Data Retention

We retain data only for as long as necessary to provide the Service, meet legal obligations, and maintain financial and attribution integrity.

Data Category	Retention Period
Account profile data	Until account deletion, plus a recovery grace period of up to 30 days
Age verification records (confirmation, date, provider reference identifier)	Until account deletion, plus the recovery grace period. Retained longer only where required to evidence compliance with an age-verification obligation
Usage and interaction logs	Typically 90 days, longer where required for security or fraud prevention
Content data	Governed by content state rules in section 7. Purchased content is preserved indefinitely unless removed under section 8.2.
Legacy content held for a legacy contact after account termination	90 days, under section 5.3 of the Acceptable Use Policy
Content ratings and moderation signals	For as long as the associated content is retained
Financial and tax records	7 years, or as required by applicable tax law
Attribution and audit records	7 years, aligned with financial records
Content and records preserved for law enforcement	As required by applicable law
Anonymized or aggregated data	May be retained indefinitely

14. International Data Transfers

Your data may be processed outside your jurisdiction, including in the United States where Wanderdriven Inc. is incorporated.

Where we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with supplementary technical and organizational measures. A copy of the relevant safeguards is available on request at privacy@wanderdriven.com.

15. Your Rights

You may have the right to:

access your data;
correct your data;
delete your data, subject to sections 8.4 and 8.6;
anonymize your data;
restrict or object to processing;
request data portability;
withdraw consent; and
lodge a complaint with your supervisory authority or privacy regulator.

You can exercise these rights through your account settings or by contacting us at privacy@wanderdriven.com. We may ask you to verify your identity before responding to a request. We respond within the period required by applicable law, and within 30 days where no specific period applies.

16. Security and Breach Notification

We use commercially reasonable measures to protect your data. No system is completely secure.

We use automated tools to detect and prevent the distribution of prohibited content on the Service, including child sexual abuse material. Prohibited content is defined in our Acceptable Use Policy, and the detection controls are described in section 2.5 of that Policy.

Child sexual abuse material scanning runs on every image and video at the point of upload, and matched content is never viewed by our staff. Scanning applies in every content state — draft, private, Legacy, shared, published, and archived — and whether or not the content is ever published. This is a legal obligation and it is not subject to any privacy setting, sharing setting, or content category. The remaining detection controls run before content becomes visible beyond its creator.

In the event of a personal data breach likely to result in a risk to your rights, we will notify you and the relevant supervisory authority or privacy commissioner without undue delay and within the timeframes required by applicable law.

17. Third-Party Services and Disclosures

We use third-party providers for payment processing, cloud infrastructure, content delivery, content safety screening, age verification, and related operational services. We do not use third-party advertising networks and we do not disclose personal information to advertisers. Their access to personal data is limited to what is necessary to perform services on our behalf, and they process it under their own privacy policies.

Our principal providers are Amazon Web Services (hosting and infrastructure), Stripe (payment processing), Mapbox (mapping), and specialist providers for content safety screening and age verification. A current list of subprocessors is available on request at privacy@wanderdriven.com.

We do not use any third-party model provider for Smart Story Builds. That feature runs on infrastructure we operate, as described in section 6.1.

Copyright notices and counter-notices. Where we receive a copyright notice concerning your content, we provide you with a copy of that notice, which includes the complainant's name and contact information. Where you submit a counter-notification, we are required to forward it to the complainant, and it includes your name, mailing address, and telephone number. These disclosures are required by 17 U.S.C. § 512 and are described in our DMCA / Copyright Policy.

18. Young People and Children

18.1 Youth Accounts (13–17)

The Service permits youth accounts for individuals aged 13 to 17. Youth accounts are read-only and cannot create content, interact publicly, purchase content, or earn. The full restrictions are set out in section 2.2 of our Terms of Service.

For youth accounts we apply the following by default and without the account holder needing to act:

no public profile, handle, or discoverable presence;
no personalized or behaviorally profiled recommendations — content is surfaced chronologically or by non-personalized criteria;
no precise location collection;
content rated WD-A is withheld from all public, discovery, search, feed, and recommendation surfaces; and
no participation in any earning, payout, or attribution feature.

Content rated WD-G and WD-13 is available to youth accounts. WD-13 is an advisory rating that signals mature themes or strong language; it does not restrict access. Ratings reflect what content is rather than which automated scanner registered it, so family material such as birth documentation, medical records, and preserved historical documents is ordinarily WD-G or WD-13 and remains available to a youth account holder.

We collect the minimum personal data necessary to operate a youth account: date of birth (to determine account type and apply restrictions), an email address, and basic usage and security data.

18.2 Access to Mature Legacy Content

WD-A is applied only to graphic material — detailed injury, gore, or explicit imagery of death or atrocity — so most family and legacy content is available to a youth account without any further step.

Where a Legacy story does carry a WD-A rating, an adult account holder with rights over it may grant a specific youth account access to that specific story, under section 16.3 of the Terms of Service. We record the grant, the granting adult, the story, and the date. Where the youth account holder is under 16, we require confirmation from a parent or guardian.

This permission applies to Legacy content only and does not extend to Discovery or Premium content.

18.3 Individuals Under 13

The Service is not available to anyone under 13. We do not knowingly permit registration by, or knowingly collect personal information from, anyone under 13. If you are a parent or guardian and believe a person under 13 has provided us with personal information, contact us at privacy@wanderdriven.com and we will close the account and delete the information.

18.4 Content Depicting Children

Content preserved on the Service frequently depicts or describes children — family photographs, school records, childhood stories. This is an expected and legitimate use of the Service, and it is not affected by whether the child holds an account.

A parent, guardian, or the individual themselves may request removal or restriction of content depicting a minor under section 8.5. These requests are prioritized and are ordinarily granted.

18.5 Parent and Guardian Requests

A parent or guardian may contact us at privacy@wanderdriven.com to review the personal data associated with a youth account, request its correction or deletion, or close the account. We may ask for verification of identity and of the relationship.

19. Jurisdiction-Specific Notices

19.1 Canada (PIPEDA and Provincial Laws)

We collect, use, and disclose personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial private-sector privacy legislation, including Alberta's Personal Information Protection Act and Quebec's Law 25. You have the right to access and correct your personal information by contacting us at the address in section 21.

19.2 European Economic Area, United Kingdom, and Switzerland

Where the GDPR or UK GDPR applies, Wanderdriven Inc. is the data controller for personal data processed through the Service. Our legal bases are set out in section 5, transfer safeguards in section 14, and your rights in section 15. You may lodge a complaint with your national supervisory authority.

19.3 California (CCPA / CPRA)

If you are a California resident, you may have the right to know what personal information we collect, to request deletion, to correct inaccurate information, to limit use of sensitive personal information, and to opt out of the "sale" or "sharing" of your personal information.

wanderdriven does not sell personal information, and does not share it for cross-context behavioral advertising. We do not use third-party advertising networks. We nonetheless honor the Global Privacy Control (GPC) browser signal. See our Cookie & Similar Technologies Policy or contact us at the address in section 21.

19.4 Other US States

wanderdriven will honor equivalent rights under applicable US state privacy laws as they come into force.

20. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the dates at the top of this page and, where appropriate, notify you by email or through the Service. We encourage you to review this Policy periodically.

21. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Wanderdriven Inc.
5920 S. Hwy A1A, Suite #202
Melbourne Beach, FL 32951
United States

Phone: 855-926-9263
Email: privacy@wanderdriven.com