Where your trip data lives.
The short, plain-language version of how 7 Wanders treats your data. The binding versions are the privacy policy and the deletion disclosure.
On your device first
Trips live on your iPhone and stay readable offline. Signing in syncs them to your account so they survive a lost phone and can be shared with your travel partners. Transport between the app and our servers is encrypted in transit.
What the servers see, and why
Planning requests go through our server to the AI that plans - that is what turns your trip description into an itinerary and runs the live transit research. Your data is never sold and never used for ads, and the app carries no third-party ad or tracking SDKs. Sign-in is with Apple or Google, so 7 Wanders never sees or stores a password for you.
Payment data
There are no card numbers to protect: the 7 Wanders Pro subscription is billed by Apple through your App Store account, and 7 Wanders never handles them.
Deleting everything
Delete your account from inside the app and the server-side data goes with it - the deletion page spells out exactly what is removed, what is retained, and for how long.
Found something?
Security reports go to support@7wanders.app with “Security” in the subject. A human reads every one, within 2 business days.