Privacy

Last updated 23 July 2026

The short version

wherio exists so a few people can find each other, briefly, with consent. It has no accounts, keeps no history, and is built so that we cannot read your location even if we wanted to.

What leaves your phone

• Your location and display name are encrypted on your phone with keys agreed directly between session members (end-to-end encryption). Our relay server forwards these encrypted blobs without being able to decrypt them.
• The relay sees only what it needs to route messages: a random session code, random member ids, and connection timing. Sessions and everything in them are deleted from the server the moment anyone ends the session, and expire automatically if left idle.
• Meeting-point suggestions may query a routing service (Valhalla / OpenStreetMap) with a midpoint coordinate to snap it to a walkable path.

What never leaves your phone

• Your movement history. Trails live only in memory during a session and are wiped when it ends.
• Your contacts, phone number, or any identifier — wherio never asks for them.

What we store

Nothing durable. There is no database of users, sessions, or locations. Purchases (wherio Plus) are handled by Google Play and RevenueCat under their own policies; we receive only an anonymous entitlement flag.

Bluetooth local mode

When you enable local mode, phones exchange short-range Bluetooth signals directly to estimate distance and direction. Nothing is sent to any server.

Contact

Questions? support@parktechsystems.com