getwooah.

Privacy

Who we are. getwooah.com is operated by GetWooah!, a Singapore-registered business. Questions about your data go to dpo@getwooah.com, which reaches our Data Protection Officer.

The short version. We plan trips. We don't take payments, we don't hold bookings, and we don't sell or share your data with advertisers. There are no advertising trackers on this site.

What we collect.

  • When you plan a trip: your dates, who's travelling, your budget band, pace, what you're interested in and what you'd rather avoid. We store the resulting plan so your trip code can bring it back.
  • If you give us your email: your email address, with your trip code, city and trip length. We save it so we can attach your itinerary to it later — we do not send marketing, and we do not pass it to anyone.
  • Automatically: a first-party cookie (wooah_sid) holding a random id and nothing else, kept for 90 days, so we can tell that a series of actions came from one visitor; which recommendations you tapped; the country you appear to be in (just the country — our host works that out at the edge and we never see or keep your address); and your IP address, used only in memory to stop abuse and never stored against you.

What we do with it. Build your plan, and understand which recommendations are useful so the next plan is better. That's the whole list.

Who else touches it. Our hosting provider (Vercel) and our database provider (Supabase) process data on our behalf under data-processing agreements. We call Google's Maps and Places services for travel times and place details — those requests carry locations and search terms, not who you are. When you tap a booking link you leave our site for Agoda or Klook, who then handle you under their own privacy policies; we send them your click, not your details.

How long we keep it. Trip plans stay so your trip code keeps working. Usage analytics are kept for up to 36 months, then deleted. An email you leave for itinerary tracking is kept until you ask us to delete it — it exists for a service you asked for, and one message to dpo@getwooah.com removes it.

Your rights. You can ask us what we hold about you, ask us to correct it, or ask us to delete it — email dpo@getwooah.com. Under Singapore's Personal Data Protection Act we'll respond promptly; if you're in the UK or EU, we'll honour the equivalent rights.

Security, honestly stated. We keep what we hold small on purpose — that's the strongest protection there is. Data is encrypted in transit and at rest by our providers. No system is perfectly secure; if something goes wrong we'll tell the Personal Data Protection Commission and, where you're affected, you.

One thing worth knowing. We will never ask you to pay us for a booking, and we will never email you asking for payment or card details. If you get such a message claiming to be from GetWooah, it isn't.

Changes. If this page changes materially we'll date the change here. Last updated: 19 August 2026.