Privacy
Who we are. getwooah.com is operated by GetWooah! (UEN 53529832C), a Singapore-registered business. Questions about your data go to dpo@getwooah.com, which reaches our Data Protection Officer.
The short version. We plan trips. We don't take payments, we don't hold bookings, and we don't sell your data or let advertisers follow you around the web. There are no advertising trackers on this site. The one advertising thing we measure is our own: if you arrive from a GetWooah ad and make a plan, we let Google Ads know the ad worked — it sets no cookie and never identifies you (see Measuring our own ads, below).
What we collect.
- When you plan a trip: your dates, who's travelling, your budget band, pace, what you're interested in and what you'd rather avoid. We store the resulting plan so your trip code can bring it back.
- If you give us your email: your email address, with your trip code, city and trip length. We save it so we can attach your itinerary to it later — we do not send marketing, and we do not pass it to anyone.
- Automatically: a first-party cookie (
wooah_sid) holding a random id and nothing else, kept for 90 days, so we can tell that a series of actions came from one visitor; which recommendations you tapped; the country you appear to be in (just the country — our host works that out at the edge and we never see or keep your address); and your IP address, used only in memory to stop abuse and never stored against you.
What we do with it. Build your plan, understand which recommendations are useful so the next plan is better, and — if you came from one of our ads — know that the ad led to a plan. That's the whole list.
Who else touches it. Our hosting provider (Vercel) and our database provider (Supabase) process data on our behalf under data-processing agreements. We call Google's Maps and Places services for travel times and place details — those requests carry locations and search terms, not who you are. When you tap a booking link you leave our site for Agoda or Klook, who then handle you under their own privacy policies; we send them your click, not your details.
How long we keep it. Trip plans stay so your trip code keeps working. Usage analytics are kept for up to 36 months, then deleted. An email you leave for itinerary tracking is kept until you ask us to delete it — it exists for a service you asked for, and one message to dpo@getwooah.com removes it.
Your rights. You can ask us what we hold about you, ask us to correct it, or ask us to delete it — email dpo@getwooah.com. Under Singapore's Personal Data Protection Act we'll respond promptly; if you're in the UK or EU, we'll honour the equivalent rights.
Security, honestly stated. We keep what we hold small on purpose — that's the strongest protection there is. Data is encrypted in transit and at rest by our providers. No system is perfectly secure; if something goes wrong we'll tell the Personal Data Protection Commission and, where you're affected, you.
One thing worth knowing. We will never ask you to pay us for a booking, and we will never email you asking for payment or card details. If you get such a message claiming to be from GetWooah, it isn't.
Measuring our own ads. When we advertise on Google and you click one of our ads, Google puts a code on the link. If that visit turns into a plan, we tell Google Ads the ad worked — from our server, not your browser — using just that code. No advertising cookie is set, nothing follows you to other sites, and we share nothing that identifies you. It only runs if you've accepted cookies, and it's simply how we tell which ads are worth the money.
Changes. If this page changes materially we'll date the change here. Last updated: 2 October 2026.