Privacybeleid

Effective: January 1, 2026 | Last updated: January 21, 2026

1. General Information

This Privacy Policy sets out the rules for processing personal data of Users of the Waby application (Return from Trail) and website waby.pl.

Controller: Waby Sp. z o.o., ul. Przykładowa 1, 00-001 Warsaw, Poland

Contact: privacy@waby.pl

2. Data Collected

2.1. User-provided data

• Email – for account creation
• Name – displayed in logistics plans
• Phone (optional)
• Profile photo (optional)
• Password – encrypted with Argon2id

2.2. Automatic data

• IP address, device ID
• System type/version
• Access date/time, activity logs

2.3. Location data

Collected only with consent, within active plan. Not archived after completion.

3. Processing Purposes

Art. 6(1)(b) GDPR – Contract

• Account, logistics plans, chat, ratings, complaints

Art. 6(1)(f) GDPR – Legitimate interest

• Security, analytics, claims

Art. 6(1)(a) GDPR – Consent

• Location, push notifications, newsletter

4. Retention Period

• Account: duration + 90 days
• Plans: 90 days after completion
• Location: 7 days after plan ends
• Messages: 90 days
• Unverified accounts: 30 days

5. Data Recipients

• Other users (within plans)
• IT providers (hosting)
• Authorities (under law)

We do not sell personal data.

6. User Rights (GDPR)

• Access (Art. 15), rectification (Art. 16), erasure (Art. 17)
• Restriction (Art. 18), portability (Art. 20), objection (Art. 21)
• Withdraw consent, complaint to supervisory authority

Contact: privacy@waby.pl

7. Security

• HTTPS/TLS 1.2+, Argon2id, JWT RS256
• Rate limiting, backups, RBAC

8. Children

Service for 16+. We don't knowingly collect children's data.

9. Cookies

See Cookie Policy.

10. Changes

We notify via app or email with 14 days notice.

11. Contact

Email: privacy@waby.pl
Address: Waby Sp. z o.o., ul. Przykładowa 1, 00-001 Warsaw, Poland

© 2026 Waby Sp. z o.o. Alle rechten voorbehouden.