Privacy Policy

Last updated: July 2026

WanderFree is built around one rule: collect as little as possible, and keep almost all of it on your own device. This page explains exactly what that means for the app's four features — alertness monitoring, dashcam recording, SOS notify, and the live status page a Dash Alert can send.

Permissions WanderFree asks for

iOS will prompt you for each of these the first time it's actually needed — not all at once on launch. WanderFree doesn't function without them, since they're what the core safety features are built on:

• Camera — required for both on-device alertness tracking (TrueDepth) and Dash Alert dashcam recording (front/back). Without it, WanderFree cannot monitor alertness or record footage at all.
• Microphone — required so Dash Alert footage includes audio. If denied, dashcam clips record video only.
• Location — required for SOS Notify, so the message and live status link you send include where you are. Also used to show your position on the live status page while an incident is active. Not used if you never trigger Notify.

Alertness monitoring stays on your device

WanderFree uses your iPhone's TrueDepth camera to track eye closure and head position while you drive. This analysis runs entirely on-device, in real time. No camera frame, face data, or derived alertness score is ever uploaded anywhere, sent to a server, or used to train any model. It exists only in memory while your drive is active.

Dashcam footage and your own iCloud

When you trigger a Dash Alert, front and/or back camera footage is recorded locally to your device. If you choose to share that footage, it's uploaded to your own private iCloud account (via Apple's CloudKit private database) so you can generate a share link — WanderFree does not operate its own servers to store this footage, and nobody at WanderFree can access it. Deleting a trip from History deletes both the local files and this iCloud copy. An automatic cleanup setting (configurable in Settings) also prunes old footage from iCloud after a set number of days.

Emergency contacts

The emergency contacts you add are stored locally on your device. They're only ever used to pre-fill the recipients of a message you choose to send through Apple's own Messages app — WanderFree does not transmit your contact list anywhere itself.

SOS incidents and the live status page

Switching a Dash Alert to Notify mode creates a small record containing your first name (if you've set one in Settings), an approximate location and speed, a timestamp, and — once it finishes uploading — a short video clip. Unlike your regular dashcam footage above, this record and its clip are stored in WanderFree's own shared CloudKit space, not your personal iCloud storage — that's what lets the person you notify view it instantly from a plain link, without needing an Apple ID or the app themselves. It's protected by a single safeguard instead: its web address contains a 128-bit random ID that cannot realistically be guessed. Nobody can browse, search, or list these records — only someone who has the exact link (because you sent it to them) can view one.

• Marking yourself safe flips the record's status and schedules it for deletion within 24 hours.
• If you never mark safe, the record is deleted automatically 7 days after it was created.
• Deletion is enforced by a scheduled server-side job independent of whether you ever open the app again — so it happens even if your phone is lost, off, or the app is never reopened.

What we don't do

• No analytics or tracking scripts — not in the app, and not on this website or the status page.
• No advertising, and no selling or sharing of your data with third parties for marketing purposes.
• No cloud-based AI processing of your face, driving footage, or location.

Children's privacy

WanderFree is intended for licensed drivers and is not directed at children. We do not knowingly collect information from children.

Changes to this policy

If this policy changes in a way that affects what data is collected or how it's used, we'll update the date above and, where practical, note the change here.

Questions

Reach out any time via the contact page.