Last Updated: November 6, 2026 • Product of Mcube Infotech
Never Sold or Monetized
We never sell your photos, videos, contacts, or metadata to third parties, advertisers, or data brokers.
On-Device Biometrics
Facial embeddings for grouping are extracted locally on your device using Google ML Kit. Raw biometric vectors are never indexed for surveillance.
Right to Complete Erasure
When a vault or account is deleted, all stored photos, videos, and associated vectors are permanently deleted from Cloudflare R2 and databases.
1. Introduction & Overview
WayPics ("WayPics", "we", "our", or "us") is a cloud travel memory preservation platform operated and owned by Mcube Infotech. This Privacy Policy details our practices concerning data collection, transmission, biometric feature vector usage, storage, and user erasure rights when you use our mobile application and web portal (https://waypics.mcubeinfotech.com).
By accessing WayPics, creating a vault, or uploading media, you acknowledge and agree to the policies described herein.
2. Biometric Data & Facial Clustering Disclosures
Clear Notice on Facial Recognition:WayPics incorporates on-device computer vision models (Google ML Kit Face Detection) strictly to help travelers identify their photos within a shared journey vault.
Purpose of Processing: Face coordinates and mathematical embeddings are generated solely to cluster photos of the same individual so you can tap "My Moments" or claim your memories.
No Identity Tracking: We do not match faces against external public databases, social networks, government databases, or facial recognition surveillance networks.
User Consent: Claiming a face is entirely opt-in. A member can choose not to claim any face and still access the shared vault.
Immediate Deletion: If you delete your face claim or delete the vault, all bounding box coordinates and embeddings associated with that vault are immediately eradicated.
3. Information We Collect
Account Credentials: Mobile phone number and optional display name/avatar for OTP-based passwordless authentication.
Media Content: Original photos and videos uploaded by you or your invited vault members, including original EXIF metadata (timestamp, GPS coordinates, camera model) to construct episodic journey moments.
Payment & Transaction Data: When upgrading via Razorpay (Trip Pass or WayPics Plus), payment information is securely processed directly by Razorpay Payment Gateway. WayPics does not store your credit card numbers, CVVs, or UPI MPINs. We only retain the Razorpay transaction order ID for entitlement activation.
Device & Network Telemetry: IP address, device OS version, and network request timestamps to prevent automated scraping and abuse.
4. Cloud Storage & Security Architecture
All original and proxy media files are securely stored in private Cloudflare R2 object storage with AES-256 server-side encryption. Communication between your mobile device, the web portal, and our servers is strictly enforced over TLS 1.3 / HTTPS.
5. Data Retention & Right to Erasure (Account Deletion)
In accordance with Google Play Store developer guidelines, GDPR, and the Digital Personal Data Protection Act (DPDP), you retain full sovereignty over your data:
Vault Deletion: When the vault creator deletes a vault, all photos, videos, moments, and member records are permanently deleted from Cloudflare R2 and MongoDB within milliseconds.
Self-Service Account Deletion: You can delete your account and all associated data at any time via the app or through our web portal at waypics.mcubeinfotech.com/delete-account.
6. Grievance Officer & Contact Details
For privacy inquiries, data deletion verifications, or concerns regarding your biometric data, you may reach our designated Data Protection Officer:
