Trust and privacy

What Wayrune does—and what still needs confirmation.

A factual view of data controls, AI providers, security boundaries, and policy status. This is an engineering disclosure, not a claim of certification or completed legal compliance.

Data controls

Saved Memory, previous-conversation recall, optional analytics, advertising consent, export, chat deletion, memory deletion, and account deletion are separate controls. A consent choice does not silently change Memory or conversation storage.

Open Privacy settings

Providers and routing

The checked production setup uses Cloudflare infrastructure, Qwen and DeepSeek inference, Google sign-in, and Cloudflare email. Serper is configured behind a separate Web Search release gate. Disabled integrations are listed explicitly.

Review providers

Security boundaries

Account and anonymous sessions use opaque, HTTP-only production cookies. Provider credentials remain server-side. Account, routing, points, moderation, and publication changes require validated server actions; prompt text is not authority to change them. No service can promise absolute security.

AI limitations

AI output can be inaccurate, incomplete, biased, unsafe, or out of date. Citations show sources used; they do not certify those sources. Consequential information should be independently checked.

Read the AI notice

Documents

Policies and notices

Every item below is versioned and visibly marked as draft.

Open gates

Not hidden behind reassuring language.

Legal operator identity and public contact details.
Qualified UK privacy, consumer, child-access, and policy review.
Provider contracts, API retention/training terms, and transfers.
Exact storage, backup, security-log, and moderation retention.
Production cookie/network inventory across consent states.
Explicit public-launch and policy-promotion approval.