WATO
Last updated: 17 June 2026
This Privacy Policy explains how WATO collects, uses, stores, shares and protects personal information when you use the WATO mobile application, website and related services collectively referred to as the “Service”.
WATO is operated by:
MiddleMan Online Ltd
Company number: 15662625
Registered office: 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London, England, W1T 6EB
Email: info@middleman.online
MiddleMan Online Ltd is the controller of the personal information described in this Privacy Policy and is referred to as “WATO”, “we”, “us” or “our”.
By using WATO, you acknowledge that your personal information will be handled as described in this Privacy Policy.
This Privacy Policy should be read together with the WATO Terms of Service.
This Privacy Policy applies to personal information processed through:
This Privacy Policy does not govern third-party websites, applications or services that WATO does not control.
The information we collect depends on the features you use and the permissions you provide.
When you create or use a WATO account, we may collect:
Your password is handled through our authentication provider. We do not have access to your password in readable form.
Where you sign in through a third-party authentication provider, we may receive information that provider makes available to us, such as your name, email address and authentication identifier.
You may choose to provide profile information such as:
Some profile information is visible to other users where necessary for friend discovery, community membership, messaging and overlap features.
You should not include sensitive information in your username, display name or other publicly discoverable profile fields.
When you add or import a trip, we may collect information such as:
Your complete trip record is private to your account and is not published as a public social post or public travel itinerary.
WATO processes trip information to identify potential overlaps between you and people who are eligible to be matched with you, such as connected friends or relevant community members.
Where an overlap is identified, WATO may create and display a limited overlap summary to the users involved. The overlap summary may include information such as:
WATO does not provide other users with direct access to your complete underlying trip record.
Joining a community may make other community members eligible for travel-overlap matching. It does not make your complete trip information visible to every member of that community.
When you use WATO's friend features, we may process:
We use this information to manage friend relationships, determine who may be eligible for overlap matching and prevent unwanted contact.
WATO does not require access to your phone's contact list unless a specific contact-import feature is introduced and you separately grant permission for that feature.
When you create, discover, join or manage a community, we may process:
Community names, descriptions, membership information and member profiles may be visible to other users depending on the community's visibility settings and the relevant WATO feature.
Communities do not provide public posts, public comments or group chat unless WATO expressly introduces and discloses such a feature in the future.
WATO allows connected friends to exchange private direct messages.
We may collect and process:
Direct messages are not displayed publicly. They are normally visible only to the conversation participants.
Messages must still be processed by WATO and our service providers to store, transmit and deliver them. Authorised WATO personnel may access message content where reasonably necessary to:
Where a user reports a message, a copy or snapshot of the reported message and relevant conversation context may be preserved as part of the moderation report.
WATO does not use the contents of private direct messages for targeted advertising.
Unless WATO expressly states otherwise within the Service, users should not assume that direct messages are protected by end-to-end encryption.
When you report content, report another user or block another user, we may collect:
Blocking a user may create a safety or moderation record for WATO, even where you do not submit a separate written report.
We use this information to:
We do not disclose the identity of a reporting user to the reported user unless disclosure is required by law or is strictly necessary for a safety investigation.
WATO may use automated filters and manual moderation processes to identify or prevent objectionable content.
Filtering may apply to:
These systems may process the text, image or other material you submit to determine whether it may contain:
Content may be blocked before submission, restricted, removed or referred for manual review.
Automated filtering can make mistakes. Users may contact us where they believe content was incorrectly restricted.
Where WATO offers paid subscriptions or other paid features, we may collect:
Payments may be processed by Stripe, Apple, Google or another authorised payment provider, depending on the platform and purchase method.
Payment providers process payment-card and financial information under their own privacy policies. WATO does not ordinarily receive or store your complete card number, card security code or bank-login credentials.
We may receive confirmation that a transaction was completed, renewed, cancelled, refunded or failed.
Where you choose to connect a supported calendar, travel account or other third-party service, we may receive information necessary to provide the requested integration.
This may include:
We only access connected-service information within the permissions you grant.
Where possible, we limit processing to information reasonably necessary to identify and import travel-related information.
You may disconnect a connected service through WATO or through the third-party provider. Disconnecting a service stops future access but may not automatically delete information that was previously imported into WATO.
Where you enter a flight number or use a flight-related feature, we may send relevant flight information to a flight-data provider.
This may include:
The flight-data provider may return information such as scheduled times, airport details, terminal, gate, delay or flight status.
Flight information may be incomplete, delayed or inaccurate and should be verified with the airline or airport.
Where you permit notifications, we may collect:
We use this information to send notifications about matters such as:
Push notifications may be delivered through services such as Apple Push Notification service, Google notification services or Expo's notification infrastructure.
You can disable push notifications through your device settings. Some essential account or legal notices may still be sent by email.
When you use WATO, we may automatically collect limited technical and usage information, including:
We use this information to operate, secure, troubleshoot and improve WATO.
Where analytics are used, we aim to limit the information collected to what is reasonably necessary to understand Service performance and feature usage.
When you contact us, we may collect:
We use this information to respond to your enquiry, investigate issues and improve support.
We collect information:
This includes information you enter when you:
We automatically receive limited technical, security, usage and notification information when you access or use WATO.
We may receive information about you when another user:
We may receive information from:
We use personal information to:
We do not sell your personal information.
We do not use the contents of private messages or private trip records for third-party targeted advertising.
Where UK or European data-protection law applies, we rely on one or more of the following lawful bases.
We process information where it is necessary to provide the Service you requested under the WATO Terms of Service.
This includes processing needed to:
We process certain information where it is necessary for our legitimate interests or those of another person, provided those interests are not overridden by your rights.
These interests include:
We rely on consent where required, including for:
You may withdraw consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.
Some features may stop working where the permission required to operate them is withdrawn.
We may process information where necessary to:
In rare circumstances, we may process or disclose information where necessary to protect someone's life or physical safety.
The information visible to another user depends on your relationship with that user and the relevant WATO feature.
Information that may be visible includes:
Your complete underlying trip record is not made publicly available.
Your private messages are not public, but they are visible to the intended recipient and may be reviewed by WATO where necessary for moderation, safety, support or legal compliance.
You should only submit information that you are comfortable sharing within the context of the relevant feature.
We may share personal information with the following recipients.
We use service providers such as Firebase and Google Cloud to provide:
We may use Apple, Google, Expo or related notification infrastructure to deliver push notifications.
Notification providers receive information necessary to route and deliver the notification to your device.
Stripe, Apple, Google or another authorised provider may process payments, subscriptions, receipts and refunds.
These providers handle payment information under their own privacy terms.
Where you use an integration, relevant information may be exchanged with the selected provider to import calendar information or retrieve flight data.
We may use providers that help us:
We may disclose limited information to:
These parties may only use information as necessary to provide their services and are subject to appropriate confidentiality obligations.
We may disclose information where we reasonably believe it is necessary to:
If MiddleMan Online Ltd or WATO is involved in a merger, acquisition, restructuring, financing, sale of assets or transfer of the Service, personal information may be disclosed to advisers, prospective purchasers or the successor organisation.
Any recipient will be required to handle personal information consistently with applicable data-protection law.
We do not sell or rent personal information to data brokers.
WATO is operated by a company registered in the United Kingdom and may be used in multiple countries.
Some of our service providers may process information in the United Kingdom, European Economic Area, United States or other countries.
These countries may have privacy laws that differ from those in your country.
Where data-protection law requires safeguards for an international transfer, we take steps designed to ensure that an appropriate transfer mechanism is used. Depending on the circumstances, this may include:
You may contact us for further information about safeguards relevant to your personal information.
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
The retention period depends on:
In general:
When you delete your account, we aim to delete or anonymise personal information held in our active production systems within 30 days, except where continued retention is reasonably necessary for:
Information may remain in encrypted backups for a limited period until those backups are overwritten through our normal backup cycle. Backup information is not used for ordinary business purposes.
Where information cannot be deleted immediately, we may restrict it from further use until deletion or anonymisation is completed.
You may request or initiate deletion of your WATO account through the Profile and Settings area where that functionality is available.
You may also contact info@middleman.online.
Deleting your account may result in the deletion or anonymisation of:
Some information may not be deleted immediately or may be retained under the exceptions described in this Privacy Policy.
Deleting your WATO account does not necessarily cancel a subscription processed by Apple, Google, Stripe or another payment provider. You may need to cancel the subscription separately through the provider that processed the purchase.
We use technical and organisational safeguards designed to protect personal information.
These safeguards may include:
Access to personal information is limited to personnel and service providers who reasonably require it for their work.
No system can be guaranteed to be completely secure. You are responsible for protecting your login credentials and device.
Contact us promptly if you believe your account or personal information has been compromised.
Depending on the feature, you may be able to:
You can manage device permissions through your device settings.
Disabling a permission may prevent the related feature from functioning.
You may unsubscribe from optional marketing emails through the unsubscribe control in the email or by contacting us.
You cannot opt out of essential account, safety, legal or transactional communications while maintaining an active account.
Depending on where you live and the law that applies, you may have rights concerning your personal information.
These may include the right to:
These rights are not absolute. A request may be limited where an exception applies, including where information must be retained for legal, safety, fraud-prevention or legal-claim purposes.
To exercise a privacy right, contact: info@middleman.online
Please include enough information for us to understand your request. We may need to verify your identity before disclosing, changing or deleting account information.
We will respond within the period required by applicable law.
You will not ordinarily be charged for exercising your rights. We may charge a reasonable fee or refuse a request where permitted by law and the request is manifestly unfounded, excessive or repetitive.
Please contact us first if you have a concern about how we handle personal information so that we have an opportunity to investigate and resolve it.
You may also have the right to complain to the data-protection authority in your country.
In the United Kingdom, the supervisory authority is the:
Information Commissioner's Office
You may contact the Information Commissioner's Office directly if you are dissatisfied with our response or believe your privacy rights have been infringed.
WATO is not intended for children under the age of 13.
We do not knowingly allow a child under 13 to create an account or knowingly collect personal information from a child under 13.
Where local law requires a higher minimum age or parental authorisation for the use of an online service, that requirement applies.
If you believe that a child has provided personal information to WATO contrary to these requirements, contact us at info@middleman.online.
We will investigate and take reasonable steps to delete the information and close the relevant account where appropriate.
Users must not use WATO to exploit, groom, endanger or inappropriately contact a child. Reports involving the potential safety of a child will be treated as urgent.
WATO does not require users to provide special-category or highly sensitive personal information as part of ordinary use.
You should avoid including information such as the following in public profile fields, community information or direct messages unless it is genuinely necessary and you understand the risks:
Travel dates and accommodation information can also create personal-safety risks. You should carefully consider what information you enter and who you connect with.
WATO uses automated systems to:
Overlap matching is intended to provide informational travel-coordination results. It does not make decisions that produce legal or similarly significant effects.
Content filters may automatically restrict content, but moderation or support review may be available where appropriate.
WATO may contain links to or integrations with third-party services.
When you interact with a third-party service, that provider may process information under its own privacy policy and terms.
We encourage you to review the third party's privacy information before connecting an account or providing information.
WATO is not responsible for the privacy practices of services we do not control.
We may update this Privacy Policy to reflect:
The latest version will display an updated “Last updated” date.
Where a change is material, we may notify you through WATO, by email or through another appropriate method.
Where required by law, we will request consent before using personal information for a materially different purpose.
For privacy questions, requests or complaints, contact:
MiddleMan Online Ltd
Company number: 15662625
Registered office: 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London, England, W1T 6EB
Email: info@middleman.online
For reports of objectionable content or abusive behaviour, use the reporting controls available within WATO.
Urgent safety or privacy concerns may also be sent to info@middleman.online.
Where someone is in immediate danger, contact the appropriate local emergency service.
© 2026 MiddleMan Online Ltd. All rights reserved.