Wayfare makes no network request of any kind. Not for exchange rates, not for analytics, not for anything. It connects to no bank, asks for no permissions and sends nothing anywhere. This page says exactly what that means and how each sentence is checked.
Most apps in this category fetch a live exchange rate, and many connect to your accounts. Either one makes where you are going, and when, readable by whoever operates the service. Wayfare cannot do either: there is no network code of any kind in it, and the build fails if URLSession, URLRequest, CFNetwork, NWConnection, Network, StoreKit, CLLocationManager, FinanceKit or ASWebAuthenticationSession appears in the sources.
The exchange rate comes from you: you note the rate you saw and the date you saw it. With fewer than four notes the app says the rate is not yet in the range, rather than assuming a currency does not move. Paying that cost honestly is what buys the absence of a network.
The trip name, the cost items you entered as ranges, the balance you typed, your deposits with their dates, and the exchange-rate notes you wrote down. All of it is one file inside this app on this device. Deleting the app deletes all of it, because there is nowhere else it exists.
There is no bank account, no card, no transaction record and no location. There is no field for any of them. The balance is a number you type, not a number anything reads.
One line, and only if you have a paired Apple Watch with the Wayfare watch app: the earliest and latest month, the most likely month, the cost range, how many complete months went into the answer, and whether the exchange rate could be measured. Your cost items, deposits and rate notes never go. That line travels over Apple’s own device link between your phone and your watch and does not reach the internet. If you have no watch, nothing leaves the device at all.
Each claim above corresponds to a check that runs on every build and fails the build if the claim stops being true. The source is scanned with comments stripped for the network and finance symbols listed above, separately for CNContact, CNContactStore, ASIdentifierManager, identifierForVendor and ATTrackingManager. Every permission key that must be absent is checked for absence. A privacy promise nobody measures is worse than none at all, because people rely on it.
The store text says the range holds at least nine times out of ten. That sentence is backed by a measurement file in the source, produced by simulation across 4 to 48 months of history and every level of month-to-month unevenness, and re-measured on data the correction had never seen. The build reads that file and fails if the worst cell falls below 90%. Worst cell today: 90.2%.
Wayfare is a measuring tool. It reports an interval computed from numbers you typed in and never recommends an action, a product, a provider or an amount. It is not affiliated with any bank, broker or lender, and it is not a regulated financial service.
Wayfare contains no user-generated content that anyone else can see, no messaging, no web browsing and no advertising. It has nothing to collect from anyone, of any age. Rated 4+.
If any of this ever changes, this page changes with the release that changes it, and the corresponding build gate changes too — they cannot drift apart.
Questions: hello@norea.studio.