Privacy
Policy
How we collect, use, and protect your information when you use WAYPOINT.
We do not sell your personal information. This policy explains exactly what we collect and why — so you can make informed choices about using WAYPOINT.
Information We Collect
We collect the following categories of information when you use WAYPOINT:
- Email address
- Account credentials (via auth provider)
- Internal user ID
- Name or nickname
- Recovery start date
- Onboarding preferences
- Daily check-in responses
- Urge logs (triggers, emotions, notes)
- Weekly review responses
- Custom preference lists
- In-app contact messages
- Selected support topic
- Subscription status
- Entitlement metadata
- Purchase info via app stores
- Device/platform metadata
- Session-related app state
- Network/connectivity state
- Onboarding analytics (when enabled)
How We Use Information
We use your information to:
- Create and secure your account
- Provide personalized check-ins, recovery workflows, and reminders
- Save and sync your entries and preferences
- Generate in-app insights and weekly summaries
- Process and manage subscriptions and entitlements
- Respond to support requests
- Improve app performance, reliability, and onboarding experience
- Detect misuse and protect the service
Legal Bases (EEA/UK, if applicable)
Where required, we process data under one or more of the following legal bases:
Contract performance applies to providing the app features you request. Legitimate interests cover security, product improvement, and abuse prevention. Consent applies to optional features such as notifications where required by law.
Notifications and Permissions
WAYPOINT may request notification permissions to send scheduled reminders such as check-ins and weekly prompts.
On Android, the app may request permissions related to notifications, vibration, and exact alarm scheduling so reminders occur at your chosen time.
You can disable notifications at any time in your device settings.
How and Where Data Is Stored
Sharing of Information
We share information only as needed with service providers that process data on our behalf:
- Supabase — authentication, database, and backend operations
- RevenueCat — subscription and entitlement operations
- Apple App Store / Google Play — billing and subscription management
- Expo services — app infrastructure features such as notifications and platform functionality
We may also disclose information if required by law, legal process, or to protect rights, safety, and platform integrity.
Data Retention
We retain information for as long as needed to provide the service and for legitimate business and legal purposes, including security and compliance.
Account and app-content data are generally retained until account deletion, or as otherwise required by law.
Account Deletion and Your Rights
You can request deletion of your account directly from within the app settings. When deletion is processed, we will delete or de-identify personal information associated with your account, subject to legal or operational retention needs.
Depending on your region, you may have the following rights over your personal data:
To exercise any of these rights, contact us at contact@waypointapp.website or via the in-app contact form.
International Data Transfers
Your information may be processed in countries other than your own, where our service providers operate.
Where required by applicable law, we implement appropriate safeguards for any such international transfers.
Children's Privacy
WAYPOINT is not intended for children under 16 years old. We do not knowingly collect personal information from children below that age.
If you believe we have inadvertently collected data from a child under 16, please contact us immediately.
Security
We use reasonable technical and organizational safeguards to protect personal data, including authenticated access controls and encrypted network transport.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date and provide notice as required by law.
Contact Us
For privacy questions or to exercise your rights, reach out to us: