Privacy Policy

Information we collect

• Account details such as email address, sign-in provider identifier, username, and profile image.
• Trip content such as trips, days, stops, notes, saved itineraries, collaboration activity, and in-app feedback.
• Trip documents and filenames you choose to upload. Every accepted collaborator on that trip can access them.
• If you choose Google Maps import, collection names and descriptions, saved-link titles and URLs, notes, and tags from the one-time Google saved.collections export. Waypoint filters the export on your device and adds only supported Google Maps places from the collections you select.
• Device and diagnostic information needed to support reliability, fraud prevention, and support workflows.
• Subscription and entitlement state needed to unlock paid features; App Store billing itself is handled by Apple.
• Safety reports, private account-block relationships, and moderation events needed to protect users.
• Aggregate website visits and basic technical information provided by Vercel Web Analytics.

Google Maps saved-collections import

Google provides a separate Data Portability export only when you explicitly connect Google Maps. This authorization is separate from Google Sign-In. Waypoint does not use it to access Gmail, contacts, reviews, Maps history, routes, or photos, and it does not continuously sync your Google account.

OAuth tokens and export-job state remain in the device Keychain only while the one-time copy is pending. Raw export archives are deleted after parsing. After a successful copy or cancellation, Waypoint resets the separate Google authorization and deletes its tokens and pending-job state. An encrypted local draft remains only until you import or cancel it; imported places then follow the retention rules for your private Waypoint lists.

How we use information

• Provide trip planning and collaboration features.
• Authenticate users and secure accounts.
• Sync and recover data where applicable.
• Process subscriptions and entitlements.
• Respond to support requests and improve reliability/security.
• Review safety reports, prevent abuse, and enforce Waypoint’s Terms.

How information is shared

We do not sell personal information.

• Service providers that help operate authentication, cloud sync, storage, support, diagnostics, and subscriptions.
• Collaborators you explicitly invite to shared trips or planning surfaces.
• Authorities, regulators, or courts when required by law or needed to protect users and the service.

These providers include Apple, Google/Firebase, Meta, Vercel, Namecheap, and Resend. Waypoint does not sell personal information, use it for targeted advertising, or track people across other companies’ apps or websites.

Retention and user choices

Account data is retained while your account is active and for a limited period afterward where needed for legal, security, billing, or operational reasons. When you delete your account, associated personal data is deleted or anonymized except where retention is required by law.

• Support correspondence is retained for up to 24 months.
• Security and abuse records are retained for up to 12 months unless an active investigation requires longer.
• Diagnostic and product-interaction information is retained for up to 90 days.
• Update profile information in-app.
• Delete your account in-app from Settings -> Account actions -> Delete Account.
• Request privacy support by emailing hello@getwaypointapp.com.

Children, security, and transfers

Waypoint is not directed to children under 13, or the minimum digital-consent age in your region.

No storage or transmission method is perfectly secure, but we apply reasonable technical and organizational safeguards.

Information may be processed in countries other than your own depending on infrastructure and support operations.

People in the European Economic Area may complain to their local supervisory authority or Portugal’s Comissão Nacional de Proteção de Dados.

Policy updates and contact

We may update this policy from time to time. Material changes are reflected by updating the last-updated date and, where appropriate, by providing notice in the app.

Privacy contact: hello@getwaypointapp.com
Controller: Pedro Antunes, Portugal