Privacy policy
Waypoint is a cross-platform task manager built around one idea: do the work, don't manage the app. This policy explains what we collect to make that possible.
01 Information we collect
Account. Waypoint uses username + password authentication rather than email — we store your username and a securely hashed password, nothing else identifying.
Tasks & comments. The tasks you create, their tags, priority, and lifecycle state (Active, Suspended, Completed, Deleted), plus any timestamped comments you add.
Third-party holds. If you note that a task is "held" by someone else, that's stored as free text you type — it does not create an account or notify that person.
Device & diagnostic data. App version, rough device type, and crash logs (via Sentry) used only to catch and fix bugs.
Advertising & purchase data. If ads are shown (see below), Google AdMob may collect an advertising identifier and device/network information to select and measure ads. If you buy Remove Ads, Google Play Billing handles the transaction and we read back only your purchase record — never any payment details.
02 How we use it
- Store and sync your tasks, tags, comments, and lifecycle state across devices.
- Authenticate you on sign-in.
- Diagnose crashes and fix bugs via Sentry error reports.
- Show a banner ad, unless you've purchased Remove Ads.
Your tasks are private to your account — we don't read your task content for advertising, and we don't sell your data.
03 Where it's stored
Waypoint runs on Supabase (hosted Postgres + Auth), with row-level security so only you can read or write your own tasks and comments. Data is encrypted in transit.
04 Ads & in-app purchases
Ads. Waypoint shows a banner ad served by Google AdMob unless you've bought Remove Ads. AdMob may use an advertising identifier for ad selection and measurement, under Google's own ads policy — we don't see or store your ad interaction data ourselves.
Remove Ads. This is a one-time purchase processed entirely by Google Play Billing. Your card details go directly to Google — Waypoint never receives them. We only read your purchase record back from Google Play, which is also why the purchase survives a reinstall on the same Google account automatically.
05 Your choices
- Delete a task at any time — deleted tasks move to a Deleted state before permanent removal.
- Restore a past purchase from Settings if Remove Ads doesn't carry over automatically.
- Request an export or full deletion of your account and data at any time — see contact below.
06 Children's privacy
Waypoint is not directed at children under 13, and we don't knowingly collect data from them. Ads shown in the app are not served using child-directed treatment.
07 This website
This website (not the app) measures how visitors use devindi.in: pages viewed, the site that linked you here, clicks, how far you scroll, time on each page, and your device type, browser, language and time zone. Some visits are saved as an anonymous replay of scrolling, mouse movement and clicks; anything typed into a form is hidden before it is saved. A random ID is kept in your browser to tell visits apart. We don't store your IP address, don't use advertising trackers, and never sell or share this data; it stays in our own database (hosted by Supabase). If your browser sends Do Not Track or Global Privacy Control, none of this runs.
08 Changes to this policy
If this policy changes meaningfully, we'll update the date above and, where required, notify you in-app.