Waypoint is a cross-platform task manager built around one idea: do the work, don't manage the app. This policy explains what we collect to make that possible.
01 Information we collect
Account. Waypoint uses username + password authentication rather than email — we store your username and a securely hashed password, nothing else identifying.
Tasks & comments. The tasks you create, their tags, priority, and lifecycle state (Active, Suspended, Completed, Deleted), plus any timestamped comments you add.
Third-party holds. If you note that a task is "held" by someone else, that's stored as free text you type — it does not create an account or notify that person.
Device & diagnostic data. App version, rough device type, and crash logs (via Sentry) used only to catch and fix bugs.
02 How we use it
- Store and sync your tasks, tags, comments, and lifecycle state across devices.
- Authenticate you on sign-in.
- Diagnose crashes and fix bugs via Sentry error reports.
Your tasks are private to your account — we don't read them for advertising, and we don't sell your data.
03 Where it's stored
Waypoint runs on Supabase (hosted Postgres + Auth), with row-level security so only you can read or write your own tasks and comments. Data is encrypted in transit.
04 Your choices
- Delete a task at any time — deleted tasks move to a Deleted state before permanent removal.
- Request an export or full deletion of your account and data at any time — see contact below.
05 Children's privacy
Waypoint is not directed at children under 13, and we don't knowingly collect data from them.
06 Changes to this policy
If this policy changes meaningfully, we'll update the date above and, where required, notify you in-app.