Privacy Policy

Last updated: June 2026

Waypoint+ is built on the belief that your personal goals are yours. This policy explains clearly what we collect, why, and how it is protected.

1. Information We Collect

Account information

Your name, email address, and hashed password when you create an account.

Goal and plan data

The goals you enter, your answers to clarifying questions, and the plans generated for you. This is the core content of the Service.

Usage data

Which steps you complete, when you log in, and general usage patterns. This helps us improve the Service.

2. How We Use Your Information

  • To provide and personalize the Service, including generating and adapting your plans.
  • To maintain and secure your account.
  • To send transactional emails (account-related notifications only).
  • To improve the Service through aggregated, anonymised usage analysis.

We do not sell your personal data. We do not use your data to train AI models.

3. AI Processing — Important

Waypoint+ uses the Claude API, provided by Anthropic, PBC, to generate your goal plans. When you submit a goal or answer clarifying questions, that information is sent to Anthropic's API to produce your plan.

Anthropic processes this data under their own Privacy Policy. We recommend avoiding including sensitive personal information (such as medical details or financial account numbers) in your goals.

4. Data Storage and Security

Your data is stored in a PostgreSQL database hosted by Supabase, with servers located in the United States. We use industry-standard encryption for data in transit (TLS) and at rest. Passwords are hashed and never stored in plain text.

While we take security seriously, no system is completely immune to risk. Please use a strong, unique password for your account.

5. Third-Party Services

Anthropic (Claude API)

Used to generate and adapt your goal plans. Goal content is shared with this service.

Supabase

Database hosting. Your account and plan data is stored here.

Render

Application hosting. The Service runs on Render's infrastructure.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data.
  • Export your goal and plan data.

To exercise any of these rights, contact us at support@waypointplus.app. We will respond within 30 days.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data and goal content will be permanently deleted within 30 days. Anonymised usage statistics may be retained indefinitely.

8. Cookies

We use session cookies solely to keep you logged in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Children

The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice within the Service. The updated policy will be effective from the date it is posted.

11. Contact

Questions about this Privacy Policy? Contact us at support@waypointplus.app.