Privacy

Privacy Policy

Last updated June 18, 2026

Waypoint is built to be the calm, private place you keep what you got done and what you parked. Your notes are yours. This page explains, in plain language, what we collect and why.

What we store

Your account. When you sign in with Google or an email link, we store your email address and a user id so we can recognize you and sync across your devices.
Your notes. The waypoints you write or confirm — the short lines, the next moves, the groups and threads you tag them with. These are stored so you can reach them from any device.
Connection tokens. If you generate a token to connect a local tool, we store only a one-way hash of it (never the token itself) plus a name and the time it was last used.

What we don’t do

We don’t sell your data, ever.
We don’t show you ads or share your notes with advertisers.
We don’t read your notes to train models. Your notes are sent to an AI model only when you explicitly ask Waypoint to help (for example, to draft a summary), and only for that request.

Where it lives

Waypoint runs on Supabase (database and authentication) and Cloudflare (hosting), both of which keep your data encrypted in transit and at rest. Access is scoped so that only you can read your own notes.

Your choices

You can sign out at any time.
You can revoke any connection token instantly from Settings → Integrations.
You can ask us to delete your account and everything in it by emailing the address below.

Contact

Questions about privacy? Email hello@thewaypoint.work.