Legal

Privacy Policy

Waypoint ADHD Organization · Effective date: July 1, 2026 · Last updated: July 1, 2026
The short version: Waypoint is built for ADHD brains, which means we take your trust seriously. We collect only what we need to run the app. Your location data never leaves your device. We don't sell your information to anyone. You can delete your account and all your data at any time. The details of exactly what we collect and why are below.
Table of contents
1 Who we are

Waypoint ADHD Organization (“Waypoint,” “we,” “our,” or “us”) is a mobile and desktop application designed to help individuals with ADHD manage tasks, time, territories of life, errands, and daily routines across iPhone, Mac, Android, Apple Watch, and CarPlay.

The app is owned and operated by Iraida Bernuy, an individual developer based in Georgia, United States. You can contact us at support@waypointapp.cc.

This Privacy Policy applies to the Waypoint mobile app, desktop app, Apple Watch app, and the contributor web view at app.waypointapp.cc, including the Drop Zone feature accessible at app.waypointapp.cc/drop/[token].

2 What information we collect

We collect information in two ways: information you give us directly, and information generated automatically when you use the app.

CategoryWhat it includesWhy we collect it
Account informationEmail address, display name, password (hashed — we never see it in plain text). Optionally: profile photo.To create and authenticate your account via Supabase Auth.
App contentWaypoint titles, notes, attachments, territory names, territory settings, recurring rules, delegate names, tags, orbit state, estimated time, deadlines.To store your tasks and life map so they sync across your devices.
Focus session dataSession start and end times, duration, whether a waypoint was completed, distraction type and timestamp (if you log a distraction).To show you your focus history and patterns in the Milestones screen.
Daily bearings & planning dataMorning bearing completion status, today's commitments, bearing schedule preferences, weekly map responses, monthly report reflection entries.To support your daily and weekly planning rituals.
Subscription dataSubscription status (free or paid), plan type (monthly or annual), entitlement status. We do not store your payment card details — those are handled entirely by Apple or Google.To determine which features you have access to via RevenueCat.
Drop Zone dataIf you receive items: the task title, note, urgency level, and sender name of items submitted to your Drop Zone. If you submit items as a contributor: your name (as you enter it), the task you submit, any note, and optionally a location trigger.To operate the Drop Zone feature — allowing trusted people to add to your task list.
Email alias contentSubject line and body of emails forwarded to your personal Waypoint email alias (e.g. you@waypointapp.cc). These are converted into backlog items.To create backlog items automatically from forwarded emails.
Travel partner dataPresence status (active/idle), and if you grant permission: a summary of today's plan and progress. This is shared only with users you have explicitly connected with as travel partners.To support the travel partner and live body double features.
Device & technical informationDevice model, operating system version, app version, IP address (collected by Cloudflare at the network level), push notification tokens.To deliver push notifications and diagnose technical issues.
Usage analyticsIn-app events such as feature use, screen views, session counts, and funnel behavior. Linked to your Mixpanel user ID (derived from your Supabase user ID).To understand how the app is used so we can improve it. See Section 6 for more.
3 Location data — special notice
📍 Your location never leaves your device
Waypoint processes all location data on-device only. Your GPS coordinates, geofence areas, and movement patterns are never transmitted to our servers, never stored in our database, and never shared with any third party — including Mixpanel, Supabase, or any analytics service.

Location features in Waypoint — including location triggers, errand mode, and departure/arrival detection — work entirely through your device's operating system (CoreLocation on iOS, Fused Location Provider on Android). The app uses this data only in the moment it needs to, to fire a notification or surface a relevant waypoint.

When you add a location trigger to a waypoint, the place name and general description (e.g. “Sunshine Dry Cleaners, Oak Ave”) may be stored as text in your waypoint record in Supabase — but the precise GPS coordinates used to define the geofence are stored locally on your device only.

When errand mode opens a route in Apple Maps or Google Maps, your location is shared with those mapping services according to their own privacy policies, not ours. Waypoint does not receive or retain any data from that handoff.

You can revoke location permission at any time in your device's Settings app. If you do, location triggers and errand mode will stop working, but all other app features remain fully functional.

4 How we use your information

We use the information we collect to:

We do not use your personal information for advertising. We do not build advertising profiles. We do not use your task content, notes, or reflections for any AI training.

5 How we share your information
We do not sell your personal information.
We never have and never will. We share data only in the limited circumstances described below.

With other users you choose: When you use travel partners, your presence status and plan summary are visible to users you have explicitly connected with. When you share a Drop Zone link, the person with that link can add items to your Drop Zone — they cannot see anything else about your account.

With service providers: We share data with the third-party services listed in Section 6 that help us operate the app. These providers are contractually required to use your data only to provide services to us and not for their own purposes.

For legal reasons: We may disclose information if we believe in good faith that it is necessary to comply with a legal obligation, protect the rights or safety of Waypoint users, or respond to a verified government request.

In a business transfer: If Waypoint is acquired, merged, or its assets are transferred, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

6 Third-party services

Waypoint uses the following third-party services to operate. Each link below goes to that company's own privacy policy.

Supabase
Our database, authentication, file storage, and real-time sync provider. Your account information, waypoints, territory settings, and all app content are stored on Supabase servers in the United States.supabase.com/privacy →
Mixpanel
Our analytics provider. Mixpanel receives in-app usage events (such as feature interactions and session data) linked to an anonymized user ID. Mixpanel does not receive your task content, notes, or personal writing. You can opt out of analytics tracking in Settings → Privacy within the app.mixpanel.com/legal/privacy-policy →
RevenueCat
Our subscription management provider. RevenueCat receives your subscription status, purchase history, and entitlement data. It does not receive your payment card information — that remains with Apple or Google. RevenueCat is used to verify your plan and unlock paid features.revenuecat.com/privacy →
Cloudflare
Our hosting, DNS, and email routing provider. The Waypoint website and contributor web view are hosted on Cloudflare Pages. Inbound emails to your Waypoint alias are processed through Cloudflare Email Routing before being converted into backlog items. Cloudflare may collect IP addresses and request metadata at the network level.cloudflare.com/privacypolicy →
Apple (APNs)
Apple Push Notification Service delivers push notifications to your iPhone, iPad, Mac, and Apple Watch. Apple receives a device push token to route notifications. Apple's own privacy policy governs this service.apple.com/legal/privacy →
Google (FCM)
Firebase Cloud Messaging delivers push notifications to Android devices. Google receives a device token to route notifications.policies.google.com/privacy →
Apple Maps & Google Maps
When you use errand mode, Waypoint opens your route in Apple Maps or Google Maps. At that point, your location and route data are handled by those apps under their own privacy policies. Waypoint does not receive or retain any data from this handoff.Google Maps privacy →
7 Data retention

We retain your data for as long as your account is active. If you cancel your paid subscription, your account remains active on the free plan and your data is fully preserved — nothing is deleted.

If you delete your account, we delete your personal information and app content from our active systems within 30 days. Some information may remain in encrypted backup archives for up to 90 days before being permanently purged.

Anonymized and aggregated analytics data (which cannot be used to identify you) may be retained indefinitely to help us understand long-term usage trends.

To delete your account, go to Settings → Account → Delete Account within the app, or email support@waypointapp.cc.

8 Your rights

Depending on where you live, you may have the following rights regarding your personal information. We honor all of these requests regardless of your location.

👁️
Right to access
You can request a copy of the personal information we hold about you. Email us at support@waypointapp.cc and we will provide it within 30 days.
✏️
Right to correction
You can update your name and email directly in Settings → Account. For other corrections, contact us.
🗑️
Right to deletion
You can delete your account and all associated data at any time from Settings → Account → Delete Account. We will complete deletion within 30 days.
📦
Right to data portability
You can export your data at any time from Settings → Account → Export My Data. We provide it in a standard format (JSON).
📊
Right to opt out of analytics
You can opt out of Mixpanel analytics tracking at any time in Settings → Privacy → Analytics. This does not affect any app functionality.
🚫
Right to object (GDPR)
If you are in the European Economic Area, you have the right to object to processing of your data where we rely on legitimate interests. Contact us to exercise this right.
🏷️
California residents (CCPA)
California residents have the right to know what personal information we collect and how it is used, the right to delete it, and the right to opt out of sale (we do not sell personal information). To exercise these rights, contact us at support@waypointapp.cc or use the in-app deletion option.

To exercise any of these rights, email support@waypointapp.cc with the subject line “Privacy Request.” We will respond within 30 days.

9 Children's privacy

Waypoint ADHD Organization is not directed at children under the age of 13 and we do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete that information promptly.

If you are a parent or guardian and believe your child under 13 has created a Waypoint account, please contact us at support@waypointapp.cc and we will take immediate action.

10 Cookies and the website

The Waypoint website and contributor web view at app.waypointapp.cc use cookies and similar technologies for the following purposes:

The Waypoint iOS, Android, macOS, and Windows apps do not use browser cookies. Cookie-based tracking applies only to the web experience at app.waypointapp.cc.

For full details, see our Cookie Policy.

11 Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Last updated” date at the top of this page and, for significant changes, by sending an in-app notification or email.

Your continued use of Waypoint after any changes become effective constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

We will never change this policy in a way that reduces your rights over your data without giving you at least 30 days' notice and the opportunity to delete your account before the change takes effect.

12 Contact us

If you have any questions about this Privacy Policy, want to exercise your rights, or have a concern about how your data is handled, please contact us:

Waypoint ADHD OrganizationWe read every message personally and respond within 48 hours on business days.