Privacy Policy

• Your name and email, so you can sign in and the group knows who you are.
• A phone number and Venmo username, if you add them — both optional, both only shown to people on your trips, and both removable from your profile at any time. The phone number is there so the group can reach you; we never send you text messages. The Venmo username only builds a payment link — Waypoint never moves money.
• What you add to a trip — details, RSVPs, votes, comments, updates, schedule items, expenses, places, and links to photo albums or maps.
• Email addresses of people you invite. When an organizer invites someone, we store that address and email them the invite, even if they've never used Waypoint.
• Purchase records — what you bought, when, and how much. Your card details go straight to Stripe; we never see or store them.
• How the product gets used — for example, that a trip was created or an invite was answered. We record this in our own database, linked to your account, to understand what's working. There are no third-party analytics or advertising trackers.

We set one cookie: it keeps you signed in. That's it — no advertising or tracking cookies.

• To run Waypoint and show each trip to the people on it
• To send the emails the product depends on: sign-in links, invites, and trip reminders
• To process payments and give you what you paid for
• To understand how Waypoint is used, so we can improve it
• To keep the service secure and prevent abuse

We don't sell your information, and we don't use it for advertising.

People on your trip can see what you post there, your RSVP, and your name. Anyone with a trip's invite link can see its pitch page, including the names of people who've said they're in.

Companies that run parts of Waypoint for us, only as much as they need to do that job:

• Vercel — hosts the website
• Supabase — stores the database
• Resend — delivers our emails
• Stripe — processes payments

We may also share information when the law requires it, or to protect people's safety.

Maps, photo albums, and other links on a trip open in those companies' own apps and websites. We don't send them your information, but once you tap through, their privacy policies apply.

The emails we send are about trips you're part of: sign-in links, invites, and reminders when something needs your answer. Automatic reminders are capped at one email a day across all your trips. Organizers can also send you an invite or an occasional nudge. We don't send marketing email.

To stop getting a trip's emails, answer “Can't make it” or ask the organizer to remove you. You can also email us and we'll take care of it.

We keep your information for as long as your account or your trips exist. Organizers can delete a trip at any time, which deletes everything on it.

To delete your account, or to get a copy of your information, email hello@waypointapp.cloud. We'll handle it within 30 days. We may keep purchase records longer where tax or accounting law requires it.

Your information is stored in the United States. Connections are encrypted, sign-in links expire after 15 minutes and work only once, and access to the database is limited.

Waypoint isn't meant for children under 13, and we don't knowingly collect their information. Plenty of trips include kids — but they're names on a list a grown-up typed, not accounts. If you believe a child under 13 has an account, email us at hello@waypointapp.cloud and we'll delete it.

If we make a meaningful change, we'll update the date above and let account holders know by email. Questions or requests: hello@waypointapp.cloud. The rules for using Waypoint are in the Terms of Service.