Privacy Policy
Effective October 7, 2026 · Version 1.0
- Your live location stays on your phone. It is only sent to the Waypoint server when you submit a road report.
- We store your email, your reports and your points. That’s it.
- No ads, no ad trackers, no analytics, and we never sell or rent your data.
- Other drivers see your reports, but never your name or email.
- You can download your data or delete your account at any time in Settings.
This policy explains how Waypoint (“Waypoint”, “we”, “us”) handles information when you use the Waypoint app and website at waypoint-nav.pages.dev (the “Service”). Waypoint is run by an individual developer, Logan K, based in Rhode Island, USA.
1. What we collect
Information you give us
- Account: your email address and a password. Passwords are stored by our account provider (Supabase) only as a one-way encrypted hash; we can never see them.
- Consent record: the date you agreed to these terms, which version you agreed to, and that you confirmed you are 13 or older.
- Road reports: when you report police, a crash, a hazard, a camera or similar, we store the report type, the location where you made it, your direction of travel, and the time.
- Votes: when you tap “Still there” or “Not there” on someone’s report.
- Flags and blocks: when you flag a report, we store which report, the reason you chose and the time. When you block a driver, we store that your account blocked theirs. Neither driver is told, and nobody sees who flagged or blocked whom.
- Points and counts: your points, how many reports you made and how many you confirmed.
Information that stays on your phone
These are kept in your browser’s storage on your device and are not uploaded to us:
- Your live GPS location, speed and heading while the app is open.
- Saved places (Home, Work, favorites) and recent searches.
- Your settings (map style, alerts, voice, layers) and an optional TomTom key if you add one.
- A cached copy of camera locations so the map loads fast.
- The sign-in token that keeps you logged in.
We use this device storage only so the app works. We do not use advertising cookies or cross-site tracking.
Information collected automatically
Like any website, the companies that host Waypoint (Cloudflare for the app, Supabase for accounts and reports) receive your IP address, browser type and the time of each request, and keep short-term security and server logs. We do not use these logs to profile you.
2. Location
- Why: to show where you are, give turn-by-turn directions, show nearby cameras and reports, and warn you before you pass a camera or reported hazard.
- When: only while Waypoint is open on your screen. Waypoint does not track you in the background and cannot run when it is closed.
- Where it goes: your precise location is processed on your phone. It leaves your phone only (a) when you submit a report, which stores that report’s location, and (b) as part of the map, search and routing requests described in section 4.
- Your choice: location is optional. You can say no, use Waypoint to browse the map and cameras, and turn location off any time in Settings → Privacy or in your phone’s settings.
We do not keep a history of your trips or routes on our server.
3. How we use information
- To create and secure your account and keep you signed in.
- To show your reports to other drivers nearby and keep reports accurate with votes.
- To award points and prevent spam (for example, a limit on how many reports one account can post per hour).
- To send account emails you ask for, such as a password reset or sign-up confirmation.
- To keep the Service safe, fix problems and enforce our Terms and Guidelines.
We do not use your information for advertising, and we do not make automated decisions about you that have legal or similarly significant effects.
4. Who sees or receives information
Other drivers
Signed-in drivers see active reports on the map: the type, location, direction, time and vote counts. Reports are shown without your name, email or account ID, and other drivers cannot see a list of your reports.
Service providers
We use these companies to run Waypoint. Some receive requests directly from your phone. Requests for map pictures, searches and routes include the area or addresses involved and your IP address, so those services can learn your approximate area. We send them only what is needed for the feature to work and round search locations to about 1 km.
| Provider | What for | What it receives |
|---|---|---|
| Supabase | Accounts, reports, camera list | Email, password hash, reports, votes, the map area you view |
| Cloudflare | Hosting the app | Standard web requests |
| OpenFreeMap | Street map | The map area you view |
| Esri (ArcGIS) | Satellite pictures; backup search and directions when the free services are busy | The map area you view and camera locations you open; for backup search and directions, what you type and your start and destination |
| Amazon Web Services | 3D terrain | The map area you view |
| Komoot Photon | Search and place names | What you type, a location rounded to ~1 km, places you drop a pin on |
| OSRM (project-osrm.org) | Directions | Your starting point and destination |
| OpenStreetMap / Overpass | Camera locations (backup) | The map area you view |
| Panoramax | Street photos of cameras | The camera location you open |
| TomTom | Live traffic (only if you add a key) | The map area you view |
| unpkg, jsDelivr | App code libraries | Standard web requests |
Links that open other apps or sites, like Google Street View or Mapillary, are governed by those sites’ own privacy policies.
Legal reasons
We may disclose information if required by law, subpoena or court order, or if we believe in good faith it is needed to protect someone’s safety. Because we don’t store trip history, there is very little we could provide. Where the law allows, we will try to tell you before disclosing your information.
No sale
We do not sell or rent personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined in California law.
If Waypoint is ever transferred to a new owner, this policy will continue to protect the information collected under it, and we will notify you first.
5. How long we keep it
- Reports disappear from the map when they expire (45 minutes for police up to 30 days for potholes and cameras), and are permanently deleted from our server one day after that. Votes and flags are deleted with the report.
- Your account (email, points, consent record and any drivers you blocked) is kept until you delete it.
- Data on your phone stays until you clear it in Settings, delete your account, or clear your browser data.
- Server logs kept by our hosting providers are kept for their standard periods, usually days to weeks.
6. Your choices and rights
- Download: Settings → Privacy → Download my data gives you a copy of your account data and the data stored on your phone.
- Delete: Settings → Account → Delete account permanently deletes your account, reports, votes and points from our server, and clears Waypoint data from your phone.
- Correct: you can remove your own reports at any time. Contact us to change your email.
- Location, search history: turn them off in Settings → Privacy.
Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas, Oregon or other US states, or the EU/UK), you may have rights to access, correct, delete or get a copy of your personal information, to opt out of sale, targeted advertising or profiling, and to appeal a decision we make about your request. Waypoint does none of the opt-out activities, and you can use the tools above or contact us to exercise any right. We will not treat you differently for using your rights. We may need to confirm you own the account before acting on a request. If we deny your request you can appeal by replying to our answer; if you are still unhappy you can contact your state attorney general.
Waypoint does not respond differently to “Do Not Track” browser signals because it does not track you across sites.
7. Security
Data is sent over encrypted HTTPS connections. Database rules make sure each person can only change their own account, reports and votes, and other drivers cannot see who made a report. No system is perfectly secure; if a breach affecting your information happens, we will notify you as required by law.
8. Children
Waypoint is not meant for children under 13, and you must confirm you are 13 or older to create an account. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.
9. Where data is stored
Waypoint is run from the United States. Our providers may store and process data in the United States and other countries. By using Waypoint you understand your information may be processed outside your home country.
10. Changes to this policy
If we make an important change, we will update the date above and ask you to review and accept the new version the next time you open Waypoint.
11. Contact
Questions or requests about your privacy: Waypoint support, waypoint.help.center@gmail.com. You can also delete your account and download your data yourself in Settings at any time. We aim to answer privacy requests within 45 days.