Waypoint — Privacy Policy

Last updated: October 10, 2026

Waypoint ("we," "us," "the app") is operated by Arthvan Analytics Pvt Ltd, a company registered in India. We decide what Waypoint collects and why. This policy explains what we collect, why, how long we keep it, who we share it with, and what you can do about it.

What we collect

• Anonymous account — when you first open the app, we create an anonymous account for your device. We never ask for your name, email or phone number. The account has a fixed ID that stays the same from day to day; other people only ever see your daily name.
• Your mood and what you're looking for — the mood you pick when you enter, and what you want from a chat (to be heard, a fresh perspective, to listen, or a distraction). We use these to match you with someone.
• Content you post — text posts, polls, and voice recordings (up to 60 seconds), along with the mood or tag you choose.
• Moments (optional) — a picture you choose to share that exactly one other person can view once. See "Moments" below.
• Mood log (optional) — the moods you tap (for example "calm" or "frustrated") and the time. Only you can see it.
• Reactions, votes and saved posts — which posts you react to and how, your poll answers, and posts you save.
• Chat messages — sent in matched conversations, visible only to you and the other person.
• Chats with Mira — Mira is Waypoint's automated guide. What you write to Mira is stored like any other chat message and sent to our AI provider so Mira can reply.
• Chat feedback — an optional rating ("Good / Okay / Not great") after a conversation ends, used to improve matching.
• Daily Path answers — your answers to the daily question.
• Points and activity stats — tallied from posting and reacting, used for points and tiers.
• Invites — invite codes you share or redeem, so both people get their points.
• Reports and blocks — if you report or block someone, we record it so we can act on it.
• Feedback messages — anything you send through the in-app Feedback form.
• Push notification token — an ID for your device that lets us send you notifications (new match, message, reaction, Daily Path).
• Session records — when you open the app (at most once a day), we record your account ID, your IP address, your device's user agent, your platform (iOS or Android), the app version, and the time. We use these for security and to answer valid legal requests.
• Device identifier — on iOS, a random ID kept in your device's Keychain; on Android, the Android device ID. We store only a one-way hash (SHA-256) of it, never the ID itself, and use it only to stop accounts we have ejected from coming back on the same device.
• Crash and diagnostic logs — technical errors from the app and our servers, so we can find and fix problems.
• Safety records — screening results, reports and our decisions on them, and restricted copies of content that was removed or that you deleted.

What we don't collect

We do not collect your real name, phone number, email, or precise location. We do not access your contacts. We only use your camera or photo library when you choose to share a moment, and your microphone only when you record a voice post. We do not use an advertising identifier, and we do not track you across other companies' apps or websites.

Sensitive information

Waypoint is a place to talk about how you feel, so your posts, chats and mood log may reveal things about your mental health or private life. We use this only to run the features you choose, never for advertising, and you can delete it at any time. Please don't include details that identify you or anyone else.

How your identity works

Every day Waypoint gives you a new display name and avatar, generated automatically. You can set a custom name and avatar, which also expires after 24 hours. Other users see nothing that links your names from one day to the next. We can: everything you do is stored against your fixed account ID, which is how we run the app, enforce our rules, and answer legal requests.

Safety screening and enforcement

• Before anything is shown: text posts, poll questions, voice-post transcripts and moments (pictures) are screened by AI for threats, harassment, hate, sexual content, scams and encouragement of self-harm before anyone else sees them. If the screening service is down, text posts and polls are published and checked later; voice posts and pictures are not published until they have been checked.
• Chat messages are screened right after they are sent, so the other person may see a message before it is checked. Very short replies are not screened, but can always be reported.
• Reports are reviewed every hour by AI, and passed to a person when the case needs it.
• Removals and ejections are automated. Content that clearly breaks our rules is removed, and the account behind it may be ejected. We keep a record of ejected accounts with their device hash so they can't simply return.
• Ask for a human review. Automated decisions can be wrong. If you think something was removed or an account was ejected by mistake, email us and a person will look at it. Include as much as you can (what was removed, roughly when, and on which device) so we can find the account.

Voice posts

When you post a voice recording, our servers transcribe it, screen the transcript, and re-speak it in a synthetic character voice. Other users hear only the synthetic voice, and your original recording is deleted. If the conversion fails, the post is not published and your recording is deleted. The synthetic voice hides how you sound, but your words remain, so avoid details that identify you. The transcript is used to screen the post and to choose its tone of voice.

Moments

A moment is a picture that exactly one other person can view once. Before anyone can see it, it is screened by AI; pictures that appear to show anyone under 18, nudity, or graphic content are rejected and deleted straight away. The picture is deleted as soon as it has been viewed, or after 24 hours if nobody opens it. We keep a short record that the moment existed (who posted it, when, and whether it was viewed or rejected) for safety. That record is erased after 180 days.

Crisis-language detection

Text posts are checked automatically for language that suggests someone may be in crisis. If we find it, we show real helpline numbers before the post goes up. You can still choose to post. This check is automated and is not a substitute for professional support.

Why we're allowed to use your data

• Your consent — when you accept our Terms and this policy and choose to use a feature (posting, recording, sharing a moment, keeping a mood log, chatting with Mira, turning on notifications), you agree to us using the data that feature needs. You can withdraw consent at any time by deleting the content, turning the feature off, or deleting your account. Withdrawing doesn't undo what we did before.
• Running the service you asked for — we need your account ID, posts, chats and settings to make the app work.
• Keeping people safe — screening, reports, session records, device hashes and safety records exist to protect users and stop abuse.
• Legal duties — we keep some records, and share them with authorities, where the law requires it.

In India this processing is based on your consent and the legitimate uses allowed by the Digital Personal Data Protection Act, 2023. In the EU and UK it is based on consent, performance of our contract with you, our legitimate interest in keeping the service safe, and legal obligation.

How long we keep things

• Text posts and polls: kept until you delete them or your account. The Wall shows them for 30 days.
• Voice posts: deleted automatically after 7 days. The original recording is deleted as soon as it has been converted.
• Chat messages (including chats with Mira): kept until you delete your account. They are no longer shown in the app once the match ends.
• Moments: the picture is deleted once viewed, after 24 hours if nobody opens it, or straight away if screening rejects it. The record that it existed is erased after 180 days.
• Mood log: kept until you delete it or your account.
• Crash and diagnostic logs: 90 days.
• Session records, device hashes, safety records, and restricted copies of removed or deleted content: 180 days, then erased automatically. We keep them longer only if the law requires it or an investigation is open.
• Records of ejected accounts and their device hashes: kept as long as needed to keep those accounts out.

Who we share data with

• Supabase — hosts our database, file storage and servers. All app data is stored with Supabase in Seoul, South Korea.
• Anthropic (Claude) — its AI models receive the text of posts, polls, chat messages (with up to 3 earlier messages from the same chat for context), voice transcripts, and moment pictures, to screen them and to set the tone of voice posts. They also receive what you write to Mira so Mira can reply, text you ask to translate, and help write the daily question. We don't send your name (we don't have it).
• Google Cloud — Speech-to-Text transcribes voice recordings; Text-to-Speech, including Gemini voices, creates the synthetic voice.
• Apple, Google and Expo — deliver push notifications through APNs, FCM and Expo's notification service. They receive your push token and a short, general notification text.
• Netlify — hosts our website, including this page, and receives the IP address of anyone who visits it.
• NewsData.io — supplies the headlines in Explore. We don't send it anything about you.
• Authorities — we may disclose session records, safety records and content to law enforcement or regulators where the law requires it, or where we believe it's necessary to prevent serious harm.

We do not sell your data, and we do not use it for advertising.

Where your data goes

We are based in India. Your data is stored in South Korea (Supabase, Seoul) and processed by our providers in other countries, including the United States. When data leaves your country, we rely on [transfer safeguards — e.g. Standard Contractual Clauses / the providers' data processing terms; to be confirmed].

Delete your account

In the app: open Waypoint, go to My Waypoints, and tap "Delete my account and data". This permanently removes your posts, messages, reactions, votes, Daily Path answers, mood log, saved posts, moments, points, names, push token, feedback, invites and diagnostic logs, and deletes the login account itself. It can't be undone. If you open the app again afterwards, you start with a brand-new account.

By email: if you can't use the app (for example, you've uninstalled it), email sanjeevgulia@gmail.com with the subject "Delete my Waypoint account". Because accounts are anonymous, we may ask for details (roughly when you used the app and on which device) to find the right one.

What we keep: the safety archive and session and device records are kept for 180 days and then erased. Records of ejected accounts are kept as described above.

Your rights

You can delete any of your own posts at any time, block any user, and report content or messages. You can also ask us to:

• tell you what data we hold about you and who we've shared it with
• correct or complete data that is wrong
• erase your data (see "Delete your account" above)
• give you a copy of your data, or stop or limit how we use it, where your local law gives you that right
• let someone you nominate exercise these rights if you die or can't act for yourself

Email the Grievance Officer below. If you're not happy with our answer, you can complain to your data protection authority: the Data Protection Board of India; your national data protection authority in the EU; the Information Commissioner's Office (ICO) in the UK; or the Nigeria Data Protection Commission (NDPC) in Nigeria.

Because we don't track you across other sites or apps, browser "Do Not Track" signals don't change anything we do.

Age requirement

Waypoint is only for people aged 18 and over. We do not knowingly collect information from anyone under 18. See our Child Safety Standards for more.

Changes to this policy

If we change this policy in a significant way, we'll tell you in the app. The date at the top shows when it was last updated.

Grievance Officer

Sanjeev Gulia, Grievance Officer, Arthvan Analytics Pvt Ltd
Email: sanjeevgulia@gmail.com
CIN: U82990DL2026PTC470520

We acknowledge complaints within 24 hours and resolve them within 15 days.

Contact

Privacy and compliance questions: sanjeevgulia@gmail.com

General questions: bharatia.smile@gmail.com