Way Point Privacy Policy

Effective date: August 20, 2026

Way Point operates the Way Point mobile application (the “App”). This Privacy Policy explains what information the App handles, why it is used, where it is stored, and the choices available to you.

1. Information the App handles

Information you create in the App

Way Point stores the information you choose to enter or create, including:

• Task names, notes, schedules, repeat settings, completion and progress history, colours, icons, and task attachment metadata such as file names.
• Task-related preferences, including alarms, alarm challenges, and notification choices.
• Gamification data, including XP, levels, streaks, and related history.
• Break days, sleep and wake preferences, auto-scheduling preferences, appearance settings, and other app preferences.
• An optional profile name and profile picture.
• An app-lock setting and a cryptographic hash of your PIN. Way Point does not store your PIN in readable form.

Account and technical information

If you choose to sign in with Google, Way Point uses Firebase Authentication and Google Sign-In. This provides Way Point with a Firebase user ID and may provide account information such as your Google account email address. Your email is used to identify the account selected during sign-in and account replacement warnings.

Way Point also generates a random installation ID. It is used only to manage cloud-sync ownership between your devices. It is not used for advertising.

Firebase and Google may process limited technical information needed to provide and secure sign-in and cloud services, such as IP address and user-agent information. Their handling of that information is governed by Google’s applicable privacy terms.

Super Focus information

If you enable Super Focus, Way Point uses Android Accessibility access to detect the foreground app package name so it can enforce the focus session. This information is processed and stored locally on your device for the active focus session. Way Point does not upload foreground app package names, accessibility events, or usage history to Firebase.

2. Where information is stored

On your device

You can use Way Point without signing in. In that case, your task and preference data remains on your device.

Way Point stores local app data such as tasks, schedules, task state, preferences, gamification progress, streaks, local profile files, local note attachments, custom alarm-sound files, alarm schedules, and active-session data on your device.

Custom alarm audio files and the contents of task-note attachments are stored locally and are not uploaded by Way Point’s cloud sync.

Firebase cloud sync

If you sign in and cloud sync succeeds, Way Point stores the following information in Cloud Firestore under your Firebase user ID:

• Tasks, schedules, task state, notes, and attachment metadata.
• Profile name and profile picture.
• Gamification progress and streaks.
• Break-day, notification, sleep/wake, appearance, app-lock, and other supported settings.
• A hash of your app-lock PIN.
• The random installation ID and limited sync-session metadata needed to coordinate sync.

Custom alarm audio files and task-note attachment contents are not synced. Custom alarm selections are replaced with built-in sounds before task data is uploaded.

Firebase Authentication and Cloud Firestore are provided by Google. Firebase Authentication is operated from the United States. Cloud Firestore may process data on Google infrastructure in locations selected for the Firebase project or otherwise permitted by Google.

3. How we use information

Way Point uses information only to:

• Provide task planning, scheduling, alarms, notifications, and Super Focus.
• Keep your progress, preferences, and profile available to you.
• Sync your information across your own signed-in devices when you choose to use cloud sync.
• Secure your account and app-lock feature.
• Respond to support requests you send us.

Way Point does not sell personal information. It does not include advertising SDKs, Firebase Analytics, Crashlytics, or third-party advertising trackers.

4. Permissions

Depending on the features you use and your Android version, Way Point may request permission for notifications, selected images or files, exact alarms, full-screen alarm alerts, battery-optimization settings, Do Not Disturb settings, display-over-other-apps, Accessibility access for Super Focus, and Usage Access settings. These permissions support the features described in the App.

Way Point does not use your location, contacts, microphone recordings, or camera recordings for its features. If you choose a profile image or note attachment, you select it from your device.

5. Sharing and disclosures

Way Point shares data with Google only as needed to provide Google Sign-In, Firebase Authentication, and Cloud Firestore cloud sync. We do not sell your data or share it with advertising networks or data brokers.

We may disclose information if required to comply with law, enforce rights, or protect the security of Way Point, users, or others.

6. Retention and deletion

Local data remains on your device until you delete it, delete the account data, clear app storage, or uninstall the App, depending on the data type.

When you use the in-app account-deletion feature, Way Point deletes the Firebase Authentication account, the associated registered Firestore user data, and account-scoped local data such as tasks, profile files, note attachments, cloud-sync backups, and the stored PIN hash. It also cancels and clears the deleted account’s scheduled alarms, notifications, snoozes, active sessions, missed-alarm records, and custom alarm audio files that are not still used by another local account. The deletion feature does not delete your Google Account itself.

A random device installation ID may remain after account deletion because it identifies the App installation rather than a Way Point account. Guest data and data belonging to other Way Point accounts on the same device are intentionally preserved. Clearing the App’s storage or uninstalling the App removes remaining local App data, subject to Android’s behavior.

Google/Firebase may retain certain service records and backups for limited periods under its own policies. Firebase states that, after a Firebase Authentication user is deleted, authentication information is removed from live and backup systems within up to 180 days; logged IP addresses may be retained for a few weeks.

7. Security

Way Point uses Firebase services that encrypt data in transit. Firebase Authentication and Cloud Firestore provide encryption at rest on Google’s infrastructure. On your device, Way Point stores the app-lock PIN only as a hash in secure storage. No security method is perfect, but we take reasonable steps to protect the information used by the App.

8. Children

Way Point is intended for users aged 13 and older. It is not designed for children under 13. In locations where a user under the applicable digital-consent age cannot consent on their own, they should use Way Point only with authorization from a parent or legal guardian. If you believe a child under 13 has provided personal information through Way Point, contact us so we can address the request.

9. Changes to this policy

We may update this Privacy Policy when Way Point’s data practices or legal requirements change. We will post the updated version at the same public policy link and revise the effective date.

10. Contact

For privacy questions, support, or deletion requests, contact: Hello.Waypoint.Support@gmail.com