Privacy Policy

What we collect

For your own account: your name, email, and an optional avatar and timezone. Optionally, a phone number and emergency contact.

For a roster your organization manages: names, and optionally an email address, for each person on the roster, plus which groups, households, and schedules they belong to and how they've responded to events. We don't collect a child's date of birth or any other identifying information beyond what an organizer chooses to enter.

Children never provide their own data

A child's record on Waypoint is created and maintained entirely by adults — organizers and parents. Children never create an account, sign in, or enter information themselves. There is no mechanism for a child to interact with Waypoint directly.

Who can see what

An organization's roster, group, and schedule structure is visible to that organization's own staff. A parent only gains visibility into a specific child's data once an organizer places that child in a household the parent has claimed — visibility is never automatic just from being in the same organization, group, or even the same household as someone else. Contact details (phone, emergency contact) are visible only to organizers of a connected organization, never to other parents.

How data moves between organizations

Each organization owns its own copy of a person's record. A parent connected to multiple organizations (a school and a sports club, for example) sees a unified view, but the two organizations never automatically share or merge that data with each other.

Where data is stored

Waypoint is built on Supabase (hosted Postgres) for data storage and authentication. We don't sell personal data or use it for advertising.

Your choices, and what “delete” actually does

You can review and update your own profile and contact details at any time from your Profile page, and request deletion of your own account data from the same page. An organization's roster records are controlled by that organization; contact them directly to request a correction or removal of a roster entry.

Deleting your account removes your personal information — name, avatar, contact details, and any private records you kept outside an organization — and disconnects your account from every organization roster it was linked to. It doesn't retroactively erase things you did while using Waypoint: messages you sent remain visible to the people you sent them to, and schedules, groups, or other content you created while helping run an organization remain part of that organization's records. In both cases, that content is no longer identifiable as yours once your account is deleted.

For schools and school-affiliated organizations

If your organization is a school or otherwise subject to FERPA or a state student-privacy law, Waypoint acts as a service provider processing data on your behalf and under your direction — this policy doesn't replace a data-processing agreement your organization may need in place.

Contact

Questions about this policy can be sent to the address listed in your organization's agreement with Waypoint, or to the account that invited you.