What is stored

Your Google account name, email address and profile picture URL, provided by Google when you sign in.
Your plan: company names, last day and start date, phases, tasks, priorities, due dates and any notes you write.
The email addresses you choose to share your plan with.
Your theme preference and interface settings, which stay in your browser and are never uploaded.

What is not stored

No password. Sign-in is handled by Google and Waypoint never sees your credentials.
No analytics, tracking pixels, advertising identifiers or third-party scripts.
No payment details. Waypoint is free and has no billing.
No uploaded files. Attachments are not supported.

Who can read your plan

Access is enforced by Firestore security rules running on Google's servers, not by the app in your browser. A modified client cannot read around them.

Only two parties can read a plan: the person who owns it, and any person whose verified email address the owner has added to the share list. Shared access is read-only and can be revoked at any time, which takes effect immediately.

Where it is stored

Data is held in Google Cloud Firestore in the United States multi-region, and the site is served by Firebase Hosting. Google acts as the infrastructure provider.

Deleting your data

Open the account menu and choose Delete my data. This permanently removes your plan document, including everything you shared, and signs you out. It cannot be undone, so export your plan first if you want a copy.

Removing the Waypoint app from your Google account settings revokes its access to your Google profile.

Changes

If this policy changes in a way that affects what is collected, the change will appear here with a new date at the top of the page.