Privacy

Last updated July 25, 2026.

Waypoint keeps your travel plans in one place. This page says exactly what it stores, what leaves the app, and how to get rid of all of it. Plain English, no hedging.

What we store

• Your account — a username, an optional email address, and your password. The password is stored only as a salted hash; nobody can read it back, including us.
• Your travel plans — the bookings you add: flights, stays, cars, rail, activities and the rest, with their times, places, confirmation codes, gates, seats and baggage state.
• What you paste or upload — confirmation emails, screenshots and PDFs are kept so a trip can be re-read later if the parser improves.
• Boarding passes you attach, including an airline-issued Wallet pass.
• Loyalty numbers you choose to save. Membership numbers only — Waypoint never asks for and never stores airline or hotel account passwords, and it does not log into those accounts or read your balances.
• Packing lists and trip notes you create.
• A push token, if you turn on notifications, so reminders can reach your device.

What leaves the app

Waypoint is not ad-supported. There are no advertising or analytics trackers in it, and your travel data is never sold, rented or shared for marketing. Data goes to exactly these places, and only for these reasons:

• Anthropic — when you paste a confirmation or upload a photo or PDF, that content is sent to Anthropic's Claude API to pull out the booking details. Nothing is sent until you ask for a parse. Anthropic processes it to return the extraction and does not use it to train their models.
• Open-Meteo — the destination city name of a trip, to fetch a forecast. No account details and nothing that identifies you.
• Google Fonts — pages load two typefaces from Google's font servers, which means Google sees your IP address as part of that request. The shared itinerary page also loads a stylesheet from a CDN.
• Google Maps — only when you tap Directions. The destination is in the link you open; nothing else is passed.
• Apple — if you add a pass to Apple Wallet, iOS handles it from there. If you enable notifications, Apple's push service delivers them.

Sharing a trip is your choice

A trip is private until you create a share link for it. That link holds a random token and anyone who has it can read that one itinerary without signing in, so treat it like a password. You can revoke it at any time from the trip, which makes the old link stop working immediately. Shared pages ask search engines not to index them.

Camera and photos

Both are optional and iOS asks you first. The camera and photo library are used only to capture a boarding pass or confirmation you point them at. Waypoint does not use your location.

In-app purchases

Trip Pass and Waypoint Pro are sold through Apple's In-App Purchase. Apple handles payment directly — Waypoint never sees or stores your card details. Waypoint's server receives the purchase confirmation (which product, when it renews or expires) so it can unlock the right features on your account; this is used only to run the app and is never sold or shared.

Deleting everything

Open Account and use Delete account. It removes your login, every trip and booking, uploaded passes, loyalty numbers, packing lists and any push token, straight away and for good. There is no waiting period and you do not have to email anyone. Deleting the app alone does not delete the account, since the data lives on the server.

Security and retention

Traffic is served over HTTPS and the session cookie is HTTP-only and restricted to this site. Your data is kept while your account exists and is deleted when you delete the account. No system is perfect, so please use a password you do not reuse elsewhere.

Children

Waypoint is meant for adults managing their own travel and is not directed at children under 13.

Changes and contact

If this policy changes in a way that matters, the date at the top changes and the new version appears here. Questions, or want your data removed by hand? Email salomon.david.alcantar@gmail.com.