Privacy Policy

• Your account: your email address, your name, a salted hash of your password (never the password itself), your timezone and your display preferences.
• Your financial records: whatever you enter — accounts and their balances, transactions, budgets, recurring payments, cards and their limits, investments and trades, goals, and the people you record as sharing expenses with you.
• Your household: the households you belong to and the email addresses of people you invite to one.

Waypoint does not connect to your bank and never asks for bank logins, card numbers or account numbers. Every figure in it is one you entered yourself.

Only to provide the app: to sign you in, show your numbers on every device you use, and share a household with the people you invite. There is no advertising, no analytics or tracking software, and no profiling. Your data is never sold, rented or used to train anything.

Members of a household you belong to can see that household's shared accounts. Accounts and portfolios you mark as private are visible only to you, including in reports and exports.

The app runs on a rented server and a hosted PostgreSQL database, whose providers store the data on our behalf and may not use it for anything else. To value investments, the server looks up market prices and exchange rates by ticker symbol from Yahoo Finance. Those lookups contain only the symbol and a date, never anything about you.

The mobile apps keep your sign-in token in the device's secure keychain and a few display preferences on the device. If you turn on Face ID or fingerprint unlock, the check happens entirely on your device. Waypoint never receives biometric data.

For as long as you have an account. You can export everything as CSV at any time from Settings on the web.

In the iOS app, go to More ▸ Delete Account. This permanently deletes your login and every household that only you belong to, with all of its accounts, transactions and portfolios, straight away. It cannot be undone.

If you share a household with someone else, remove them from it (or ask them to remove you) first, so that deleting your account doesn't delete their data too. You can also email ivanleekaikiat@gmail.com from the address you signed up with and we will delete your account for you.

Waypoint is not intended for children under 13 and does not knowingly collect their data.

If this policy changes, the date at the top will change with it. Questions or requests go to ivanleekaikiat@gmail.com.