Effective Date: August 5, 2026
This Privacy Policy describes how Waypoint ("we," "us," or "our") collects, uses, and shares information about you when you use the Waypoint mobile application and related services (collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
When you create an account, we collect:
As you use the Service, we collect:
When you generate personalized content, we collect:
We automatically collect:
We collect:
When you choose to use pronunciation grading or contact support, we may collect:
Pronunciation audio is processed to service the grading request and is not retained after that request. Pronunciation scores and learning results may be retained as part of your learning data.
We use the information we collect to:
We use third-party AI services to generate learning content and evaluate certain learner responses based on your inputs, preferences, and learning context. This processing is used to provide the requested learning feature. We do not permit these providers to use API data to train their general-purpose models.
AI-generated content may be cached and served to multiple users. This means:
We may use aggregated or de-identified interaction data to evaluate and improve Waypoint's learning systems and content quality. We do not use a learner's directly identifying account information to train a general-purpose AI model.
Our AI provider may retain API inputs and outputs for abuse monitoring for up to 30 days under its default service terms. Waypoint does not use that provider retention for advertising or to build advertising profiles.
We retain your account information and learning data as long as your account is active. This ensures continuity in your learning progress.
When you delete your account:
Deleted records can remain temporarily in access-restricted recovery systems before they expire automatically. Our current production recovery windows are:
Other encrypted backup copies may persist for up to 90 days after deletion requests are processed. Recovery copies are used only for disaster recovery and service integrity, not to personalize the Service or for advertising.
We retain minimized application and service logs for up to 30 days to operate, secure, and diagnose the Service. Google Cloud also retains required administrator and system-event audit logs for 400 days. Those required audit logs are access-restricted and cannot be deleted early as part of an individual account-deletion request. We do not use operational or audit logs for advertising or to build advertising profiles.
We share information with third-party service providers who help us operate the Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Firebase (Google) | Authentication, database, push notifications, and SDK operation | Account information, app identifiers, notification tokens, and operational data |
| Google Cloud | Infrastructure, storage, database, and analytics services | Account, learning, usage, and service data |
| OpenAI | Personalized content generation and learner-response evaluation | Prompts, learner responses, learning context, and generated output needed for the requested feature |
| Microsoft Azure | Pronunciation grading | Pronunciation audio and reference text submitted for grading |
| Apple and Google | Subscription billing | Product, purchase, and transaction records |
Apple and Google collect and process payment-card or bank details in their own store interfaces. Waypoint does not receive those payment details.
We may disclose information if required by law, legal process, or government request, or to protect our rights, privacy, safety, or property.
If Waypoint is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
We may share information with third parties when you give us explicit consent.
We implement industry-standard security measures to protect your information:
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
You can access your learning data and account information through the app settings.
You can update your profile information at any time in the app.
You can request deletion through the app or by following the instructions at support.waypointlanguage.com/delete-account. This will remove or de-identify your personal data as described in Section 4, subject to the limited retention described there.
You may request a copy of your data by contacting us at support@waypointlanguage.com.
You can manage push notification and reminder settings in the app.
Waypoint does not use advertising analytics or sell analytics data. We use product-interaction and operational data to provide, secure, personalize, and improve the Service. You may contact us with questions or objections about this processing.
Waypoint is intended for learners age 13 and older. We collect date of birth and country or region to apply the age gate and do not permit an account identified as belonging to a child under 13 to proceed into the Service. We do not knowingly collect personal information from children under 13 beyond the limited information needed to apply that gate. If we learn that we collected additional information from a child under 13, we will delete it promptly.
Learners ages 13 through 17 must designate a parent or legal guardian. Before the minor can use personalized AI features, the designated guardian must authenticate with a verified email address matching the address supplied by the learner and provide an explicit, versioned consent. The learner or guardian may revoke that consent. If consent is revoked, the learner cannot use features that require active guardian consent unless consent is granted again.
Teen learners retain rights over their personal information, including access, correction, export, and deletion rights described in this policy. A parent or legal guardian may contact us to ask about a teen's privacy, withdraw guardian consent, or request appropriate access or deletion. We may need to verify the requester's identity, relationship, and authority before acting. We explain our collection and use in language intended to be understandable to teen learners as well as adults.
If you are a parent or guardian and believe a child under 13 has provided us with personal information, please contact us at support@waypointlanguage.com.
Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws.
By using the Service, you consent to the transfer of your information to these countries. We take steps to ensure your information receives adequate protection.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
To exercise these rights, contact us at support@waypointlanguage.com.
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
Our legal bases for processing include:
To exercise your rights or for questions about our processing, contact us at support@waypointlanguage.com.
We may update this Privacy Policy from time to time. We will notify you of material changes by:
Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: support@waypointlanguage.com
Data Protection Inquiries: For data access or other privacy requests, email support@waypointlanguage.com with the subject line "Privacy Request." For account deletion, you may also follow the instructions at support.waypointlanguage.com/delete-account.
Last updated: August 30, 2026