Privacy policy
Privacy Policy
Last updated August 4, 2026 · Version 2026-08-04
Draft policy, not yet attorney-reviewed
What we collect
To run Waypost we store account details, route purchases, subscription state, vehicle profiles, route progress, GPS check-in coordinates, Trail Ledger handoffs, reports, reviews, and creator payout state. Route files and handoff media are private storage assets. Payment details are handled by Stripe; Waypost stores Stripe identifiers and entitlement state, not full card numbers.
Where you've been: how we handle location data
When you check in at the start of a route, at a checkpoint, or at the finish, your device sends us your coordinates at that moment. We use them for exactly one thing: confirming you were actually there, so the route can be marked complete and the Trail Ledger can unlock.
We keep those raw coordinates for 90 days, then we delete them.After that, all we keep is the fact that you completed the route and the date you did it — not where your vehicle was. That's enough to keep your Trail Ledger access, your library, and your achievements working permanently. We do not keep a running history of your movements, we do not track you between check-ins, and we do not sell or share your location data with advertisers or data brokers.
You can ask us to delete your location data sooner than 90 days. Doing so may mean we can't verify a route you're partway through, so we'll tell you what you'd lose before we do it.
If you're in California, precise location is treated as “sensitive personal information” under state law, and you have the right to tell us to limit how we use it. If you're in the EU or UK, our legal basis for collecting these coordinates is performance of our contract with you — verifying completion is the service you signed up for — and you have the rights described below.
What we keep, and for how long
| Data | Retention |
|---|---|
| Raw GPS check-in coordinates | 90 days from check-in, then deleted |
| Completion record (that you finished a route, and when) | Life of account |
| Trail Ledger handoff entries | Persist after account deletion, with identifying details removed |
| Account, vehicle profile, purchases, subscription state | Life of account, plus legally required tax/financial retention after closure |
Deleting your account and your Trail Ledger entries
When you delete your account, we remove your profile, vehicle data, and any remaining location data. Your Trail Ledger entries are written for future travelers who rely on them, so instead of deleting that text outright, we strip your account link, display name, and photo metadata from it and keep the message itself. We tell you this before you write your first handoff, so it's an informed choice from the start.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain uses of it. To exercise any of these rights, contact us — see the Terms of Use for how.
Data we don't fully cover yet
Pending attorney review.We have not yet documented an international data-transfer mechanism for EU/UK user data processed on US infrastructure (Supabase, Stripe), and we have not yet confirmed whether an EU representative is required under GDPR Article 27. Both are standard requirements for a product serving EU users, not exotic ones, and both need to be resolved before this policy is final. We're naming the gap here rather than implying it's handled.