Your information

Privacy policy

Effective October 11, 2026 · Developer: Ge Ruyang

This policy describes the current Waypoint iOS app and this support website. Contact 15381375469@163.com with privacy questions or requests.

Tasks and local storage

Task titles, notes, place names, coordinates, scheduled times, time zones and completion status are stored in the app’s private storage on your device. Waypoint does not operate a task-storage server or require an app account. Device or iCloud backups may include app data according to your Apple backup settings; Waypoint does not implement its own cloud sync.

Maps, location and weather

Map display, place searches, address lookups and route estimates use Apple services. Searches and selected locations are sent to Apple as needed for these features. Current device location is accessed only after you grant the relevant iOS permission and request location functionality. Manual map selection and search are available without that permission.

Apple Weather receives coordinates for weather requests. Weather results are cached temporarily in memory. These Apple services process data under Apple’s policies; see Apple’s privacy policy. The app does not use advertising tracking or sell your data.

Optional AI planning

AI planning runs only after you select tasks, review the disclosure for your chosen provider and tap “Agree and send.” The request includes selected titles, place names, start times, scheduling windows, durations and flexibility, together with newly generated identifiers used only for that request. The app does not send the stable UUIDs stored with your tasks; it maps the response identifiers back to your tasks locally. It does not include task notes or latitude and longitude. A place name may nevertheless be a complete address or precise point of interest, and titles can reveal sensitive information. Review selected tasks before sending.

The first release supports GLM/BigModel, Alibaba Cloud Qwen, DeepSeek and OpenAI. Requests go directly from your device to the selected provider, authenticated with your provider API key. The provider can receive your IP address and account-linked request information and may retain prompts, responses or service logs under its API policy, account settings and contract. Temporary request identifiers do not make these contents anonymous. Waypoint cannot verify your provider’s billing, data-sharing or retention settings. Deleting a local task or API key does not delete requests or logs already held by a provider.

• OpenAI: Waypoint sends Responses API requests with store: false to avoid requesting stored response application state. This does not establish Zero Data Retention or remove all safety logs and caches. API content is not used for training by default unless you opt to share it; standard abuse-monitoring logs may be retained for up to 30 days. Account-specific controls and exceptions are described in OpenAI’s API data controls.
• Alibaba Cloud Qwen: You choose Singapore, Beijing or Virginia endpoints. The access or storage region does not necessarily limit where inference occurs; some US-region models may use global inference. International standard retention can be up to 30 days, with legal or security exceptions. Zero Data Retention requires an eligible account, region, workspace and supported model; selecting Singapore alone does not enable it, and international guarantees must not be assumed for Beijing. Model Studio also keeps default audit logs of model calls, including the API key ID, request ID and time, model, token usage, response latency, status and errors, associated with your provider account or workspace. These logs support service monitoring and troubleshooting; full prompt and response inference logs require a separate account setting. See Model Studio monitoring and audit logs. Review the Model Studio retention policy and regions and endpoints for your account.
• GLM/BigModel and DeepSeek: The app currently uses open.bigmodel.cn and api.deepseek.com, respectively. These services may process or store information in China, so sending from outside mainland China (CN) may involve a cross-border transfer. Waypoint has not established a fixed API retention period, Zero Data Retention or a training exclusion for these accounts. DeepSeek’s Open Platform terms incorporate its privacy policy for your API account. That policy describes deriving approximate location from the IP address used to access its service for security and location-related requests, and includes location information in its service-improvement purposes. DeepSeek’s policy also describes automatically assigning device and user identifiers and using device and network information for service operations and improvement. These are provider-side identifiers covered by its policy; Waypoint does not send an advertising identifier such as IDFA, and has not verified that a new identifier is created for each API request. This applies to provider processing; Waypoint still has its own disclosure obligations. Review the applicable account contract and the BigModel privacy policy or DeepSeek privacy policy.

Refreshing an authenticated model list sends credentials and ordinary request information to the selected provider, but no tasks. GLM model discovery reads its public documentation without sending your key or tasks. Do not send information you are not authorized to share.

OpenAI regional availability checks

OpenAI is available only after both your physical-country and network-country results have known country codes other than CN (mainland China). When you open AI settings, the app checks regional availability only if you have already granted iOS location permission. It does not request new location permission from that screen. Your device location is used with Apple reverse geocoding to determine a country. Map search and manual task selection remain available without granting device-location permission.

The app calls Country.is over HTTPS to look up the country of your network’s exit IP. This service receives that IP and ordinary connection/request information, but not your tasks, API keys or device coordinates. An IP-derived country is an estimate of the network endpoint, not proof of your physical location. Country.is states that it does not log requests; Waypoint does not independently verify all infrastructure retention and does not promise that a third party never retains information.

If either country is mainland China (CN), unknown or unavailable, OpenAI stays hidden and its requests are blocked. Permission denial, connectivity failures and lookup errors can prevent access. Other providers, local planning and exports remain available under their existing access rules. This check does not guarantee provider-account eligibility or service availability.

API keys and preferences

API keys are stored in the iOS Keychain with device-only accessibility, available when the device is unlocked. Keys are sent only to the relevant configured provider to authenticate requests. You can delete a provider key from AI settings. Keychain entries may survive app removal, so delete saved keys in the app before uninstalling if you want them removed. Other preferences are stored locally.

Notifications and purchases

Task reminders use iOS local notifications. Their titles and place names may be visible on your lock screen according to your notification preview settings. Permission is requested only after you choose to enable notifications.

Apple processes purchases and payment details. Waypoint reads verified transaction and subscription information to determine access; it does not receive your payment-card details. Apple may retain transaction records independently of app deletion.

Exports, deletion and retention

You can delete tasks in the app. Exporting copies task details, including notes and locations, to the clipboard or a file you choose to share; the destination app’s policies then apply. Temporary share files are removed after the share sheet closes. Files left by an interrupted share are cleaned up during a later export. The system may also remove temporary storage. Files you save elsewhere remain until you delete them.

Removing the app generally removes its local task files. Backups, saved exports, Keychain items, Apple transaction records and data already sent to an AI provider may remain under the controls described above. We cannot delete data stored only on your device or in a provider’s account on your behalf.

Support and this website

If you contact the support email, the developer receives your email address and whatever you choose to send. These messages are used to respond to your request and retained while needed to handle the issue and related follow-up. You can request deletion of support correspondence; legal or security requirements may affect what can be removed.

This website has no analytics scripts, advertising, forms or cookies added by the developer. It is hosted by GitHub Pages, whose infrastructure may process request information such as IP addresses for hosting and security. See the GitHub privacy statement.

Changes and requests

Material changes will be reflected here with a new effective date. Depending on your location, you may have rights concerning information held by the developer or service providers. Contact the support email for information the developer holds, and the relevant provider for information held in its account.