Privacy policy

Waypoint helps you understand your own money. To do that it reads your bank statements and bank alerts. This page says exactly what we keep, what we don't, and what you control.

The short version

• We never keep your statement files. They are read in memory and discarded; we keep the transaction lines and a fingerprint of the file so the same file isn't imported twice.
• We never sell your personal data. Not to banks, lenders, advertisers or data brokers.
• Anything shared beyond your own account is off until you switch it on, and you can switch it off at any time.
• You can download everything, or delete your account and everything in it, from Settings.

What we store

• Your name, email, home currency, time zone (taken from your browser, so your day and month start at the right time), and the country and city you choose to give us.
• Your accounts (name, bank, type, last four digits), transaction lines (date, description, amount, category), and what you create here: rules, budgets, goals, notes.
• Statement passwords only if you tick "Remember this password". They are encrypted with AES-256 and only used to open your own statements.
• What you do in the app (for example "imported a statement", "opened the home screen"), without amounts or merchants, so we can see which features help people.

Optional sharing (off by default)

• Improve categories for everyone: when you correct a merchant's category, the merchant name and the category you chose are shared. Nothing else: no amounts, no dates, not who you are. A merchant's shared category is only used once several people agree.
• Anonymous comparisons: your monthly spending per category is included in totals for your country, only ever shown as a rounded middle value across at least 25 people. Nobody can see your figures.

AI

If AI is on (Settings), uncertain transaction descriptions, amounts and monthly totals are sent to Anthropic's Claude to categorise them, answer your questions and write your monthly report. A PDF statement is sent to Claude when you choose “Read this PDF with Claude”, or when Waypoint's own reader can't read it (for a password-locked PDF, only its unlocked text is sent). Claude reads it and Waypoint keeps only the transaction lines, as with any upload. Anthropic does not use this data to train its models under its commercial terms. You can switch AI off; everything else keeps working.

Households, splits and challenges

• Household members only see accounts you mark as shared.
• A split's share link shows the title, date, total, each share and your first name. Nothing else.
• Challenge members see pass or fail and streak days. Never amounts or merchants.

Your rights

You can see, download, correct and delete your data at any time from Settings. Under the UAE's personal data protection law, the GDPR and similar laws, you can also ask us about how your data is handled. We keep a record of each consent you give or withdraw, with the date.

Cookies

Waypoint uses one cookie, to keep you signed in. There are no advertising or third-party tracking cookies. We count how the app is used (for example, that a statement was imported) inside Waypoint itself, never the contents of your transactions.

Security

Passwords are hashed with bcrypt. Sign-in attempts are rate-limited. Sessions are signed and can be ended by signing out; changing your password signs out every other device. Every record belongs to one account and every query is limited to it.