Privacy Policy

Last updated 17 August 2026. This explains exactly what Waymark collects, why, and who can see it. Waymark has no advertising, no analytics, and no third-party trackers of any kind.

Account information

When you create an account we store your email address and a display name. Your password is handled by our authentication provider and is stored only as a salted hash — nobody at Waymark can read it.

If you upload a profile photo it is stored in our file storage and is visible to people you are friends with or share a group with.

Health and fitness data

On Android, Waymark reads your step count and your sleep duration from Health Connect, with your explicit permission. You can withdraw either permission at any time in Health Connect, and Waymark will stop reading that data immediately.

From your steps we derive and store a daily summary: steps, distance, calories, active minutes and floors climbed, one row per day. This is what powers the home screen rings, the weekly and monthly charts, and your streak.

We never use health data for advertising, we never sell it, and we do not share it with any third party. It is used only to show you your own activity and, where you choose to, to compare totals with friends and groups you have joined.

Location data

While you are recording a route-based activity — a run, walk, ride, hike, trail run, climb or ski — Waymark reads your precise GPS location to draw your route and measure distance and elevation gain. Recording continues if you lock your screen or switch apps, so a run still records with the phone in your pocket. Android shows a permanent notification for the whole time this is happening, and it stops the moment you finish or leave the activity.

Waymark does not request background location permission. It can only read your location during an activity you started yourself — never when you are not recording, and never when the app is closed.

The route you record is stored as a list of coordinates with timestamps and elevations, together with the geographic bounding box of the route. If you choose to share an activity or post it as a nearby route, the people or groups you share it with can see that route on a map.

Map imagery comes from OpenTopoMap. Requesting map tiles necessarily tells OpenTopoMap which area of the world you are looking at, and your device makes those requests directly. We do not send your identity or your recorded route to them.

Activities and routes

For each activity you save we store its type, distance, duration, date, elevation gain, whether you marked it a favourite, and any title or note you write. If you import a GPX file, we store the track, waypoints and description it contains.

Social features

We store your friend connections, the groups you belong to, and the messages you send in Waymark chats — including routes you share into a chat. Messages are visible to the other participants of that conversation.

Friends and group members can see your display name, profile photo, and your daily and weekly activity totals. They cannot see your notes, your individual routes unless you share them, or your account email.

Who we share data with

Our backend — database, authentication, file storage and realtime messaging — is provided by Supabase, which processes this data on our behalf and does not use it for its own purposes.

Map tiles are served by OpenTopoMap, as described above.

That is the complete list. We do not sell your data, we do not share it with advertisers or data brokers, and we do not use it to train machine-learning models.

Where your data is kept and for how long

Your data is stored on our backend provider’s servers and is retained until you delete it or delete your account.

Deleting an activity removes it and its recorded route. Deleting your account removes your profile, goals, daily summaries, activities, routes, friend connections and group memberships. Messages you have already sent may remain visible to other participants of a conversation, in the same way an email you have sent remains in the recipient’s inbox.

Your choices and rights

You can edit or delete any activity, revoke the step and sleep permissions in Health Connect, revoke location permission in Android settings, and delete your account from Settings inside the app.

Depending on where you live you may also have the right to access a copy of your data, correct it, ask us to delete it, or object to how we use it. Contact us using the details below and we will respond.

Children

Waymark is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

If your data is ever exposed

If a security incident affects your personal data, we will tell affected users in the app and by email without undue delay, and notify the relevant authority where the law requires it. We will say what happened, what data was involved, and what you should do.

Grievance officer

If you are in India and have a complaint about how your personal data is handled, you can contact our Grievance Officer at teenytailhelp@gmail.com with "Grievance" in the subject line.

We will acknowledge your complaint within 24 hours and aim to resolve it within 15 days, as required under the Information Technology Rules, 2011 and the Digital Personal Data Protection Act, 2023.

If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.

Changes and contact

If we change this policy we will update the date at the top and, for material changes, tell you in the app before the change takes effect.

Questions, requests, or privacy concerns: email teenytailhelp@gmail.com and we will respond.