Privacy Policy

Last updated 30 August 2026. This explains exactly what Waymark collects, why, and who can see it. Waymark has no advertising, no analytics, and no third-party trackers of any kind.

What you are agreeing to, in short

When you create a Waymark account you consent to us processing the personal data listed here, for the purposes listed beside it, and for nothing else:

Your email address and display name — to identify your account and let you sign in. Your profile photo, if you add one — to show who you are to people in your groups.

Your step count and sleep duration from Health Connect, and the daily summary we derive from them — to show you your own activity, and in groups you join, to compare step totals with other members.

Your precise GPS location while you are recording an activity — to draw and measure that route. A single approximate position when you open the Nearby routes tab or download an offline map — to answer that one screen’s question at that moment.

The activities and routes you save, the groups you join, and the messages you send — to provide the features those things are.

You can withdraw any of this at any time, and delete your account and everything in it from Settings. If you think we have handled your data wrongly you can complain to us, and then to the Data Protection Board of India. Both routes are set out below.

Account information

When you create an account we store your email address and a display name. Your password is handled by our authentication provider and is stored only as a salted hash — nobody at Waymark can read it.

If you upload a profile photo it is stored in our file storage and served from an unlisted link. In the app it appears next to your name to people you share a group with — but anyone who obtains that link can open the photo, so please treat it as public rather than private.

Health and fitness data

On Android, Waymark reads your step count and your sleep duration from Health Connect, with your explicit permission. You can withdraw either permission at any time in Health Connect, and Waymark will stop reading that data immediately.

From your steps we derive and store a daily summary: steps, distance, calories, active minutes and floors climbed, one row per day. This is what powers the home screen rings, the weekly and monthly charts, and your streak.

We never use health data for advertising, we never sell it, and we do not share it with any third party. It is used only to show you your own activity and, where you choose to, to compare totals with the groups you have joined.

Location data

While you are recording a route-based activity — a run, walk, ride, hike, trail run or climb — Waymark reads your precise GPS location to draw your route and measure distance and elevation gain. Recording continues if you lock your screen or switch apps, so a run still records with the phone in your pocket. Android shows a permanent notification for the whole time this is happening, and it stops the moment you finish or leave the activity.

Waymark reads your location in two other places, both while you are looking at the screen that needs it and neither in the background. Opening the Routes tab for an activity checks where you are so it can tell which shared routes start near you; nothing about your position leaves your device when it does this. Saving an offline map in Settings checks where you are so it knows which map tiles to download.

Waymark does not request background location permission, and does not have it. It cannot read your location when the app is closed, and outside a recording it only ever reads a single position at the moment you open one of the two screens above — it does not follow you.

The route you record is stored as a list of coordinates with timestamps and elevations, together with the geographic bounding box of the route. If you choose to share an activity or post it as a nearby route, the people or groups you share it with can see that route on a map.

Map imagery comes from OpenTopoMap. Requesting map tiles necessarily tells OpenTopoMap which area of the world you are looking at, and your device makes those requests directly. We do not send your identity or your recorded route to them.

Activities and routes

For each activity you save we store its type, distance, duration, date, elevation gain, and any title or note you write. If you import a GPX file, we store the track, waypoints and description it contains.

Social features

We store the groups you belong to and the messages you send in Waymark chats — including routes you share into a chat. Messages are visible to the other participants of that conversation.

People in a group with you can see your display name, profile photo, and your daily and weekly activity totals. They cannot see your notes, your individual routes unless you share them, or your account email.

Who we share data with

Our backend — database, authentication, file storage and realtime messaging — is provided by Supabase, which processes this data on our behalf, on our instructions, and does not use it for its own purposes. Their servers for this project are in Singapore; see “Where your data is kept” below.

Map tiles are served by OpenTopoMap, as described above.

That is the complete list. We do not sell your data, we do not share it with advertisers or data brokers, and we do not use it to train machine-learning models.

Where your data is kept and for how long

Your data is stored outside India. Waymark’s backend is operated by Supabase on Amazon Web Services infrastructure in the ap-southeast-1 region, which is in Singapore. This includes your profile, your daily step summaries, your recorded activities and routes, your group memberships and your messages.

Transferring personal data outside India is permitted under the Digital Personal Data Protection Act, 2023, except to countries the Government of India has restricted. Singapore is not a restricted country, and we do not transfer your data to any country that is.

Storing it abroad changes nothing about your rights or about how it is used. This policy governs it wherever it sits, Supabase processes it only on our instructions, and you can still access, correct or delete all of it as described above.

Your data is retained until you delete it or delete your account.

Deleting an activity removes it and its recorded route. Deleting your account removes your profile, profile photo, goals, daily summaries, activities, routes and group memberships. Messages you have already sent may remain visible to other participants of a conversation, in the same way an email you have sent remains in the recipient’s inbox — they are no longer attributed to you.

Groups you created are not deleted with your account, because other people may still be using them. The group remains without a recorded creator, and your membership of it is removed along with everything else.

Your choices and rights

You can edit or delete any activity, revoke the step and sleep permissions in Health Connect, revoke location permission in Android settings, and delete your account from Settings inside the app.

Withdrawing consent is meant to be as easy as giving it, and it is: every permission Waymark asks for can be switched off in the same place you granted it, without contacting us and without leaving your phone. Switching one off stops that collection immediately. It does not delete what was already collected — deleting your account does that, and you can do it yourself from Settings.

You have the right to ask for a copy of the personal data we hold about you, to have it corrected, and to have it erased. Email us and we will respond. We will not charge you and we will not ask why.

One limit worth stating plainly: some of what you can ask us to erase is also in other people’s hands — a message you sent into a group, for instance. We will delete your data and detach your name from it, but we cannot reach into another person’s copy of a conversation, in the same way a sent email cannot be recalled from someone’s inbox.

Nominating someone to act for you

Under the Digital Personal Data Protection Act, 2023 you may nominate another person to exercise your rights under this policy on your behalf, in the event of your death or of an incapacity that prevents you exercising them yourself.

Waymark has no nomination screen. To make a nomination, email us from the address on your account with the name and contact details of the person you are nominating, and we will record it against your account. Email us again to change or cancel it.

Anyone acting on a nomination will be asked to prove their identity and the circumstances before we act on it.

Children

Waymark is for people aged 18 and over. Under India’s Digital Personal Data Protection Act, 2023 anyone under eighteen is a child, processing a child’s personal data requires verifiable consent from a parent or guardian, and tracking or behavioural monitoring of children is not permitted at all.

Waymark records step counts and location. We have no way to verify parental consent and will not pretend otherwise, so we do not knowingly create accounts for anyone under 18 or knowingly process their data.

If you believe someone under 18 has an account, email us and we will delete it and everything in it. You do not need to explain why.

If your data is ever exposed

If a security incident affects your personal data, we will tell affected users in the app and by email without undue delay, and notify the relevant authority where the law requires it. We will say what happened, what data was involved, and what you should do.

Grievance officer

Grievance Officer: Yohan Kumar. Email: teenytailhelp@gmail.com. Based in Bengaluru, Karnataka, India.

If you are in India and have a complaint about how your personal data is handled, write to the address above with "Grievance" in the subject line.

We will acknowledge your complaint within 24 hours and aim to resolve it within 15 days, as required under the Information Technology Rules, 2011 and the Digital Personal Data Protection Act, 2023.

If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India.

Changes and contact

If we change this policy we will update the date at the top and, for material changes, tell you in the app before the change takes effect.

Questions, requests, or privacy concerns: email teenytailhelp@gmail.com and we will respond.