Privacy policy

Last updated 21 October 2026

Waypoint is a job-search app. Shivoy Arora runs it on a Raspberry Pi in his home, for a small group of invited users. It is not a company and it does not sell anything. This policy tells you what Waypoint keeps, where, and who sees it.

What Waypoint keeps about you

Your account: your name, your email address, and a hash of your password (not the password itself).
Your profile: the positions, education, projects and claims that you add or import.
The files that you upload: a résumé PDF, a LaTeX file, a LinkedIn data export (with your connections), or a claims.yml file.
Your job search: the countries and fields that you choose, the jobs that you open, the CVs that Waypoint builds, and the messages that it drafts.
Your Anthropic API key, if you add one. Waypoint keeps it encrypted (AES-256-GCM).

All of this stays in the database and the files on the Pi. There is no other Waypoint server. Shivoy, as the admin, can reach the Pi and its data. He does not read your data unless you ask him for help.

What goes to Anthropic

When you use a Claude feature, Waypoint sends the text of the job posting and the parts of your profile that the task needs to Anthropic's Claude API. It uses your own API key for this. Anthropic handles that data under its own terms. Waypoint sends no Google data to Anthropic.

Google user data

Only the admin's own Google account connects to Waypoint. The CVs of other users never go to Google Drive. Waypoint requests one Google OAuth scope, https://www.googleapis.com/auth/drive.file. With it, Waypoint:

uploads PDF CVs that it generated to the admin's Google Drive;
replaces those same files when a CV is rebuilt, so their link stays the same;
sets those files to "anyone with the link can view", so the link works in a referral message.

With this scope, Waypoint can only reach files that it created. It does not read, list, change or delete any other file in the Drive. The Google credentials and the IDs and links of the uploaded files stay on the Pi.

Google user data is not sold, not used for advertising, and not shared with any third party. The use of information that Waypoint receives from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Removing your data

In Settings, you can delete your account. This removes your profile, drafts, applications, contacts, keys and files from the database and the Pi. The nightly backups of the database keep a copy for up to 8 weeks, and then the copy is deleted. To remove a backup copy sooner, write to Shivoy.

The admin can withdraw Waypoint's Google access at any time at myaccount.google.com/permissions.

Contact

Shivoy Arora, shivoy1183@gmail.com.