Privacy Policy
Effective November 5, 2026
Waypoints is an online pilot logbook run by Five By Five Software ("we"). This policy explains what we collect when you use waypoints.fivebyfivesoftware.com, why, and what you can do about it.
What we collect
- Your account: your email address and first name. If you sign up with a password, we store only a one-way hash of it, never the password itself.
- Your logbook: the flights you enter or import, such as dates, aircraft, airports, routes, flight times, landings, approaches and remarks.
- Screenshots you import: the images you upload from a crew app, which can show trip details such as hotels and, in some apps, crew names. We keep them with the import so you can check what was read from them.
- Sign-in sessions: the IP address and browser description (user agent) of each device you sign in from, so you stay signed in and we can spot misuse.
- Google sign-in: if you sign in with Google, Google tells us your email address, whether Google has verified it, your name and your Google account ID. We use them only to create or find your Waypoints account. We don't receive your Google password or access anything else in your Google account.
- Server logs: like most websites, our servers record requests (including IP addresses) to keep the service running and secure.
How we use it
We use your information only to run Waypoints: to sign you in, store and show your logbook, send account emails such as password resets, and keep the service secure. We don't sell your information, show you ads, or share it with advertisers.
Cookies
Waypoints uses a cookie to keep you signed in and to protect forms against forgery. We don't use advertising or analytics cookies.
Where it's stored
Waypoints runs on Amazon Web Services in the United States. Your data is stored in an encrypted database and sent over encrypted (HTTPS) connections. Google processes the information it handles for Google sign-in under Google's privacy policy. The map page loads its map images from OpenStreetMap. Your browser asks OpenStreetMap for the images around the airports you've flown to, so it sees your IP address and those areas, under the OpenStreetMap Foundation's privacy policy. Nothing else from your logbook is sent to it. Screenshots you import are read by Anthropic's Claude model through Amazon Bedrock, in our own AWS account; Bedrock doesn't keep them or use them to train models, and they aren't sent anywhere else.
How long we keep it
You can request account deletion from your profile. We sign you out immediately and permanently remove your account, logbook and uploads after a 30-day grace period. To cancel before then, email support@fivebyfivesoftware.com. Offline exports and recovered legacy copies are subject to the same deletion policy. Database backups are kept for 7 days and server logs for 30 days, so deleted data disappears from those within that time.
Your choices
You can see and edit your logbook at any time. To get a copy of your data or help correcting it, email us. You can request account deletion from your profile.
Children
Waypoints isn't directed at children under 13, and we don't knowingly collect their information.
Changes
If we change this policy, we'll update it here and change the effective date. If a change significantly affects how we use your information, we'll let you know by email.
Contact
Questions or requests: privacy@fivebyfivesoftware.com.