Privacy Policy

Wayfynd is operated as a sole proprietorship under the Wayfynd brand, which is responsible for your personal data (the "controller"). If you have a question about your data or this policy, contact support@wayfynd.dev.

• •Account info: your email address and password. Your password is handled by our authentication provider (Supabase) and stored only in hashed form — we never see it.
• •Date of birth: asked at signup so we can confirm you're old enough to use Wayfynd. If you're under 18, we also record when you confirmed that a parent or guardian agrees.
• •Career DNA: the answers you give during onboarding — income goal, work style, education willingness, available time, interests, things you'd rather avoid, and your current situation.
• •Progress data: lessons and challenges you've completed, the difficulty you say a lesson felt, time taken, XP, and career paths you've chosen, saved, or simulated. Progress is a count of what you've finished — it is not a grade or score.
• •Challenge submissions and Daily Challenge answers, with the written feedback generated for them.
• •My work: the titles and notes you write for items you choose to keep, and a pointer to the work they refer to (it doesn't copy the work). Only you can see it, and you can remove items any time.
• •Support messages: if you write to us through the Help and support form or by email, we receive your message and the email address you give us, and, if you're signed in, your account email. They go to our support inbox and are used only to help you.
• •Try the Job answers: the text you type for a task, with the written feedback on each attempt, a draft saved on your own device while you work, and, if you choose to write one, a short reflection on how the task felt. You can delete the answers and reflection any time from the task page.
• •AI Coach conversations: the messages you send and the replies you receive.
• •Check-in photos: photos of your work you choose to send, with the written feedback on them. A photo that mainly shows a person rather than your work is not stored.
• •Subscription info from Paddle: your Paddle customer and subscription IDs, plan, status, and renewal date. We never see or store your card details — Paddle handles payment directly.
• •A parent or guardian's email address, if a student under 18 asks them to set up Pro: we store the address and the plan requested, and email them one link. Unfinished requests are deleted after 30 days; a completed one is kept for as long as the subscription exists, so they can manage it.
• •Email delivery problems: if an email we send can't be delivered (for example, a mistyped address), our email provider tells us, and we record that address and the reason so we can warn you during signup.
• •Technical data: our hosting provider processes IP addresses and request logs to deliver and secure the site, and error reports record technical details when something in the app breaks.

We don't use advertising trackers or third-party analytics.

• •To provide the service you signed up for (performance of our contract with you): your account, Career DNA, careers to explore, roadmap, progress, AI Coach, check-ins, and subscription.
• •To keep Wayfynd safe and working (our legitimate interests): preventing abuse, securing accounts, and finding and fixing errors.
• •To send optional reminder emails about your lessons, only if you switch them on under Profile (your consent). We record when you did, and every reminder has an unsubscribe link.
• •To meet legal obligations: confirming users are old enough, and the transaction records Paddle is required to keep for tax purposes.

We don't sell your data or share it for targeted advertising.

Your progress and feedback are private. They're never shared with or used by schools, colleges, or employers.

Careers to explore are suggested from your Career DNA answers. That's only to show you options: it isn't used to make decisions about you, and you can change your answers or ignore a suggestion any time.

Most people using Wayfynd are teenagers, so it's private by default: no ads, no tracking or analytics, no location, no public profiles, nothing you write is shown to other users, and reminder emails stay off unless you switch them on. We collect only what a feature needs to work, and we don't ask for your name.

Anyone 13 or older can use Wayfynd, wherever they live. The career facts in it (pay, job outlook and requirements) are United States figures in US dollars, from the source named on each career, so they may not match the country you live in. The rights below apply to everyone; where the law of your country gives you more, you have those too.

We use these service providers, each only for the job described:

• •Supabase — database, login and authentication, and private photo storage. Your account data is stored in its Sydney, Australia data centre.
• •Vercel — hosts the website.
• •Paddle (Paddle.com Market Limited) — processes payments and subscriptions as our merchant of record. For purchase, payment, and tax data, Paddle also handles your information under its own privacy policy.
• •Resend — delivers email, such as sign-up verification codes, reminder emails, the link we send to a parent or guardian, and messages sent from the Help and support form to our support inbox, and tells us when an email can't be delivered.
• •Anthropic — generates AI Coach replies and the written feedback on challenge answers, Try-task answers and check-in photos. The message, answer, or photo you submit is sent to Anthropic to produce that response.
• •Namecheap — our domain registrar. Emails sent to support@wayfynd.dev pass through its email-forwarding service on the way to our inbox.
• •Google (Gmail) — our support inbox. Support messages are stored there, and our replies are sent from it.
• •Sentry — error monitoring. When something breaks, technical details about the error are sent to Sentry. It's configured not to collect your name or email address.
• •Cloudflare (Turnstile) — the bot check on the sign-up and sign-in forms. It looks at technical signals from your browser, such as your IP address, to tell people from bots, under Cloudflare's own privacy policy. It isn't used for advertising.

Our database is in Australia and some of these providers are based in the United States, so your data may be stored and processed outside your country. Where that applies, we rely on the safeguards those providers offer, such as Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.

• •Your account data is kept while your account is open.
• •Support messages are kept in our support inbox for as long as we need them to help you and to keep a record of the help we gave, and you can ask us to delete them.
• •Try the Job answers, feedback and reflections are kept until you delete them or delete your account. Items in My work are kept until you remove them or delete your account.
• •When you delete your account (Profile → Delete account), your data is removed straight away, and any active subscription is canceled. Copies in our providers' backups are removed on their normal backup cycles.
• •If your account used the free trial or was a paying customer, we keep a one-way hash of your email address (not the address itself) for one year, only so the free trial can't be claimed again by deleting and re-registering.
• •Paddle keeps transaction records for as long as tax law requires.
• •Records of undeliverable emails are deleted after 30 days.
• •Error reports are kept by Sentry for a limited period, no longer than 90 days.

• •Edit your Career DNA at any time from your Profile.
• •Delete saved career scenarios and saved careers from within the app (Simulator page).
• •Stop reminder emails any time: switch them off under Profile, or use the unsubscribe link in any reminder.
• •Delete your account and all associated data yourself, any time, from Profile → Delete account.
• •Ask us for a copy of your data, to correct it, or to object to or restrict how we use it — email support@wayfynd.dev and we'll respond within 30 days.
• •Paddle keeps its own purchase and tax records under its own privacy policy; deleting your Wayfynd account doesn't remove those.
• •You can also complain to the data protection authority in your country (in the EU, EEA, or UK, for example, your national data protection regulator). We'd appreciate the chance to sort it out first, so please write to us too.

We only use cookies and similar storage that the site needs to work: keeping you signed in, remembering your light or dark theme, a short-lived cookie used during signup, and cookies Paddle's checkout sets to process payment and prevent fraud. We don't use advertising or analytics cookies. Every cookie and storage item is listed in our Cookie Policy.

Wayfynd is not for children under 13. We ask for your date of birth at signup and don't create accounts for anyone under 13. If we learn an account belongs to a child under 13, we delete it and its data. If you believe that's happened, contact us.

If you're 13 to 17, a parent or guardian has to agree to you using Wayfynd before your account can be used, and you confirm that they do when you sign up. We record when that was confirmed. A parent or guardian can ask us to see or delete their child's data at any time by writing to support@wayfynd.dev or using the support form.

Every connection to Wayfynd is encrypted, passwords are hashed, and database access rules limit each account to reading only its own data. Check-in photos are stored privately and shown only through short-lived links, and you can turn on two-factor authentication. No system is perfectly secure, but we take reasonable steps to protect your data.

If this policy changes in a way that matters — like adding a new service provider who processes your data — we'll update the date at the top and let you know in the app or by email.

See our Terms of Service.