Privacy Policy

Effective Date: July 4 2025 | Last Updated:Aug 5 2026

Sandboxx, Inc. (“Sandboxx”, “we”, “our”, or “us”) respects your privacy. This Privacy Policy explains how we collect, use, and share your information when you use Waypoints, our mobile application and website at https://www.waypointsapp.us (collectively, the “Service”).

1. Information We Collect

We collect the following types of information when you use the Service:

a. Account & Profile Information

  • Name, email address, military rank or grade, MOS/AFSC/NEC

  • User-created content (e.g., fitness scores, ribbons, pay grade)

b. Fitness Data

  • Physical test results, custom logs, and Apple Health (if you connect it)

c. Career Data

  • Your rank, occupational specialty, course history, career goals

  • Saved MARADMIN/NAVADMIN feeds and roadmap actions

d. Financial Information

Inputs for earnings estimator (zip code, pay grade, dependents)

We do not collect bank or credit card details unless explicitly used in Pro feature purchases, which are handled by third-party platforms (e.g., Apple, Google)

e. Usage Data

  • Device identifiers (IP address, operating system, app version)

  • Activity logs (pages viewed, buttons clicked, time spent)

f. Location Information

  • If enabled, we may collect approximate geolocation for tailoring local resources (e.g., pay estimates)

g. AI Chat & Assistant Data

  • The messages you send to Waypoints chat and assistant features, and the responses generated for you

  • Documents and files you upload for analysis in a chat

  • Profile context we attach to your request so that answers are relevant to you (for example your branch, rank or grade, and occupational specialty)

  • Usage information about the feature itself (timestamps, message counts, usage limits, and error logs)

2. How We Use Your Information

We use your data to:

  • Provide, maintain, and improve the Service

  • Personalize your experience and show relevant content

  • Track progress across fitness, finance, and career goals

  • Send you service updates, reminders, and support messages

  • Analyze trends and usage to improve the app

  • Enforce our Terms of Service and prevent abuse

  • Operate AI chat and assistant features, including generating responses, retrieving relevant reference documents, and maintaining your conversation history

  • Evaluate and improve the accuracy, usefulness, and safety of our AI features

  • Enforce usage limits and prevent abuse of AI features

We do not use your conversations to make or influence any decision about your military career, and we do not provide your conversations to your command, chain of command, unit, service branch, or the Department of Defense.

3. Sharing Your Information

We do not sell your personal data. We may share your data with:

a. Vetted Service Providers

  • To help us operate (e.g., hosting, analytics, support). These providers are bound by confidentiality obligations.

b. Platform Integrations

  • Apple Health (if enabled by you)

  • Analytics services (e.g., Firebase, Mixpanel)

  • Subscription processors (e.g., App Store, Google Play)

c. Legal Requirements

  • We may share your information if required by law, regulation, or subpoena.

d. AI Model Providers

To generate a response, the content of your message - along with the profile context described in Section 1(g) and the earlier messages in that conversation - is transmitted to third-party AI model providers we contract with. Under our agreements with those providers:

  • Your content is processed only to generate a response for you

  • Providers are contractually prohibited from using your content to train or improve their own models

  • Providers retain your content only for the limited period described in their terms, for security and abuse monitoring, and then delete it

These providers are service providers to Sandboxx. They are not permitted to use your content for their own purposes, and they have no relationship with your command or service branch.

4. AI Features and How They Work

Waypoints uses artificial intelligence to power chat, document research, and other assistant features.

AI output can be wrong. Responses are generated by a statistical model and may be inaccurate, out of date, or incomplete. Waypoints is not an official source of military guidance, and it is not legal, medical, or financial advice. Always verify against official sources - your chain of command, your service’s official publications, or a qualified professional - before acting on anything you read here.

Human review is limited and de-identified by default. A small, restricted group of Sandboxx personnel may review conversation data to investigate a technical problem, evaluate the quality of responses, or respond to a safety or abuse concern. That access is role-restricted, individually approved, logged, and de-identified by default. We do not read conversations out of curiosity.

We never use your conversations in our marketing. Real conversation content - quoted, paraphrased, or shown in a screenshot - is never used in marketing material, sales collateral, social posts, investor materials, or public demos. Where we need an example, we write one.

Your choices. You can delete individual conversations, or your entire conversation history, at any time from within the app. You can also ask us to stop using your conversations to improve Waypoints by emailing privacy@waypointsapp.us; opting out does not limit your access to any feature.

5. Safety and Crisis Situations

If a conversation suggests you may be at risk of harming yourself or someone else, Waypoints may show you crisis support resources, such as the 988 Suicide & Crisis Lifeline (dial or text 988, then press 1 for the Veterans Crisis Line).

We do not notify your command, your unit, or the Department of Defense. Reaching out for support in Waypoints does not create a record that goes to anyone in your chain of command.

In rare circumstances, where we believe in good faith that there is a risk of imminent serious harm to a person, or where we are required to do so by law, we may disclose limited information to emergency services or as legally required.

6. Data Retention

We retain your information as long as needed to provide the Service and for legitimate business or legal purposes. You may request account deletion at any time.

Conversations with AI features are retained for 12 months from the date of the conversation, or until you delete them, whichever comes first. Deleting a conversation removes it from your account immediately and from our backups within 90 days.

7. Your Rights & Choices

Depending on your location (e.g., U.S., EU, California), you may have rights to:

Access the personal data we hold about you

Request correction or deletion of your data

Opt out of certain data uses or communications

Withdraw consent (where applicable)

Delete individual conversations, or your entire conversation history, from within the app

Opt out of having your conversations used to improve Waypoints

To make a request, email: privacy@waypointsapp.us

8. Data Security

We use industry-standard security measures, including:

TLS encryption for data in transit

Role-based access controls

Secure cloud infrastructure (e.g., Google Cloud Platform)

De-identification of conversation data before it reaches internal review tools

Logged, individually approved access to any identifiable conversation content

No system is completely secure, so we encourage you to use strong passwords and safeguard your account.

9. Children’s Privacy

Waypoints is not intended for children under 13. We do not knowingly collect personal information from minors without parental consent.

10. Third-Party Links

Our app may link to third-party services (e.g., finance tools, learning platforms). We are not responsible for their privacy practices. Please review their policies before using.

11. International Users

If you access Waypoints from outside the United States, be aware that your data may be processed in the U.S. or other countries with different data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We’ll notify you of changes by posting the updated policy and, where appropriate, via app or email. Where a change materially expands how we use your conversation data, we will notify you in the app before that change takes effect.

13. Contact Us

If you have any questions or concerns, please contact us at:

info@sandboxx.us

Sandboxx, Inc.

Arlington, VA, USA