Waybound Studio and Waybound Android Auto · Last updated 5 August 2026
Waybound Studio is a journey planner. It needs to know where you are going in order to plan the trip, and — in the car app — where you are in order to say what is nearby. It needs nothing beyond that, and this page describes exactly what is collected, why, and what is not done.
This policy covers the web app at wayboundstudio.com and the
Android app Waybound Android Auto (com.routeplanner.auto),
which share one account and one database.
The data controller is the developer of Waybound Studio. Contact: numeroneq@gmail.com. Waybound Studio is a private, small-scale service and not a company.
| Data | Why | Where it is stored |
|---|---|---|
| Email address and account id from your Google sign-in | To know which journeys are yours, and so you find the same journeys in the car as on the web | Supabase (EU) |
| Your saved journeys: names, destinations, the calculated schedule and your travel settings | This is the product. Without them there is no journey to show | Supabase (EU) |
| Your location, in the car app | To work out which stop comes next and what is near you | Nowhere. See below |
| Your sign-in session (access and refresh token) | So you do not have to sign in every time | Encrypted on your own device |
This deserves its own heading, because it is the one that worries people most.
When you tap Nära mig (“Near me”) in the car, your coordinates are sent to Waybound Studio's server, which asks the place database what is nearby and returns the answer. The coordinates are never written to any database, cache or log file — they exist in memory for the second the query takes, and then they do not.
The car app does not subscribe to your location continuously either. It asks the system for the last known position when a screen needs one, and not otherwise.
Location is never used for advertising, profiling or analytics. No such functionality exists in the product.
The server logs technical events so that faults can be diagnosed: when something happened, which function was called, whether it succeeded, and how long it took.
Your identity and your IP address appear in those logs only as one-way hashes — values that can be compared with each other but cannot be read back as an email address or an IP number. That is enough to see that one user hit two errors in a row, and not enough to say who it was.
If something breaks in the app, an error record may be stored against your account so the fault can be understood and fixed. Such records do not contain your location.
| Service | Role |
|---|---|
| Supabase | Sign-in and database. EU region |
| Render | Hosting for the server |
| Google (Sign-In) | Verifies your sign-in. Waybound Studio receives your email address and account id — never your password |
| OpenRouteService, Trafikverket, RP Open Places, Wikimedia Commons | Routing, place data and images. They receive a question about a place or a stretch of road, not information about you |
| Google Maps Platform | Only if you have supplied your own Google key. Without a key, Google is not used for map data at all |
Your journeys and settings are kept until you delete them, or until you delete your account. Technical logs are short-lived and hold no readable identity. The session on your device disappears when you sign out or uninstall the app.
You do not have to ask anyone and you do not have to wait for a reply. In the web app there is a Radera konto (“Delete account”) button next to your email address at the bottom of the side panel. It immediately and permanently removes:
This cannot be undone and there is no backup. That is why the app asks twice, and the
second time asks you to type the word DELETE — a dialog people dismiss out of
habit is not consent.
What remains afterwards is cached answers about places — what a rest area is called, whether it has toilets. Those are stored against the question rather than against whoever asked it, and contain nothing about you.
You have the right to know what data exists about you, to have it corrected, to have it erased, and to object to the processing. Erasure you do yourself, immediately, as above. For anything else, reach us at numeroneq@gmail.com.
You can withdraw the app's location access at any time in Android's settings. The car app's Nära mig will then say it does not know where you are, rather than failing without explanation. Everything else keeps working.
If you are unhappy with how your data is handled, you have the right to complain to your national data protection authority. In Sweden that is Integritetsskyddsmyndigheten (IMY).
The service is not directed at children and does not knowingly collect data about them.
If this policy changes, the date at the top is updated. For material changes to what is collected or why, notice is given in the app before the change takes effect.