Privacy Policy

1. Who We Are

"Waybox," "we," "us," or "our" refers to the team operating this website (waybox.ai) and the Waybox application. Waybox is operated from the United States and is designed for drivers in the United States.

2. Information We Collect on This Website

You can read this website without giving us anything. We only collect information when you choose to send it to us.

2.1 When you join the waitlist

If you join the waitlist, we record:

• Your name and email address.
• Your company and title or role, if you choose to give them. Both are optional.
• Your phone number, only if you volunteer for beta testing. The beta box is optional and separate from the updates box; we ask for a number only when you tick it, and we do not keep one otherwise.
• The date and time you submitted it.
• Your consent. Whether you ticked each consent box — product updates, and beta testing if you chose it — when you ticked it, and the exact wording that was shown to you at the time, so that both of us have an accurate record of what you agreed to.
• How you found us. The page you first landed on, the site that referred you, and any campaign tags in the link you clicked (commonly called UTM parameters). This tells us which channels are worth our time. It is not used to build a profile of you.
• Your browser language and time zone, so we know which regions are interested.
• A shortened version of your IP address and your browser's user agent, to prevent spam and abuse. We deliberately discard the last part of the address so it no longer identifies a single connection.

2.2 Analytics

We use Google Analytics to count visits and see which pages and referral sources people arrive through. It records the pages you view, the approximate region your visit comes from, and general details about your browser and device. We use this only to understand traffic in aggregate; we do not use it to identify you, and we have not enabled Google's advertising or cross-site remarketing features.

2.3 Storage on your device

This website sets no advertising cookies. Google Analytics sets its own cookies to recognise a returning browser and group page views into a single visit; they expire on their own and carry a random identifier, not your name or email. To record how you arrived, we separately store the campaign information described above in your browser's session storage. That is cleared automatically when you close the tab, and it is read only if you submit the waitlist form.

You can opt out of Google Analytics on every site you visit with Google's browser add-on, or by blocking analytics cookies in your browser settings. Nothing on this site stops working if you do.

3. Information We Collect in the Waybox App

3.1 Information you provide

• Account info. When you sign in with Apple or Google, we receive a stable user identifier and (when you authorize it) your email and display name.
• Preferences. The nickname, interest tags, default apps, muted places, and verbosity setting you pick during onboarding or in settings.
• Voice input. When you trigger a voice command, we record a short audio clip and send it to our speech-to-text provider for transcription.
• Camera images. If you use the Vision feature, the app captures a single frame from the rear camera and sends it to our AI provider to answer your question. Frames are processed in real time and not retained.
• Feedback. Anything you submit through the in-app feedback form, including optional voice recordings.

3.2 Information collected automatically

• Precise location. When you start a Waybox session, we use your device's GPS to find nearby points of interest and to ground the AI narration. You can revoke location access at any time in your device settings.
• Push notification token. If you enable notifications, your device sends us an APNs or Web Push token so we can deliver navigation hand-offs and reminders.
• Device & session metadata. Browser/OS, app version, IP address, approximate time zone, and anonymized event logs for diagnostics and reliability.

Wake-word detection ("MILES") runs entirely on your device. No audio leaves your device during wake-word listening.

4. How We Use Your Information

4.1 Waitlist email

If you joined the waitlist, we use your name and email address to send you product updates and launch news, your company and role (if you gave them) to understand who is interested in Waybox, and the campaign information to understand which channels brought people here. That is all. We do not sell your details, we do not share them with advertisers, and we do not use them to build an advertising profile of you.

If you volunteered for beta testing, we use your phone number only to contact you by phone or text about the beta: to invite you, to arrange testing, and to follow up on it. We do not use it for marketing, we do not share it with our email provider or anyone else, and you can ask us to stop at any time by emailing dev@waybox.ai, after which we delete it.

You can unsubscribe from any email we send you, at any time, using the link at the bottom of that email. You do not need to give a reason.

4.2 App data

• To generate AI narration about your surroundings.
• To find points of interest, routes, and music matching your spoken request.
• To deliver push notifications you've enabled.
• To remember your preferences across devices.
• To investigate bugs, prevent abuse, and improve the service.
• To comply with legal obligations.

We do not use the data collected in the app — your location, voice, camera frames, or driving activity — for advertising, for marketing profiling, or for any purpose unrelated to operating Waybox. Marketing email is sent only to people who asked for it on the waitlist, and is never targeted using app data.

5. How We Share Information

We share only the minimum each provider needs to complete the task. Each provider has its own privacy policy.

We do not sell your personal information to data brokers or advertisers, and we do not share your data for cross-context behavioral advertising under the meaning of the California Consumer Privacy Act.

6. Data Retention

• Waitlist email & signup details: kept until you unsubscribe or ask us to delete them, or 24 months after our last contact with you, whichever comes first.
• Beta-testing phone number: kept until you ask us to remove it or the beta testing programme ends, whichever comes first, and deleted with your other signup details if you ask us to delete those.
• Account & preferences: kept until you delete your account or ask us to delete them.
• Voice clips & camera frames: processed in real time and not stored on our servers after the response is returned.
• Event logs: retained for up to 90 days for debugging and abuse prevention, then deleted.
• Feedback submissions: retained while we work on the related issue; you can ask us to delete a specific submission at any time.

7. Your Rights

Regardless of where you live, you can:

• Unsubscribe from our emails using the link at the bottom of any email we send you. You do not need an account to do this.
• Ask us what we hold about you, or ask us to delete it, by emailing dev@waybox.ai. This applies whether or not you use the app.
• Access your app data through the in-app My data page.
• Update your preferences from the in-app settings.
• Revoke location, microphone, camera, or notification access at any time in your device settings.

California residents (CCPA / CPRA)

If you are a California resident, you have additional rights:

• Right to know what personal information we collect, use, and disclose.
• Right to delete your personal information, subject to limited exceptions such as security and legal compliance.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of your personal information — though, as noted above, we do not sell or share personal information for cross-context behavioral advertising.
• Right to non-discrimination for exercising your privacy rights.

To exercise these rights, email dev@waybox.ai. We may need to verify your identity before responding.

8. Children's Privacy

Waybox is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us and we will promptly delete it.

9. International Users

Waybox is operated from the United States. If you join the waitlist or use the service from outside the U.S., your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your country.

10. Security

We use HTTPS for all network traffic, encrypt stored data at rest, and follow industry-standard practices for storing tokens and secrets. No system is perfectly secure, however, and we cannot guarantee absolute security. Please don't share your account credentials with anyone.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we'll update the "Last updated" date at the top of this page. If you keep using Waybox after the changes, you agree to the revised policy.