About this policy
This policy explains how WaveSpell (“we,” “us,” or “our”) collects, uses, and shares personal information through the WaveSpell website, iOS app, and related account and subscription services. Some features are available only on the website or in particular app versions.
WaveSpell is a service for personal reflection, symbolic patterns, relationships, cycles, and places. Its interpretations are calculated from the information you provide. They are not verified facts about a person, medical assessments, or decisions about your eligibility for employment, insurance, credit, or other essential services.
Information you provide
- Account information. Your email address, sign-in credentials, account identifier, account settings, and any name you supply. Our authentication provider processes your credentials and account verification or recovery requests.
- Public profile information. Your generated or chosen handle, display name, biography, and profile image. A public profile is created when you sign up; see Public profiles and sharing before adding identifying details.
- Birth and personal-pattern information. Birth date, birth time, time accuracy, birthplace, coordinates, and time zone that you enter or select. We use these to calculate and save personal, relationship, cycle, and geographic interpretations.
- People and connections. Names, birth dates, relationship types, and other details you manually enter about people, along with member connection requests, responses, and connection status. Only provide another person's information when you have permission or another lawful basis to do so. We do not import your address book.
- Reflections and saved content. Ratings, optional notes, relationship reflections, selected dates, calculated snapshots, and saved WaveSpell titles, descriptions, compositions, appearance settings, versions, and publication status. Free-text content may contain sensitive information you choose to include; please avoid unnecessary sensitive details.
- Places. Place searches, selected map coordinates, focused locations, saved places, and related settings. These are places you enter or choose, not a continuous feed of your device's GPS location.
- Waitlist and support information. Your email and signup source when you join the waitlist, and the information you send when contacting us. The iOS feedback share sheet includes your account email and app version/build; you choose the receiving app or recipient and can review the message before sending it.
Technical information and device storage
Our hosting, authentication, and security services process technical information such as IP addresses, request times, browser or device details, and error or security logs to deliver and protect the service. Website bot protection also processes a challenge token and IP address to verify sign-in and related requests.
The website uses Vercel Web Analytics for aggregate visit statistics, including pages visited, referring sites, approximate region, and browser/device categories. Vercel describes this analytics service as not using analytics cookies or identifiers to track visitors across unrelated websites. Page URLs may contain content or profile identifiers, so please do not put sensitive information in public handles or links.
Website cookies and local storage support authentication, security, and saved application state. The iOS app stores sign-in session tokens in the device's secure storage and uses local storage for settings such as onboarding completion. Signing out or clearing storage can remove local session information, but does not delete information stored in your WaveSpell account.
How we use information
We use information to create and secure accounts; provide and synchronize the features you request; calculate personal and relationship interpretations; save your content and preferences; manage connections and publishing; verify subscriptions and restore purchases; answer support requests; provide requested waitlist updates; understand service performance; and prevent fraud, abuse, and technical problems.
We also process information when necessary to meet legal obligations, resolve disputes, and protect users and the service. We do not sell personal information or share it for advertising that tracks you across unrelated businesses.
Services that help operate WaveSpell
We use the following services for the purposes described here. Their access depends on the feature you use.
- Supabase: account authentication, databases, and file storage, including the account and content information needed to provide WaveSpell. Supabase privacy information.
- Vercel: website/API hosting, request processing, operational logs, and website analytics. Vercel privacy information and Web Analytics practices.
- Cloudflare Turnstile: security checks on website authentication forms, including challenge and network information. Cloudflare privacy information.
- Apple and RevenueCat: iOS payment processing, purchase verification, subscription status, restoration, and subscription reporting. See Subscriptions and purchases. Apple privacy information and RevenueCat privacy information.
- Open-Meteo and OpenStreetMap Nominatim: place search and place-name lookup. WaveSpell's server sends search text to Open-Meteo and selected coordinates to Nominatim; these requests do not intentionally include your WaveSpell account identifier. Open-Meteo information and OpenStreetMap privacy information.
Service providers processing personal information on our behalf are required to protect it under applicable service terms, confidentiality, and data-protection obligations. Third parties may also process limited information for their own security, legal, or platform purposes under their policies.
We may disclose information when legally required, to address fraud or threats to safety, to establish or defend legal rights, or as part of a business transfer subject to applicable privacy protections. We may also share information at your direction.
Subscriptions and purchases
When you use subscription features in the iOS app, Apple processes the payment. RevenueCat receives purchase and subscription information, such as product and transaction identifiers, purchase/renewal dates, subscription status, and entitlement access, along with relevant app, platform, locale, and currency information.
WaveSpell uses your account identifier as the RevenueCat App User ID so purchases and restoration can be associated with your signed-in WaveSpell account. Purchase history is therefore linked to your account. WaveSpell does not receive your full payment-card number or Apple Account password.
You can manage or cancel an Apple subscription in your Apple Account subscription settings. Deleting WaveSpell, signing out, or requesting deletion of your WaveSpell account does not automatically cancel an Apple subscription.
Your choices and privacy requests
Available controls let you edit your birth or public profile, remove a profile image, delete manually entered People, remove connections, remove saved places, and delete or unpublish WaveSpells. Available controls differ between the website and iOS app.
To request access to, correction of, a copy of, or deletion of your account or personal information, contact info@wave-spell.com. You can also request removal from the waitlist or ask us to stop an optional use of your information. Include the email associated with your account and describe your request; do not send a password, payment details, or identity documents unless we specifically arrange a necessary, secure verification process.
We may need to verify that you control the account before acting on a request. We respond as required by applicable law, and will explain when information must be retained or a request cannot be fulfilled. Some records held by Apple or other independent providers must be managed with those providers.
You can control cookies and site storage through your browser. Blocking essential storage may prevent sign-in or other functionality. Removing the app does not close your server account, cancel an Apple subscription, or guarantee removal of secure-storage items retained by the operating system. In the latest iPhone app, open Account → Delete Account to permanently delete your account and its associated WaveSpell records and uploaded profile images. Cancel any Apple subscription separately in your Apple subscription settings. Older app versions may require an update to access this control.
How long information is kept
Account information and saved content are retained while needed to provide your account and the features you choose. We determine other retention periods based on the purpose of collection, support needs, security and abuse prevention, transaction verification, dispute resolution, and applicable legal requirements.
Deleting an item, requesting account deletion, and canceling a subscription are different actions. When information is deleted from active systems, copies may remain temporarily in backups, security records, or provider systems until their normal retention processes run. We may retain information needed to comply with law or resolve disputes, and information that has been appropriately aggregated or de-identified. We do not promise immediate deletion from every backup or from copies independently held by other people.
Security
WaveSpell uses HTTPS connections, authenticated access, and account-based database permissions to help protect private information. Some information is processed on our servers and by our providers; the service is not a device-only or end-to-end encrypted storage system.
No system can guarantee absolute security. Use a unique password, protect access to your email and device, and contact us if you believe your account or information has been compromised.
International users and privacy rights
WaveSpell and its providers may process information in the United States and other countries, where privacy laws may differ from those where you live. Such processing is subject to applicable data-protection requirements and provider terms. Contact us for more information about the locations and safeguards relevant to your information.
Where a legal basis is required, we process information as necessary to provide the service you request; for legitimate interests in operating, securing, and improving the service; to comply with legal obligations; or with your consent where required. You may withdraw consent for a consent-based use without affecting the lawfulness of earlier processing.
Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a portable copy of information; restrict or object to certain processing; withdraw consent; appeal a decision on a privacy request; and complain to your local data-protection authority. Contact us to exercise these rights. We will not unlawfully discriminate against you for doing so.
Children
WaveSpell is not directed to children under 13. If you are under 13, do not create an account or submit personal information. A higher age or parental permission may be required where you live. If you believe a child has provided information inappropriately, contact us so we can investigate and take appropriate steps, including deletion where required.
Changes to this policy
We may update this policy as WaveSpell or its data practices change. We will revise the date on this page and provide additional notice or obtain consent for material changes when required. A new policy will not by itself authorize a use of previously collected information that requires your consent.
Contact WaveSpell
For questions about this policy, privacy rights, or account deletion, email info@wave-spell.com.
Please use the subject “WaveSpell privacy request” and include only the information needed to explain your request.