How we keep this actually safe.
The short version of what's in our Privacy Policy and Terms of Service — how content gets moderated, how reports are handled, and what happens to your data.
Every photo and video is screened
Media is automatically scanned before or shortly after it's visible to anyone else. Content that trips the scan is held back pending review instead of going live.
Text is checked too
Posts, comments, and messages are automatically screened for harassment and child-safety signals. Flagged content is routed to a human review queue — a report doesn't just disappear into a filter.
Report, block, and mute
Any post, comment, or account can be reported directly from the app. Blocking and muting are separate controls — block someone and they can't reach you at all; mute quietly stops seeing them without them knowing.
Legal reporting obligations
WaveLen complies with mandatory reporting laws in the jurisdictions it operates in, including reporting apparent child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC) as required under U.S. law.
Circles are enforced server-side
A post scoped to Close Friends isn't hidden by the app's UI while still sitting on a public server somewhere — the same rules that decide what you see are what actually stop a request from ever returning data you shouldn't have.
Export or delete, any time
Download a full export of your profile, posts, comments, likes, saves, and follows from Settings. Deleting your account hides it right away and permanently removes your profile, content, and identity from your conversations 30 days later. Sign back in before then to restore it, or delete it immediately.
Data handling, briefly
We collect what's needed to run the app: your account info, the content you create, your social graph, and diagnostic data to keep the app stable. We don't sell your personal information, and we don't use your posts or messages to serve third-party advertising. Contacts you opt to match against are hashed on your device before anything is sent — WaveLen never receives your raw contact list.
WaveLen requires users to be at least 16 years old, checked at signup. Accounts aged 16-17 get extra protections: DMs are limited to accounts that already follow each other back, and they're left out of "people you may know" suggestions — see the Privacy Policy for details.
The full breakdown — what's collected, who it's shared with, retention, and your rights under laws like GDPR or CCPA — is in the Privacy Policy. Community rules and acceptable use are in the Terms of Service.
Security
Authentication runs through Firebase Authentication; passwords are never stored by us in plain text. All traffic to our backend is encrypted in transit. Access to your data is controlled by server-side rules, not just client-side checks a modified app could bypass. No system is 100% secure, and we can't guarantee absolute security — but we treat the enforcement of who-sees-what as a backend guarantee, not a UI suggestion.
Questions about how this works?
We read every message that comes to wavelenapp@outlook.com.