This Privacy Policy explains what information WaveLen LLC ("WaveLen," "we," "us") collects through the WaveLen website (wavelen.app), why we collect it, and the choices you have. This policy covers the website only — see our mobile app Privacy Policy for the Android app, which collects some additional information the website does not (e.g. device contacts, push notification tokens). By using the WaveLen website you agree to the collection and use of information as described here.
Account information. Email address, password (stored by Firebase Authentication, never in plain text by us), username, bio, profile photo, and date of birth (used only to confirm you meet our minimum age requirement — see Section 6).
Being found by people who know you. When you sign up, we store a one-way SHA-256 hash of your own email address (never the address itself) so that other users who have your email in their contacts can find you with "Find friends" in our Android app. You can turn this off anytime in Settings → Privacy ("Let people find me by email"), which deletes the stored hash. It is off for users under 18, and they are never shown in anyone's suggestions.
Content you create. Posts, comments, likes, saves, messages, voice notes, and any photos or videos you upload.
Social graph. Who you follow and who follows you, and the visibility group (e.g. Close Friends, Family, Inner Circle) you assign to posts and followers.
Communications data. Direct messages and voice notes you send to other users, stored to deliver them and let you view your conversation history.
Daily time limit. If you set a daily time limit, we count how many minutes you use WaveLen each day (on the app and website together) so we can pause everything but messages once you reach it. Only you can see this count; it's kept per day, and deleted with your account.
Time zone. We store your device's time zone (for example "America/Chicago") so quiet hours and your daily notification limit follow your own clock. Only you can see it, and it's deleted with your account.
Automated content moderation. To find content that breaks our Terms of Service, some of what you upload is checked automatically by our service providers, before or shortly after other people can see it:
If a check flags your content, it may be hidden and sent to our team for review. If text is flagged as a possible child-safety concern, your ability to send messages is paused until a person reviews it.
When we hide or remove something of yours, we tell you what and why under Settings → Account status, where you can also appeal a decision about hidden content. That record keeps a short excerpt of the affected text and anything you write in an appeal, and is deleted with your account. We don't send these notices for child-safety flags, which always go to a person.
Video captions. When you post a video or add one to your profile, its audio is sent to Google Cloud Speech-to-Text to create automatic captions. The transcript is saved with the video as a caption file that anyone who can see the video can turn on, is checked by the text moderation described above, and is shown to our review team with the video. Captions are deleted when the video or your account is deleted.
Local browser storage. We use your browser's localStorage — not third-party cookies — to remember functional preferences on this device, such as your dark/light mode choice, your feed sort order, and short-lived timers that prevent accidental double-posting. This data stays on your device; we don't read it server-side or use it for tracking or advertising.
We do not sell your personal information, and we do not use your content or messages to serve third-party advertising. The WaveLen website does not use third-party analytics or advertising trackers.
We use the following service providers to operate the WaveLen website. Each processes data on our behalf under its own data processing terms:
We may also disclose information if required by law, to protect the rights and safety of WaveLen or our users, or in connection with a merger, acquisition, or sale of assets (with notice to you where required).
Other users can see any content you post publicly or share with a visibility group, including your username, profile photo, bio, and posts. Anyone you message can see the content of those messages.
We retain your account information and content for as long as your account is active. If you delete a post, comment, like, or follow, it is removed immediately. If you delete your account, we keep it (hidden from everyone else) for 30 days so you can restore it, then delete it. Messages you send remain visible to the other participant even if you later delete your account, since deleting your account only removes your own copy of the conversation and identity from it.
When content is flagged or held for review, a report about it (which may include the content or a video's transcript) is kept until the account that posted it, or the account that reported it, is deleted.
Export your data. Sign in and go to Settings → Your Data → Download your data for a JSON export of your profile, posts, comments, likes, saves, and follows.
Delete your account. Sign in and go to Settings → Account → Delete account. Your account is hidden from everyone right away and permanently deleted 30 days later: your profile, posts, comments, likes, saves, follows, and notifications, and your identity in your conversations. If you change your mind, sign back in within those 30 days to restore it; you can also choose to delete it immediately at that point. Once deleted, it cannot be undone.
Note: WaveLen accounts and their data are shared across the website and the Android app — deleting your account from either one deletes it everywhere.
Depending on where you live, you may have additional rights over your personal information (for example, under the GDPR or CCPA), including the right to access, correct, or object to processing of your data. Contact us using the details below to exercise these rights.
WaveLen requires users to be at least 16 years old. We ask for your date of birth at signup and reject registrations from anyone younger. WaveLen is not directed at children, and we do not knowingly collect personal information from anyone under our minimum age. If we learn that we have collected information from a user under the required age, we will delete that account and its data.
Accounts belonging to users aged 16-17 get a few additional protections: direct messages can only be started by accounts that already follow each other back, and 16-17 accounts are left out of "people you may know" and similar suggestion features. These protections lift automatically once the account turns 18.
We use industry-standard safeguards, including Firebase Authentication and access-controlled databases, to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Our service providers may process and store data in countries other than your own. By using WaveLen, you consent to your information being transferred to and processed in such countries.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you in-app or by email before they take effect. Continued use of the WaveLen website after changes take effect constitutes acceptance of the updated policy.
Questions about this policy or your data can be sent to wavelenapp@outlook.com.