Privacy Policy

We collect only what we need to run the Service. The categories below describe the data we may process depending on how you use Wavely.

• Account data — when you create a Wavely account, we store your name, email address, an optional profile photo, and a securely hashed password. If you sign in with Apple, we receive the identifier (and email, unless you choose to hide it) that Apple provides.
• Listening activity — the stations you favorite, your recently played stations, listening history, and song identifications, so we can sync them across your devices and power personalized recommendations and statistics.
• Location data — if you grant permission, we use your approximate location to suggest nearby and local stations. You can decline this and still use Wavely; you may also set a home country manually in Settings.
• Device and technical data — app version, device model, operating system, language and region, and basic diagnostic and crash information needed to keep the Service reliable.
• Subscription data — when you purchase Wavely Pro, we receive a purchase and entitlement record from Apple or our billing provider. We never receive or store your full payment card details.
• Connected services — if you connect Spotify, we store the access tokens needed to add identified songs to a Wavely playlist on your behalf. You can disconnect at any time.
• Support correspondence — the contents of any messages you send us so we can respond and keep a record of the request.

We use the data above to provide and operate the Service, authenticate you and keep your account secure, sync your favorites and history across devices, generate recommendations and listening statistics, process and manage Wavely Pro subscriptions, respond to support requests, and detect, prevent, and address fraud, abuse, and technical problems.

We do not sell your personal data, and we do not use it for third-party advertising.

Where the EU General Data Protection Regulation (GDPR) applies, we rely on the following legal bases: performance of our contract with you (to provide the Service and your account); your consent (for example, location access or connecting Spotify), which you can withdraw at any time; our legitimate interests (to keep the Service secure, prevent abuse, and improve features) balanced against your rights; and compliance with our legal obligations.

We share personal data only with service providers that process it on our behalf under appropriate agreements, and only as needed to run the Service:

• Apple — for App Store distribution, Sign in with Apple, in-app purchases, and song identification via ShazamKit, governed by Apple’s own privacy policy.
• Our subscription provider (RevenueCat) — to manage entitlements and validate purchases for Wavely Pro.
• Spotify — only if you connect your account, to create and update your Wavely playlist, governed by Spotify’s privacy policy.
• Hosting and infrastructure providers — to store data and operate our servers.

We keep your personal data for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize the personal data associated with it, except where we must retain certain records to meet legal, accounting, or security obligations. Diagnostic and aggregated data that no longer identifies you may be retained.

Depending on your location, you have the right to access, correct, export, or delete your personal data; to object to or restrict certain processing; and to withdraw consent at any time. You can delete your account and its associated data directly from Settings → Account in the app. For any other request, contact us using the details below. You also have the right to lodge a complaint with your local data protection authority.

We use technical and organizational measures to protect your data, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the relevant authorities if a breach affecting you occurs, as required by law.

Some of our providers may process data outside your country, including outside the European Economic Area. Where they do, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses to protect your data.

Wavely is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you in the app or by email. Your continued use of the Service after an update means you accept the revised policy.

If you have any questions about this Privacy Policy or how we handle your data, please reach out — see the contact below.