PRIVACY POLICY ============== Entity: Wavelength Intelligence LLC Last updated: July 16, 2026 Wavelength is operated by Wavelength Intelligence LLC ("Wavelength", "we", "us"). This Privacy Policy explains what personal information we collect when you use the Wavelength app, why we collect it, how we use and share it, how long we keep it, and the choices and rights you have. Wavelength is a small social app for sharing one song each week with the people you follow. We designed it to collect as little as possible: we do not sell your personal information, we do not show third-party ads, and we do not use advertising or cross-app tracking technologies. INFORMATION YOU GIVE US ----------------------- - Account: your email address (used only to sign you in - Wavelength is passwordless). - Profile: your username, display name, optional bio, and an optional profile photo. - Content you create: your weekly song picks and captions, comments, likes, follows, and any photo you choose to attach to a post. - Support and feedback: anything you send us through the in-app feedback form. INFORMATION COLLECTED AUTOMATICALLY ----------------------------------- - Security and session data: a device/session identifier, approximate location derived from your IP address, sign-in timestamps, and an append-only audit log of security events (for example, sign-ins and two-factor checks). We use this to keep your account secure, enforce two-factor verification, and let you review and revoke active sessions. - Notifications: if you allow notifications, a push token from your device so we can deliver alerts (for example, when someone follows you or comments on your post). - App analytics: we collect limited in-app event data to understand how the app is used and improve it - for example, whether you completed sign-in, submitted a post, or finished onboarding. This data includes event names, timestamps, and aggregate properties (such as whether you set a caption, but not the caption text itself). Events are linked to your account identifier and stored in our own database (Supabase). We do not use third-party analytics SDKs. - Consent records: when you create an account, we record which versions of our Terms of Service and Privacy Policy you accepted, and whether you opted into marketing communications. This is used to honor your preferences and demonstrate compliance with data-protection law. We do not use third-party analytics, advertising, or crash-reporting SDKs. We collect limited first-party analytics as described above. If that ever changes, we will update this policy and the App Store privacy details before the change ships. PHOTOS ------ Wavelength asks for access to your photo library only when you tap to choose an image - for your profile picture or to attach a photo to your weekly post. We do not browse, scan, or read your library in the background. The single image you pick is uploaded to our storage so it can appear in the app; other photos never leave your device. MUSIC SEARCH ------------ When you search for a song, your search text is sent to Apple's iTunes Search API to return matching tracks, artwork, and 30-second previews. We cache search results briefly to reduce repeated requests. Song metadata, artwork, and previews are provided by Apple and the rights holders; see Third-Party Notices in the app (Settings > Legal & policies) for details. HOW WE USE YOUR INFORMATION --------------------------- - To provide the app: create your account, show your posts and feed, deliver comments, likes, follows, and notifications. - To keep accounts secure: passwordless sign-in, email two-factor verification, session management, and abuse/lockout protection. - To respond to your feedback and support requests. - To meet legal obligations and enforce our Terms and Acceptable Use Policy. Our legal bases (where the GDPR applies) are: performance of our contract with you (providing the app), our legitimate interests (security and abuse prevention), your consent (notifications and optional features), and compliance with legal obligations. HOW WE SHARE INFORMATION ------------------------ We share information only as needed to run the service, never to sell it: - With other users: your profile, posts, captions, comments, likes, and follows are visible to people in the app, consistent with how the feature works. - Supabase (our backend host) stores your account, content, and files (database, authentication, and storage). - Resend delivers our sign-in and verification emails. - Apple provides music search results, artwork, and previews through the iTunes Search API. - Expo / your platform's push service delivers notifications you have opted into. - We may disclose information if required by law, to protect rights and safety, or in connection with a merger or acquisition (you will be notified of any change in control). DATA RETENTION -------------- We keep your profile and content for as long as your account is active. Security logs and login records are kept for a limited period to protect the service and then deleted or de-identified. When you delete your account, we remove your profile, posts, comments, likes, follows, and uploaded photos, except where we must retain limited records to comply with the law or resolve disputes. Analytics event records are de-identified (your account link is removed) when you delete your account; the de-identified records may be retained for product analysis. YOUR RIGHTS AND CHOICES ----------------------- - Access and update: edit your profile in the app at any time. - Delete: delete your account (and associated data) from Settings > Security & privacy > Delete account. - Sessions: review and revoke active sessions from Settings > Security & privacy. - Notifications: turn notifications on or off in your device settings. Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. To exercise any right, use the in-app controls or contact us at privacy@wavelengthintelligence.info. We will not discriminate against you for exercising your rights. See "US State Privacy Rights" below for state-specific detail. US STATE PRIVACY RIGHTS ----------------------- If you live in a US state with a comprehensive consumer privacy law - including California, Virginia, Colorado, Connecticut, and Utah, among others - you may have the right to confirm whether we process your personal information and to access it, to correct inaccuracies, to delete it, to obtain a portable copy, and to opt out of targeted advertising, the sale of personal information, and certain profiling. We do not sell your personal information. We do not share it for cross-context behavioral advertising, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects about you. We use no third-party advertising or tracking SDKs. Because we do not do any of these things, there is nothing for those opt-out rights to apply to - which is why we do not offer a "Do Not Sell or Share My Personal Information" link or a separate opt-out mechanism, and why opt-out preference signals such as Global Privacy Control are not applicable to our processing. To exercise the rights that do apply: - Access, correct, delete: use the in-app controls - edit your profile at any time, and delete your account from Settings > Security & privacy > Delete account. - Portable copy: email privacy@wavelengthintelligence.info and we will provide a copy of your personal information. We do not currently offer self-service export from within the app. - Other requests: email privacy@wavelengthintelligence.info. We verify requests against your account email before acting, and you may use an authorized agent where state law permits. If we deny your request and your state's law provides a right to appeal, you may appeal by replying to our decision or emailing privacy@wavelengthintelligence.info; we will respond within the period your state's law allows. California residents have these same rights under the CCPA/CPRA, including the right to know what we collect, to delete it, and to correct it. The categories of personal information we collect are described in "Information you give us" and "Information collected automatically" above. We do not sell or share your personal information as the CCPA/CPRA defines those terms. CHILDREN'S PRIVACY ------------------ Wavelength is not directed to children under 13, and we do not knowingly collect personal information from children under 13. You must be at least 13 years old (or the minimum age of digital consent in your country, if higher) to use the app. If you believe a child under 13 has provided us information, contact privacy@wavelengthintelligence.info and we will delete it. INTERNATIONAL TRANSFERS ----------------------- We are based in the United States and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers. By using the app, you understand your information may be processed in countries with different data-protection laws than your own. SECURITY -------- We protect your information with measures including encrypted transport, encryption of the stored session on your device, row-level access controls on our database, passwordless sign-in with mandatory email two-factor verification, and append-only audit logging. No method of transmission or storage is perfectly secure, but we work to protect your information and respond promptly to incidents. CHANGES TO THIS POLICY ---------------------- We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Your continued use of the app after an update means you accept the revised policy. CONTACT US ---------- Questions or requests about this policy or your information: privacy@wavelengthintelligence.info. Wavelength Intelligence LLC. ------------------------------------------------------------------------------ Wavelength Intelligence LLC