Privacy Policy | Waverly

Waverly is operated by Wavrly Social LLC, a Georgia limited liability company. This Privacy Policy explains how we handle information when you use our app, public website, account features, and support services. It applies to the U.S. service described here. The service is for people 18 and older.

Our Terms of Service explain the rules for using Waverly. Our Account and Data Deletion page explains how to leave and request deletion. A privacy notice explains our practices; it is not a request that you waive your privacy rights.

Information you provide

Account and profile information: your email address, account identifier, username, display name, sign-in information, and information you choose to add, such as your name, profile photo, biography, interests, or city and region. We process age-eligibility information when we ask you to establish that you meet our minimum age. Do not put your birth date, home address, or other sensitive details in your public profile.
Content and activity: posts, uploaded profile images, selected topics, Waves, follows, blocks, hidden posts, community or company participation, preferences, and the timestamps and identifiers needed to provide those features. Your use of a feature determines the records we create.
Communications and reports: information you provide when you contact support, report content, appeal a decision, or make a privacy, copyright, or deletion request. This may include your email, username, content links, descriptions, and our correspondence. A safety report may be submitted without creating an account. A reply or account action may require a way to contact or verify you.
Membership information: membership status and grants associated with your account. If paid checkout becomes available and you purchase a product, the store or payment provider processes the transaction, and we receive the transaction and entitlement information necessary to provide access, resolve billing issues, and maintain required records. Do not send payment-card details to support.

Providing information about someone else does not give you permission to violate their privacy. Please share only information needed for your purpose. Do not include passwords, sign-in codes, financial account numbers, government identification, or suspected child sexual abuse material in a support message.

Technical information and security signals

Our app and the services that host it process technical information needed to deliver requests and protect accounts. This includes IP addresses, browser or user-agent information, device model and operating system, app version and build, language, time zone, installation identifiers, sign-in provider, and account activity. On iOS, a vendor identifier may be processed for device security. We also process signals indicating whether an app or device appears authentic and whether multiple accounts are linked to an installation.

Some security identifiers are transformed into pseudonymous values before being stored in our security records. These values can still relate to an account or device; they are not anonymous merely because they are hashed. They help identify fraud, compromised accounts, repeated abuse, and attempts to evade restrictions. Security screening can occur before you finish signing in.

Security systems may produce a risk flag or restrict an account or device. A flag is a signal, not proof of wrongdoing. Contact us if you believe a restriction is a mistake. We do not publish the details of every security rule because that could help people bypass it.

Location and Nearby features

Nearby is optional. When you choose a location-based feature and permit device location access, the app sends coordinates to our server to find nearby posts or associate a post with an approximate area. The server converts location into coarse geographic areas for post discovery. The intended Nearby design does not display your exact coordinates to other users.

Coordinates may be more precise than the area retained for discovery. We therefore process location information even when the stored result is approximate. Nearby search coordinates are used to answer the request; post-area records follow the post's availability and are removed when the account enters deletion processing. City or region that you put in your profile or a post may be visible separately from Nearby.

You can decline location permission, turn it off in your device settings, and choose not to share a post Nearby. Ordinary posting does not require Nearby sharing. Information you write into a post or include in an image can reveal your location regardless of your device settings. Nearby is not a guarantee that another person is physically at a particular place.

How we use information

Create, authenticate, maintain, and recover accounts; deliver posts, profiles, discovery, social interactions, memberships, and the settings you choose.
Apply your selected topics and other in-service preferences to relevant features, including content selection and sponsored posts.
Operate, troubleshoot, secure, and improve the service; limit spam and abuse; assess device risk; and investigate reported problems.
Review reports, enforce our Community Guidelines and Child Safety Standards, consider appeals, and preserve evidence when needed for safety or legal obligations.
Answer support and rights requests, verify account ownership, send service-related notices, and carry out deletion requests.
Record and reconcile purchases when purchasing is available, measure delivery of advertising, maintain business records, and comply with applicable law.

We use information for the purposes described here and for compatible purposes permitted by law. If we make a material change requiring notice or consent, we will provide the required notice or obtain the required consent before the new practice begins.

Waverly is a social service. Public posts and public profile information can be seen by other people who can access those features. A profile may show a display name, username, photo, badges, membership presentation, and activity counts. Audience and list settings control only the features they describe; hiding a follower list does not make your posts private.

Other people may copy, screenshot, link to, or reshare content they can access. Removing content from Waverly cannot retrieve copies independently kept by other people or services. Avoid posting information you would not want others to retain. Reports and support messages are not public posts, but authorized staff and providers may process them to resolve the issue.

Service providers and other disclosures

We use service providers to host and operate Waverly, authenticate users, store content, deliver communications, and support security and administration. Our technical stack uses Google Firebase services for authentication, database, storage, and app/backend operations. Email correspondence may be processed through our support mailbox provider. If checkout is offered, the applicable app store and payment or entitlement providers process purchase-related information.

Providers receive information needed for their role and applicable obligations. Their separate services, such as an account you maintain directly with an app store or identity provider, also have their own terms and privacy notices. We may receive account information from a sign-in provider when you choose that sign-in method.

We may also disclose information at your direction; to investigate fraud, abuse, or security incidents; to protect people from harm; to comply with lawful requests or legal obligations; and to establish, exercise, or defend legal claims. A business transaction such as a merger or asset transfer may involve information subject to appropriate protections and required notice. These provisions do not give another party unlimited permission to use your information for unrelated purposes.

Cookies, local storage, and device choices

The app and website may use local storage and similar technologies for sign-in state, settings, security, and requested features. Infrastructure providers also process ordinary connection and request information. The public policy pages do not require a Waverly account. Their support form, when enabled, sends the information you submit to our support service.

You can manage device permissions and clear local app or browser data in your device settings. Clearing local data or uninstalling the app does not delete your Waverly account or server records. Optional notifications, if offered, can be managed through the relevant device settings. Refusing a permission may prevent the feature that needs it from working.

Retention and deletion

We retain information while it is needed to provide the service and for the purposes described here. The relevant period depends on the record, the feature, safety needs, legal requirements, and whether a deletion request or legal hold applies. Content disappearing from a feed is not a promise that every related record or backup has been erased.

When a permanent account deletion request is accepted, the account enters deletion processing and ordinary access and discoverability are disabled. A 30-day retention period applies before the resumable purge begins. This is not a cancellation period. Processing can take additional time, and a lawful hold can delay deletion of affected information. See Account and Data Deletion for what is removed and what may remain.

An unfinished registration has a separate lifecycle. In the registration recovery flow, a new sign-in account remains private until eligibility, agreement and profile setup are completed. Unfinished registrations become eligible for cleanup after seven days, or earlier after a confirmed request to discard setup. Cleanup can take additional time and stops for accounts or records requiring safety, ownership, provider or legal review. We keep a limited registration-completion or cleanup record for 30 days afterward, subject to preservation requirements. Security records follow their separate security-retention lifecycle; discarding setup is not a promise to erase every fraud-prevention record immediately.

Limited reports, moderation evidence, fraud-prevention records, legal records, commercial records, and minimized deletion receipts may be retained when necessary. Direct account links are removed or minimized where appropriate. Pseudonymous security records can remain subject to their security lifecycle. We do not promise that all retained records are anonymous. Backup copies and provider records may follow separate retention and deletion cycles and may remain inaccessible to ordinary product use while they expire or are removed.

We restrict retained information to its continuing purpose. A legal preservation requirement can take precedence over ordinary deletion. We cannot remove independently saved copies held by other users, external websites, app stores, or other independent services.

For requests handled through our website's support system, open cases are kept while we handle the request. After a case is closed, ordinary support, privacy, and account-deletion case records are scheduled for removal after 180 days; safety, intimate-image, copyright, and appeal cases after 365 days. This includes the associated contact record, case history, and system delivery records. A documented legal hold can pause removal. Processing occurs through periodic cleanup, so the retention deadline is not a promise of deletion at an exact instant. Email copies in a mailbox or independent provider records follow the relevant provider and business retention process.

Your choices and privacy requests

You can use available account settings to update profile information, change preferences, manage permissions, and request account deletion. You may also contact us to ask for access to your information, a copy, correction, deletion, or information about our practices. Depending on where you live and which law applies to our business, you may have additional rights to opt out of certain processing, limit certain uses, withdraw consent, or appeal a denied request. We will honor applicable rights and deadlines and will explain relevant exceptions.

Use the Support page and select a privacy request, or email waverlysocialapp@gmail.com. Describe the request and provide an account email or username when relevant. We may ask for proportionate verification to protect your information. An authorized agent may contact us, but we may require proof of authority and account-owner verification. We will not ask you to disclose your password or a sign-in code to support.

If we decline a rights request, you may ask us to review the decision using the same contact method and identifying the original request. Applicable law may also allow you to complain to a regulator or your state attorney general. We will not discriminate against you for exercising a right protected by law. If a requested deletion prevents us from providing a feature, we will explain that consequence.

Children and underage accounts

Waverly is for adults 18 and older. People under 18 may not create or use an account, even with a parent's permission. The service is not directed to children under 13. We do not knowingly permit children to register.

If you believe someone under 18 has an account, contact us through Child Safety Standards or support. We will review the concern and take appropriate steps, including restricting or removing an ineligible account and handling its information consistently with applicable law. Do not send a child's identity document or sensitive personal details unless we have arranged an appropriate, necessary verification method. Our child-safety rules apply to content involving minors even though minors cannot use the service.

Security, U.S. operations, and updates

We use administrative and technical measures intended to protect information, including account authentication, access controls, and restrictions on sensitive operational records. No service or transmission can be guaranteed completely secure. Use a strong, unique password and report suspected account compromise promptly.

Our service is intended for the United States. Information may be processed by us and our providers in the United States and other locations where they operate. Availability outside the United States is not promised. We will not describe a particular international certification or transfer arrangement unless it applies to our actual services.

We may update this notice as the service or legal requirements change. The published version and date identify the notice you are reading. Material changes will receive any notice required by law; a new notice does not silently authorize incompatible use of information already collected.

Contact

Privacy contact: Wavrly Social LLC, 109 Cayman Ct, Brunswick, GA 31525, USA. Email: waverlysocialapp@gmail.com. You can also use Support and Contact. Please identify your message as a privacy request so it can be directed appropriately.