Privacy Policy

This policy describes how Wava (“we”, “the publisher”) collects, uses, stores and protects your personal data when you use the Wava mobile app and the website wava.world, in accordance with the EU General Data Protection Regulation (GDPR), applicable requirements of the Apple App Store and Google Play, and — for individuals in Türkiye — relevant disclosures under Law No. 6698 on the Protection of Personal Data (KVKK).

The data controller is established in France. These terms do not create a Turkish company or local establishment.

1. Data controller

The data controller is Wava, publisher of the Wava application.
Address: Antibes (06600), France
Personal data contact: privacy@wava.world

2. Data we collect

Depending on how you use Wava, we may process:

• Account identifiers: email address, phone number, OAuth identifiers (Google, Apple), unique Firebase ID.
• Public profile: display name, bio, photo(s), age range, gender, optional region, displayed preferences, online status.
• User-generated content: text messages, photos, videos, voice messages, stories, items in the encrypted vault.
• Usage data: interactions (likes, reports, in-app purchases), credits, active subscription, notification preferences.
• Technical data: device model, OS, app version, device identifier, error logs, IP address.
• Advertising data: advertising IDs (IDFA/GAID) via Google AdMob, where applicable, for the free version.
• Moderation data: reports, moderation decisions, image fingerprints analysed automatically (Google Cloud Vision / SafeSearch) to detect prohibited content.

3. Purposes and legal bases

• Providing the service (contract): account creation, messaging, profile discovery, rooms, stories, translation, credits and subscriptions.
• Safety and moderation (legitimate interest / legal obligation): abuse prevention, automated detection of illegal content (CSAM, extreme violence), handling reports, temporary evidence hold.
• Advertising and monetisation (consent or legitimate interest as applicable): AdMob ads, in-app purchases (Plus/Premium, credit packs).
• Support (legitimate interest): responding via support@wava.world.
• Service improvement (legitimate interest): aggregated, anonymised usage statistics.

4. Optional region

You may voluntarily set a country and region on your profile for discovery. Wava does not use GPS geolocation: no location is collected automatically. You may leave these fields empty to remain fully anonymous.

5. Recipients and processors

We do not sell your data. It may be shared with the following providers only as needed for the service:

• Google Firebase (Firestore, Authentication, Cloud Storage, Cloud Functions) — hosting and infrastructure.
• Google AdMob — ads in the free version.
• Google Cloud Vision — automated image analysis for moderation.
• Apple / Google — in-app payment processing (App Store, Google Play).
• Competent authorities — upon legal request or illegal content (e.g. Pharos, NCMEC CyberTipline, law enforcement).

Some providers may process data outside the European Union (including the United States) with appropriate safeguards (e.g. EU Standard Contractual Clauses).

6. Retention

• Account data and content: kept while the account is active.
• After account deletion: erasure or anonymisation within 30 days, unless a legal obligation requires otherwise.
• Evidence related to an investigation (evidence hold): kept as required by law, then purged.
• Technical logs: up to 12 months.

7. Your rights (GDPR)

Under the GDPR, you have rights of access, rectification, erasure, restriction, objection and portability. To exercise them: privacy@wava.world.

Erasure may be temporarily refused in case of an evidence hold linked to a legal procedure. You may lodge a complaint with the French supervisory authority, the CNIL.

8. Users in Türkiye (KVKK)

If you are in Türkiye, we also provide the following information under Law No. 6698 (KVKK), without prejudice to GDPR rights above.

• Data controller: Wava, Antibes (06600), France — privacy@wava.world.
• Purposes: same as section 3 (service delivery, safety/moderation, monetisation where applicable, support, improvement).
• Collection method: data you provide (account, profile, content), data generated by use of the app, and data from processors listed in section 5.
• Recipients / transfers abroad: processors in section 5; data may be transferred outside Türkiye (including EU and United States) for hosting, authentication, moderation, payments and ads, with contractual and technical safeguards.
• Retention: as in section 6.
• Rights: subject to KVKK exceptions, you may request information about whether your data is processed; access; correction of incomplete/inaccurate data; deletion or destruction; notification of correction/deletion to third parties; objection to adverse outcomes of automated processing; and compensation for damage arising from unlawful processing. Contact: privacy@wava.world.
• Complaints: you may contact us first, and you may also apply to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurulu — kvkk.gov.tr) where applicable.

9. Security

We implement appropriate technical and organisational measures: encryption in transit (HTTPS/TLS), Firestore access rules, secure authentication, and client-side encryption of the private vault for private media.

10. Minors

Wava is for persons aged 18 and over only. Any account identified as belonging to a minor will be deleted.

11. Sign in with Apple

If you use “Continue with Apple”, you may hide your email address. Apple then provides a unique relay identifier linked to your account.

12. Cookies and trackers (website)

wava.world is a static marketing site without advertising cookies. Only strictly necessary technical cookies may be used by the host.

13. Account deletion

Detailed procedure: Delete your Wava account.

14. Changes

Material changes to this policy will be indicated in the app and on this page. The update date will be revised accordingly.

15. Contact

Personal data: privacy@wava.world
Support: support@wava.world
Illegal content reports: abuse@wava.world