Privacy Policy

Wave ("we", "our", "us") is a personal fitness and training app. This policy describes what data we collect, how we use it, and your rights regarding that data.

Data we collect

Account information: Email address and display name when you create an account.

Apple Health data: With your permission, we read workouts, heart rate, resting heart rate, HRV, sleep, respiratory rate, SpO2, VO2 max, and body composition data from Apple HealthKit.

Strava data: If you connect Strava, we import your activities including timestamps, duration, distance, pace, heart rate, and GPS routes.

Workout data: Lifting workouts you log in the app, including exercises, sets, reps, and weights.

How we use your data

• Display your training history, recovery metrics, and progress
• Generate and adapt your training plans
• Sync data across your devices via your private account

We do not sell, share, or provide your data to third parties for advertising or marketing purposes.

How we store your data

On your device: Health and activity data is stored locally in an encrypted SQLite database.

Cloud backup: Data is synced to Supabase (hosted on AWS) for backup and cross-device sync. Data is encrypted in transit (TLS) and at rest.

We use Supabase for authentication and data storage. We use the Strava API to import activities. We do not use analytics or tracking services.

Third-party services

• Supabase: Authentication, database, and cloud storage. Supabase Privacy Policy
• Strava: Activity import (only when you connect your account). Strava Privacy Policy
• Apple HealthKit: Health data access (only when you grant permission). Data is never stored in iCloud by Wave.

Data retention and deletion

Your data is retained as long as you have an active account. You can delete your account at any time from Settings in the app. When you request deletion:

• Your account enters a 30-day grace period (you can cancel by signing back in)
• After 30 days, all data is permanently deleted from our servers
• Local data on your device is cleared when you sign out

Your rights

• Access, correct, or delete your personal data at any time
• Disconnect third-party services (Strava, Apple Health) at any time
• Delete your account and all associated data

Children's privacy

Wave is not intended for children under 13. We do not knowingly collect data from children under 13.

Changes to this policy

We may update this policy from time to time. We will notify you of significant changes through the app or by email.

Contact