Privacy Policy
Last updated: April 14, 2026
Wavium ("we", "our", or "us") operates the Wavium mobile application. This policy explains what data we collect, how we use it, who we share it with, and your rights regarding your data.
1. Information We Collect
- Account Information: Email address and password (securely hashed by Supabase). You may also provide a display name during onboarding.
- User Content: Intentions (text prompts you enter) and the AI-generated affirmations created from them.
- Voice Recordings (Optional): If you choose to use voice cloning, we record and store a voice sample (30-90 seconds) for creating personalized audio in your voice.
- Subscription Data: Your subscription status and purchase history, managed through Apple's App Store and RevenueCat.
- Usage Data: Streak data and session counts, stored locally on your device only.
2. How We Use Your Information
- To authenticate your account and provide the Wavium service
- To generate personalized affirmations based on your intentions using AI
- To convert affirmations into audio using text-to-speech services
- To clone your voice (if you opt in) for personalized audio playback
- To manage your subscription and in-app purchases
3. Third-Party Services & Data Sharing
We share specific data with the following third-party services to provide app functionality. We do not sell your data.
| Service |
Data Sent |
Purpose |
| Groq (Privacy Policy) |
Your intention text only (no names, emails, or IDs) |
AI language model generates personalized affirmations |
| Microsoft Edge TTS |
Affirmation text |
Text-to-speech audio generation |
| Modal (Privacy Policy) |
Voice recording + affirmation text |
AI voice cloning and synthesis (XTTS v2 model on GPU) |
| Supabase (Privacy Policy) |
Email, user ID, voice recordings |
Authentication, database, and cloud file storage (hosted on AWS) |
| RevenueCat (Privacy Policy) |
User ID, subscription status |
Subscription and in-app purchase management |
Voice Data Specifics
If you choose to record your voice:
- Your voice recording is uploaded to and stored on Supabase Storage (hosted on AWS) in a private, access-controlled bucket.
- When generating audio in your voice, the recording is temporarily sent to Modal.com for AI voice synthesis. Modal processes the audio in memory and does not retain it after the request completes.
- Voice recordings are stored until you delete your account. You can delete your account at any time from the app's Settings screen.
4. Data Storage and Security
- Account data is stored on Supabase (hosted on AWS) with encrypted connections (HTTPS) and secure authentication tokens.
- Voice recordings are stored in a private Supabase Storage bucket accessible only via our backend service.
- Generated audio files are temporarily stored on our backend server and are not permanently retained.
- Usage data (streaks, session counts) is stored locally on your device and never transmitted to our servers.
5. Data Retention
- Account data and voice recordings are retained for as long as your account is active.
- Generated audio files are temporary and may be cleared at any time.
- When you delete your account, all data is permanently removed from our servers, including voice recordings, voice metadata, and authentication data.
6. Your Rights
You have the following rights regarding your personal data:
- Access: You can view your data within the app at any time.
- Deletion: You can delete your account and all associated data from Settings > Delete Account. This permanently removes all your data from our servers, including voice recordings.
- Portability: Your affirmations and intentions are visible within the app.
- Opt-Out: Voice cloning is optional. You can use the app with preset voices without recording your voice.
- Withdraw Consent: You can withdraw consent to AI data processing by deleting your account. The app requires AI processing to function.
7. California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal data we collect and how it is used
- Request deletion of your personal data
- Opt out of the sale of personal data (we do not sell your data)
- Non-discrimination for exercising your privacy rights
To exercise these rights, contact us at the email below or use the in-app account deletion feature.
8. European Privacy Rights (GDPR)
If you are in the European Economic Area, your legal basis for processing is:
- Consent: You consent to AI data processing via our in-app consent modal before using the service.
- Contract: Processing necessary to provide the Wavium service you signed up for.
- Legitimate Interest: Improving our service and ensuring security.
You may exercise your rights to access, rectification, erasure, restriction, portability, and objection by contacting us.
9. Children's Privacy
Wavium is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, contact us immediately.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy in the app and updating the "Last updated" date.
11. Contact Us
If you have questions about this privacy policy or wish to exercise your data rights, please contact us at:
joshua@profitprocesses.com