Privacy Policy
Version 1.1 · Effective 2026-04-13
1. Data Controller
WeWave ('we', 'us') is the data controller for personal data collected through the Service.
2. Personal Data We Collect
Account information: email address, display name, authentication provider (Google/Apple ID). Device information: device identifiers for the 3-device limit enforcement. Usage data: app interactions, feature usage, chat history with WeWave AI. Location data: only if explicitly permitted by you, for showing nearby surf spots. Payment data: processed by third-party payment providers; we do not store credit card numbers.
3. How We Use Your Data
To provide and improve the Service, including personalized forecasts and AI chat responses. To enforce account limits (3-device maximum) and prevent unauthorized sharing. To process payments and manage subscriptions. To send service-related notifications. To improve forecast accuracy through anonymized, aggregated usage patterns.
4. AI Chat Data
Messages sent to the WeWave AI assistant are processed by Anthropic's Claude API to generate responses. Your chat messages and forecast context data are sent to Anthropic's servers for this purpose. Anthropic's data handling is governed by their usage policy. Chat history is stored on our servers for your convenience and is retained for 90 days after your last session activity.
5. Third-Party Services
Open-Meteo (open-meteo.com): weather and forecast data provider. Anthropic (anthropic.com): AI chat processing via Claude API. Google / Apple: authentication providers (if you choose OAuth sign-in). Stripe or equivalent: payment processing. Google Cloud Platform: hosting and data storage.
6. Data Retention
Account data: retained while your account is active, deleted within 30 days of account deletion. Chat history: retained for 90 days after last session activity. User reports: retained indefinitely as community content (anonymized after account deletion). Payment records: retained as required by applicable tax and accounting laws.
7. Your Rights
Depending on your jurisdiction, you may have the right to: - Access your personal data - Correct inaccurate data - Delete your data ('right to be forgotten') - Export your data in a portable format - Withdraw consent for optional data processing - Object to automated decision-making To exercise these rights, contact us at privacy@wewave.surf.
8. International Data Transfers
Your data may be processed on servers located outside your country of residence, including Japan and the United States (for AI processing). We ensure appropriate safeguards are in place for international data transfers.
9. Children's Privacy
The Service is not intended for children under 16. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data promptly.
10. Applicable Laws
This Privacy Policy is designed to comply with: - Japan: Act on the Protection of Personal Information (APPI) - Indonesia: Personal Data Protection Law (UU PDP) - Australia: Privacy Act 1988 - EU/EEA: General Data Protection Regulation (GDPR) where applicable
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via the app or email at least 14 days before taking effect.
12. Contact
For privacy inquiries: privacy@wewave.surf