Privacy Policy
VirWave ("we," "us," or "our") operates the VirWave mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use the App.
By using VirWave, you agree to the collection and use of information as described in this policy.
1. Information We Collect
Information you provide directly
- Account information. When you create an account, we collect your email address and optional display name. You may also sign in using Google or Apple, in which case we receive the name and email associated with that account.
- Event interest information. If you sign up for early access or event updates, we collect your email address, optional name, and your consent preferences. This information is stored separately from your app account.
- Journal entries. If you use the journaling feature, your entries (text, mood, and tags) are stored in your account. Journal content is private to you and is never shared with other users or third parties.
- Breathing session data. We record basic session metadata (duration, shape used, completion status) to support your session history. No biometric or health sensor data is collected.
- Connections. If you connect with another VirWave user via a share code, we store the connection relationship. We do not access the other user's journal, sessions, or settings.
Information collected automatically
- Device push tokens. If you opt in to notifications, we collect your device push token to send you app updates. You can revoke this at any time through your device settings.
- Anonymous usage analytics. With your consent, we collect anonymous, non-identifying usage events (such as which features are opened and session completion) to improve the App. Analytics consent can be toggled in Settings at any time. We do not use third-party advertising or tracking SDKs.
Information we do NOT collect
- We do not collect health, biometric, or sensor data.
- We do not collect location data.
- We do not collect contact lists or phone numbers.
- We do not use cookies or web tracking in the App.
- We do not sell, rent, or trade your personal information to third parties.
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain the App's core features (breathing sessions, journal, connections, settings).
- Save your preferences and breathing configurations across devices.
- Send you app updates and early-access notifications if you opted in.
- Improve the App based on anonymous, aggregated usage patterns.
- Respond to support requests.
We do not use your information for advertising, profiling, or automated decision-making.
3. How We Store and Protect Your Information
- All user data is stored in Supabase (opens in new tab), a cloud database platform with encryption at rest and in transit.
- Row-Level Security (RLS) policies ensure that each user can only access their own data. No user can read, modify, or delete another user's records.
- Authentication is handled through Supabase Auth with support for email/password, Google, and Apple sign-in.
- We do not store passwords in plain text.
4. Data Sharing
We do not share your personal information with third parties except in the following limited circumstances:
- Service providers. We use Supabase for data storage and authentication, and Expo (EAS) for push notifications. These providers process data on our behalf and are bound by their own privacy policies.
- Legal requirements. We may disclose information if required by law, regulation, or legal process.
We do not sell your data. We do not share data with advertisers.
5. Your Rights
You have the following rights regarding your data:
- Access and export. You can export all of your VirWave data at any time from Settings > Data & Privacy > Export My Data.
- Deletion. You can permanently delete your account and all associated data from Settings > Data & Privacy > Delete Account. Deletion is immediate and irreversible.
- Consent withdrawal. You can withdraw marketing or analytics consent at any time through the App's Settings screen or by contacting us.
- Correction. You can update your profile information at any time within the App.
For event-interest contacts who have not created an account: you may request deletion, export, or consent withdrawal by emailing us at the address below.
6. Data Retention
- Account data is retained as long as your account is active. When you delete your account, all associated data is permanently removed.
- Event interest data is retained for up to 12 months after collection. If you do not convert to an active user within that period, your contact information is deleted.
- Anonymous analytics data is retained in aggregated, non-identifying form and cannot be linked back to individual users.
7. Children's Privacy
VirWave is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.
9. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
Email: info@virwave.com
VirWave is built by VirWave OAM.