Privacy Policy

Last updated: 20 March 2026

Wave Surfer is a mindfulness-based craving tracking app. Your privacy matters and this policy explains what data we collect, how we use it, and how you can control it.

What we collect

When you use Wave Surfer, we store the following data on our server:

Your username and a securely hashed version of your password (we never store your actual password)
Craving wave entries — timestamp, intensity rating, and whether the wave was surfed or not
Daily mood entries — score, optional notes, and timestamp
Feedback messages you send through the app

What we don't collect

No email address — we don't ask for one
No location data
No device identifiers or advertising IDs
No analytics or third-party tracking
No cookies beyond what's needed to keep you logged in

How we use your data

Your data is used solely to provide the app's features — showing your wave history, mood trends, stats, and streaks. We do not sell, share, or transfer your data to any third parties. We do not use your data for advertising.

Where your data is stored

Your data is stored on a secured server hosted on Amazon Web Services (AWS) in the cloud. Communication between your device and our server is encrypted using HTTPS.

Data retention and deletion

Your data is kept for as long as you have an account. You can delete all your tracking data (waves, moods, and feedback) at any time from the Settings page in the app using the "Delete My Data" option. This action is immediate and permanent.

Children's privacy

Wave Surfer is not intended for use by children under the age of 13. We do not knowingly collect data from children under 13.

Changes to this policy

We may update this policy from time to time. Any changes will be reflected on this page with an updated date.

Contact

If you have questions about this policy or your data, you can reach us through the feedback form in the app's Settings page.