Last updated: 2026-09-11
You tell us what wave of life you are in so we can find you people in the same one. We treat that as a responsibility, not an asset. We do not sell it, we do not advertise against it, and other members only ever see what you chose to show them.
Waven decides how your data is used and is answerable for it. Write to us at support@joinwaven.com about anything on this page — including to complain.
Some waves say something the law treats as sensitive: health, mental health, sexual orientation, religious belief. Choosing one is entirely up to you, and we only ever use it to match you and to show what you asked to be shown. We ask for your explicit permission before you pick any wave at all, and you can withdraw it by removing the wave or deleting your account — both take effect immediately.
Your email address, so we can sign you in. Your first name, date of birth, languages, and an optional photo and story. The waves you pick and how you marked each one. Interests you choose. Your country, and your city if you give it. Messages, voice notes and reactions you send. Whether a device asked for notifications. Basic technical records — the time you were last active, and error reports when something crashes. And which screens and features are used, in our own records only — never what you write — so we can tell what is working.
Your first name and your age. Your country. Your story, your languages, the interests you picked, and the waves you did not mark hidden. Your photo, unless you switch it off — if you do, we stop sending it to anyone. Your city is never shown to another member; it is only used to find people near you. Your email address, your date of birth, and any wave you marked hidden are never shown to anyone.
We match you with people, show you rooms that fit your wave, deliver your messages, and email you when a conversation has gone quiet. That is the whole list. We do not build profiles for advertising, we do not sell anything to data brokers, and nobody trains an AI model on your conversations.
Supabase stores the database, the accounts and the files. Vercel runs our API and Expo hosts the app itself. Resend sends our email. Sentry receives error reports, which include your user id but not your messages. LiveKit carries audio and video when you make a call. Anthropic drafts opening lines and icebreaker questions when you ask for one — for that it receives first names and the interests and waves the two of you share, and it does not train on what it receives. When you tap Translate on a message, a post or a story, that text is sent to Google Cloud Translation (or to Anthropic, if Google is unavailable) to be translated, and nothing else is sent with it. Expo delivers push notifications to your device. Some of these process data outside Israel and the EU, under standard contractual safeguards.
We do not read them. Two exceptions, both narrow: if you report a conversation, we look at what you reported so we can act on it; and the app watches for crisis language on your own device, to offer you help — that check never leaves your phone and never reaches us.
You can see, correct, or delete anything about you, and you can download a copy of everything we hold — Profile → Download my data, straight away, no asking. Deleting your account removes your profile, your waves, your matches and your messages — permanently, within minutes, not "eventually". Write to support@joinwaven.com and we will answer within 30 days. You can also complain to the Israeli Privacy Protection Authority, or to your local supervisory authority in the EU.
While your account exists. When you delete it, the account and its contents go with it. Safety reports are kept for up to 12 months after they are resolved, because protecting the person who was reported about is the reason they exist. Error reports are kept for 90 days.
Every table is protected so that one member cannot read another member's data, and that is tested rather than assumed. Traffic is encrypted. The photo you upload is served from a public address that cannot be guessed and cannot be listed. If something you told us not to show is switched off, the database stops handing it out — not just the screen.
Waven is for adults. You must be 18 or older. If we learn that an account belongs to someone younger, we delete it.
Only what keeps you signed in. No advertising cookies, no cross-site tracking, no third-party analytics.
If a breach puts you at risk, we will tell you and the relevant authority, as Israeli privacy law and — where it applies — the GDPR require.
If we change something that matters, we will show you before it takes effect and ask again where the law requires it.