Privacy Policy
FanwaveLife · Last updated: June 2026
1. Overview
FanwaveLife ("we", "our", or "us") is committed to protecting your privacy. This policy describes what information we collect, how we use it, and your choices. By using FanwaveLife, you agree to this Privacy Policy.
2. Information We Collect
- Account information — when you register with email/password, we collect your email address, display name, and handle. Your password is stored as a one-way hash and is never readable by us.
- Third-party sign-in (Sign in with Apple / Sign in with Google) — when you sign in with Apple or Google, we receive a stable user identifier (the provider's "subject" ID), your email address (which may be a private relay address when you choose "Hide My Email" with Apple), and — on the first sign-in only — your name. We use these solely to create or look up your FanwaveLife account. We do not share them with advertisers or third parties.
- Usage data — we collect information about how you use the app, including haptic events, Meetup session activity, coin transactions, and connection history.
- Device information — we may collect device type, operating system version, and app version for diagnostic purposes.
- Camera and microphone — when you use Meetup sessions, your camera and microphone are used for live video and audio. We do not record or store Meetup video or audio on our servers. Live streams are transmitted peer-to-peer (WebRTC) and are not retained after the session ends.
- Body movement data — when you participate in interactive challenges (e.g., Path Trace), your device's camera is used to detect body movements using Apple's Vision framework. This processing happens entirely on your device. No body movement data, joint positions, or biometric information is transmitted to our servers.
- Feedback — if you submit feedback or a report through the app, we store the message content and category. Contact information in feedback is optional.
3. How We Use Your Information
- To operate the app and deliver haptic events, Meetup sessions, and interactive challenges.
- To process coin purchases and manage your balance.
- To authenticate your account and keep it secure.
- To review reports of sessions, content, or users that may violate our Terms.
- To respond to feedback you send us.
- To detect and prevent abuse or unauthorized access.
- To improve the app based on aggregate, anonymized usage patterns.
We do not sell your personal information to third parties.
4. Meetup Live Sessions
When you host or join a Meetup session, live video and audio are transmitted peer-to-peer between participants using WebRTC. We do not record, archive, or store session video or audio.
Session metadata (participants, duration, actions taken) is stored to support features such as coin accounting and moderation.
If a session is reported, the report record (session ID, reason, timestamp) is retained for moderation review.
5. Body Movement Data
Certain interactive challenge types (e.g., Path Trace) use your device camera to track body movement for gameplay purposes. This detection is performed entirely on-device using Apple's Vision framework.
No body pose data, joint coordinates, or images are uploaded to our servers. This data is used only in real time to compute gameplay results, which are then summarized as a numeric score.
6. Virtual Coins & Transactions
When you purchase Coins via In-App Purchase, Apple processes the transaction. We receive a confirmation and credit your balance. We retain records of coin purchases, earnings, and spending for accounting and dispute resolution purposes.
Coin transaction records include: amount, type (purchase/earn/spend), timestamp, and associated session or action ID. These records are stored securely and retained for up to 3 years for financial record-keeping purposes.
Coins have no cash value and cannot be redeemed for real-world currency.
7. Wave Audio Storage
When you publish a Wave, your voice recording is uploaded to our servers and stored to enable playback by other users. Audio files are retained for as long as your Wave is published. Deleting a Wave permanently removes the associated audio file within 30 days.
Haptic patterns derived from your recording are stored as metadata. No raw biometric data is collected or retained.
8. Data Sharing
We do not share your personal information with third parties except in the following limited circumstances:
- Service providers — we may use third-party services (such as cloud hosting) that process data on our behalf under strict confidentiality agreements.
- Apple — Coin and subscription purchases are processed by Apple. Sign in with Apple is provided by Apple; their Privacy Policy governs how Apple itself handles that transaction.
- Google — Sign in with Google is provided by Google. When you choose to sign in with Google, the authentication exchange is governed by Google's Privacy Policy. We receive only the identifying information described in §2 above.
- Legal requirements — we may disclose information if required to do so by law or in response to valid legal process.
- Account deletion — if you delete your account, your personal data is permanently removed from our systems within 30 days. This includes any third-party sign-in identifiers linked to your account.
9. Infrastructure Providers
We use the following infrastructure providers whose servers process data on our behalf:
- Amazon Web Services (AWS) — our server and MQTT broker run on EC2 instances in the ap-northeast-1 (Tokyo) region.
- Apple App Store — in-app purchases are processed by Apple. Apple's privacy policy applies to payment data.
10. Data Storage & Security
Your data is stored on servers located in the Asia-Pacific region. We use industry-standard security measures including encrypted connections (HTTPS/TLS 1.2+, MQTTS/TLS 1.2+) and hashed password storage (bcrypt). Authentication tokens are stored in the iOS Keychain.
While we take reasonable steps to protect your information, no system is completely secure. We encourage you to use a strong, unique password for your account.
11. Content Management
- Blocking — you can block other users, preventing them from appearing in your followers, following lists, and producer recommendations.
- Message Deletion — in rooms, you can delete your own messages or remove any message if you are the room owner.
- Reporting — you can report Meetup sessions, Moments, Waves, and users directly from within the app. Reports are reviewed by our moderation team.
- Account Deletion — you can permanently delete your account from Settings → Delete Account. This removes all your personal information within 30 days.
12. Your Rights
You may request access to, correction of, or deletion of your personal data at any time. You can delete your account directly in Settings → Delete Account.
For other requests, contact us at: privacy@fan-wave.com
13. Children's Privacy
FanwaveLife is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
15. Contact
If you have questions about this Privacy Policy, please contact us at:
privacy@fan-wave.com