Wavemocards

1. Information we collect

We collect the following information when you use the Service:

• Account information: when you sign up or sign in (including with Google), we receive your name, email address, and profile picture through our authentication provider, WorkOS.
• Emotion records: the emotion cards you select, your before and after emotion levels, and the stories and reflections you write are stored so you can review them later.
• Preferences: your language and display settings.
• Usage analytics: we use Vercel Web Analytics to collect anonymised, aggregated usage statistics such as page views. It does not use cookies and cannot identify you personally.
• Cookies: we use only essential cookies, to keep you signed in and to remember your language.

2. How we use your information

We use your information solely to:

• provide and operate the Service
• authenticate you and keep you signed in
• store your emotion records and display them to you
• improve the Service using anonymised, aggregated statistics
• respond to your enquiries and feedback

We do not sell your personal information, and we do not use it for advertising.

3. Google user data

If you sign in with Google, we only receive your basic profile information: your name, email address, and profile picture. We use this information solely to create and authenticate your account.

Wavemocards' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not share, transfer, or sell Google user data to third parties, and we do not use it for advertising.

4. Where your data is stored and how it is protected

Your data is stored in a PostgreSQL database hosted by Supabase and protected by row-level security, so your emotion records can only be read and modified by you. All data is transmitted over encrypted (HTTPS) connections.

5. Sharing your information

We never sell your personal information. We share it only:

• with service providers: WorkOS (authentication), Supabase (database), and Vercel (hosting and anonymised analytics), each of which processes data only as needed to provide the Service
• when required by law, a court order, or a lawful request from a government authority

6. Data retention and deletion

Your emotion records are kept until you delete them. You can delete individual records at any time from the Records page. To delete your account and all associated data, contact us at info@wavemocards.com and we will complete the deletion within 30 days.

7. Children's privacy

The Service is designed for emotional education and is suitable for a general audience. If you are under the age of digital consent in your region, please use the Service with the consent of a parent or guardian. We do not knowingly collect personal information from children without such consent.

8. Changes to this policy

We may update this policy from time to time. If we make material changes, we will announce them on this page and update the "Last updated" date. Continuing to use the Service after a change means you accept the updated policy.

9. Contact us

If you have any questions about this policy or how your personal information is handled, please email us at info@wavemocards.com.