Privacy Policy | WAVE CLUB

What we collect

Your account: email address, name, username, birth year, profile picture and banner, and your settings. If you sign in with Google, Google tells us your name, email and picture.
What you put on WAVE CLUB: streams, saved streams, Waves, captions, chat messages, follows, likes, reports and messages you send us.
How you use it: when you're online, what you watch and how (for counts and the feed), and basic technical details such as your browser, device type, screen size and internet address (to keep accounts safe, stop abuse and fix problems).
The safety check: streams from the WAVE CLUB studio are checked for nudity on your own phone or computer while you're live. The pictures never leave your device for this; we only keep a note if the check ended a stream.
On your device: one sign-in cookie that keeps you logged in, and preferences like Low Data mode saved in your browser. No advertising or tracking cookies.

Why we use it

To run your account and show your content (our agreement with you).
To keep WAVE CLUB safe: sign-in codes, spam and abuse limits, moderation and reports (our legitimate interest, and the law).
To improve WAVE CLUB and decide what to show in feeds (our legitimate interest).
To email you sign-in codes and important account messages. News and offers only if you said yes, and you can stop them any time (your consent).

We don't sell your personal information.

What other people can see

Your username, display name, profile picture, banner, bio, follower counts, streams, Waves and chat messages are public. Your email address and birth year are never shown on your profile.

We use a few trusted services (“operators”) that only handle your information to provide their service to us:

Cloudflare: hosting, the database and storage for pictures and videos.
LiveKit: carrying live video between streamers and viewers.
Brevo: sending sign-in codes and account emails.
Google: only if you choose “Continue with Google”.

These services store and process information on servers outside South Africa. We only use providers bound by data-protection rules or agreements that give your information protection similar to POPIA. We may also share information when the law requires it, or to protect someone from harm.

How long we keep it

Your account and content: until you delete them or your account.
Sign-in codes: minutes. Technical records for safety: a short time, then deleted.
After you delete your account we remove your information, except a small record where the law requires it or to stop abuse (for example, someone who was banned).

Keeping it safe

Connections are encrypted, passwords aren't used at all (you sign in with an email code or Google), staff access is limited, and admin actions are logged. No system is perfect: if a breach puts your information at risk, we'll tell you and the Information Regulator as POPIA requires.

Children

WAVE CLUB accounts are for people 16 and older. If you're under 18, a parent or guardian must agree to you using WAVE CLUB. We use your birth year to keep 18+ streams away from anyone under 18. If we learn that someone under 16 has an account, we delete it.

Your rights

Ask what information we have about you, and get a copy.
Correct it: most of it you can change yourself in Settings.
Delete it: delete your account in Settings, or ask us.
Object to how we use it, or withdraw consent (for example, to news emails).
Complain to the Information Regulator (South Africa) at inforegulator.org.za. We'd like the chance to sort it out first.

Contact

Email hello@w4veclub.com, or, signed in, use Tell us about a problem (the speech bubble in your notifications) and pick “My account” or “Something else”. We check messages every day.

If we change this policy in an important way, we'll tell you on WAVE CLUB first.