Waura

Privacy Policy

Waura, Inc. · Last updated October 2, 2026

This policy explains what Waura, Inc. (“Waura,” “we,” “us”) collects when you use the Waura iOS app, website, and waitlist (the “Service”), what we do with it, who we share it with, and your choices. It is part of our Terms of Service.

The short version: we collect what we need to run a video service and get better at it. We do not sell your personal information, we keep what you watch private, and you don’t need an account to use the app. The app has no advertising tools; the only ones we use are on our waitlist page, to measure whether our ads bring people there.

  1. What we collect

    • The app, without an account. The app makes a random installation identifier on your phone. Your coins, unlocks, and purchases are kept under it until you sign in.
    • Account (optional). If you sign in, your email address and sign-in details. With Apple or Google, we receive the name and email address they share with us (which may be a private relay address); with an email code, your email address.
    • Purchases. In the app, Apple takes the payment; we never see your card. Apple and RevenueCat tell us what you bought: the product, price, currency, store country, date, transaction identifiers, and whether VIP is on, renewing, or refunded. For past purchases on our website, Stripe took the payment, and we kept a record of each one (amount, date, currency, billing country, payment type, and the last digits of a card).
    • What you watch. Titles and episodes you view, how far you get, what you unlock, and when your next free episode is due, so we can keep your place and improve the Service.
    • Device and usage. IP address, device and browser type, operating system, app version, language, on our website an approximate location derived from your IP (such as city and country), the installation identifier, push notification token (if you allow notifications), crash reports and errors, screens and pages viewed, what you tap, referring pages, timestamps, and in the app, recordings of how screens are used (session replays, described below).
    • Waitlist. Your email address, when you joined, and how you found us (the site or campaign that sent you).
    • What you send us. Support emails and anything in them.

    We do not ask for, and do not want, sensitive information such as government IDs, health information, or precise location. The app does not access your contacts, photos, camera, or microphone.

  2. How we use it

    • To run the Service: stream video, keep your place, run your account, and help you when you ask.
    • To record purchases, keep your coins, unlocks, and VIP up to date, restore them on a new phone, and prevent fraud and abuse.
    • To send sign-in codes, notifications you turned on (such as when your next free episode opens), and emails about the waitlist and the Service. Every marketing email has an unsubscribe link.
    • To understand how the Service is used, fix problems, and decide what to make next.
    • To keep the Service secure, enforce our Terms, and meet our legal obligations.

    We do not use your personal information to train AI models, and we do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

  3. What you watch stays private

    We do not share information that identifies you together with what you have watched with anyone, except service providers who help us run the Service under confidentiality obligations, when the law requires it (for example, a valid court order), or with your separate, express consent. We do not use what you watch for advertising by anyone else.

  4. Analytics, cookies, and ads

    We use cookies and local storage to keep you signed in, remember your settings, and keep the Service secure. We also use PostHog, our analytics provider, on the website and in the app to understand how the Service is used and to find problems: the pages and screens you visit, what you tap or click, how you arrived (such as the referring site or ad campaign), your device and browser, errors and crashes, and recordings of how pages and screens are used (session replays, in the app as well as on the website). On the website, PostHog also works out an approximate location from your IP address; the app turns that off, so PostHog gets no location from the app. Anything you type into a form, such as your email or a sign-in code, is masked before it leaves your device. PostHog processes this for us as a service provider and does not use it for advertising, and we do not use it to track you across other companies’ apps or websites. Our waitlist page also uses the Meta Pixel, the TikTok Pixel, the Pinterest Tag, the Reddit Pixel and the Google tag, which set cookies to tell us whether our ads on Facebook, Instagram, TikTok, Pinterest, Reddit, Google, and YouTube led you to visit or join. We also tell these platforms directly from our servers when you visit that page and when you join the waitlist, with those cookies, the ad you clicked to get here (which we keep in our own cookie for up to 90 days), your IP address and browser, and, when you join, a scrambled (hashed) copy of your email address, so they can match it to an ad you saw. They use it under their own privacy policies. These tools never see what you watch. If your browser sends the Global Privacy Control signal, the pixels do not load and we send nothing; you can also block these cookies in your browser, or email us to opt out. You can clear or block cookies in your browser, but signing in needs them.

  5. Who we share it with

    Service providers process data for us under contract and only to provide their services:

    • Apple: in-app purchases, Sign in with Apple, app distribution, and push notification delivery.
    • RevenueCat: records of in-app purchases and VIP, so we can unlock what you bought and restore it.
    • Convex: hosting our servers and database, including accounts and sign-in.
    • PostHog: product analytics, session replays, and crash reports (approximate location from IP on the website only).
    • Resend: sending sign-in codes and other email.
    • Google: Sign in with Google, and Google Cast if you choose to watch on your TV.
    • Cloudflare: storing and delivering our videos and images (R2), and bot checks on our website forms.
    • Expo: delivering app updates and passing push notifications to Apple.
    • Vercel: hosting our website.
    • Stripe: past purchases made on our website.
    • The tools our team uses to work and to support you.

    We also share information:

    • Advertising partners (Meta, TikTok, Pinterest, Reddit, and Google): the waitlist signup information described under Analytics, cookies, and ads, so we can measure our ads.
    • Legal and safety: when required by law or legal process, or when we believe in good faith it is needed to protect the rights, property, or safety of Waura, our users, or others, or to enforce our Terms.
    • Business transfers: as part of a merger, acquisition, financing, or sale of assets, subject to this policy.
    • With your consent, or at your direction.

    We do not sell personal information for money. Some US state laws treat the ad measurement described under Analytics, cookies, and ads as “sharing” for cross-context behavioral advertising or as targeted advertising; you can opt out of it with the Global Privacy Control signal or by emailing us. We do not knowingly sell or share the information of anyone under 16.

  6. Your rights

    Depending on where you live (including California and other US states, the EU, the UK, and Switzerland), you may have the right to know what personal information we have about you, get a copy, correct it, delete it, object to or restrict how we use it, withdraw consent, and opt out of sale, sharing, targeted advertising, or profiling. We will not treat you differently for using these rights.

    You can delete your account yourself in the app, at Me › Account › Delete account. That deletes your account along with your coins and the episodes you unlocked. It does not cancel VIP, which Apple bills, so cancel that in your Apple Account settings too. For anything else, or if you never made an account, email us.

    To make a request, email [email protected] from the address tied to your account or waitlist signup. We will verify it and answer within the time the law requires (usually 30 to 45 days). You may use an authorized agent with your written permission; we may ask you to confirm the request directly. If we decline a request, you may appeal by replying to our answer, and, if you are in the EU, UK, or Switzerland, complain to your data protection authority.

    In the EU, UK, and Switzerland, we rely on these legal bases: performing our contract with you, our legitimate interests in running, securing, and improving the Service, your consent (such as for marketing email), and our legal obligations.

  7. How long we keep it

    We keep account and viewing information while you have an account, and waitlist emails until you unsubscribe or the waitlist ends. Transaction records are kept as long as tax, accounting, and payment rules require (generally seven years), and logs and crash reports for up to 12 months. When you ask us to delete your information, we delete or de-identify it, except what we must keep by law, to prevent fraud, or to resolve disputes; copies in backups are removed as the backups expire.

  8. Security

    We protect information with encryption in transit, access controls, and by leaving payment details to Apple and other PCI-compliant processors. No system is perfectly secure, and we cannot guarantee the security of what you send us. If a breach affects your personal information, we will notify you as the law requires.

  9. Children

    The Service is for people 13 and older. Teens under 18 need a parent or guardian’s permission where the law requires it. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us information, email [email protected] and we will delete it and close the account.

  10. Where your information is processed

    We are based in the United States, and we and our providers process information in the US and other countries whose privacy laws may differ from yours. Where the law requires, we protect transfers with approved safeguards such as standard contractual clauses.

  11. Changes to this policy

    We may update this policy. The date at the top shows the latest version. If a change is material, we will tell you by email or in the Service before it takes effect.

  12. Contact

    Waura, Inc.. Privacy questions and requests: [email protected].