Privacy Policy

Wave Log (“the Service”) values your privacy and complies with applicable data protection laws, including Korea’s Personal Information Protection Act and Indonesia’s PDP Law.

1. Information We Collect

• On sign-up: email address. If you sign in with Apple or Google, we also receive the email address and name provided by that account (Google also provides a profile picture). If you choose “Hide My Email” with Apple, we receive the relay address Apple generates.
• Profile (optional): nickname, profile photo, bio
• When checking in: recorded video, activity type and rating, comment, the beach and time of check-in
• Location: we use your device location to show your position on the map, find nearby beaches, and confirm beach visits when checking in. Raw coordinates are not stored on our servers; check-in records only reference the beach.
• Push notifications (if you allow them): a device token used to deliver notifications, and your device time zone (UTC offset) to apply quiet hours
• Automatically: usage logs, device information (OS version, etc.), error logs

2. How We Use Information

• Providing the service (account identification, sign-in)
• Providing beach, tide, and community features
• Community operations such as abuse prevention and report handling
• Sending notifications such as reactions to your content (likes, comments) and moderation notices
• Statistical analysis to improve the service

3. Retention

• When you delete your account, we promptly delete your personal data, including your account, profile, and check-in videos.
• Push notification device tokens are detached from your account when you sign out and deleted when you delete your account.
• Data may be retained longer where required by law.

4. Processors and International Transfer

We use the following providers to store and process data:

• Supabase Inc. (database and storage hosting; servers located in Tokyo, Japan)
• Mapbox Inc. (map display — location may be processed while using the map)
• Sentry (error and crash log processing; servers located in the United States)
• Google LLC (Firebase Cloud Messaging — push notification delivery; servers located in the United States)
• PostHog Inc. (anonymized app and website usage analytics; servers located in the United States) — you can opt out anytime in Settings > Allow Analytics in the app, or by enabling Do Not Track in your browser for the website

5. Third Parties

We do not share your personal information with third parties without your consent, except where required by law.

6. Your Rights

• You can view and edit your personal information at any time (Profile > Edit).
• You can delete your account and all associated data via Settings > Delete account.

7. Children

Users under 14 may not sign up for the Service.

8. Data Protection Officer & Contact

• Data Protection Officer: Jeehwan Ahn
• Privacy inquiries: [email protected]

9. Changes

This policy takes effect on October 4, 2026 (first effective July 18, 2026; revised October 4, 2026 to add push notification data and processor). Changes will be announced in the app.