Wave (the "app") is built and published by Ubersoft LLC, a Virginia limited liability company ("Ubersoft," "we," "us," "our") on one rule: they initiate, family receives. The app does not track its user — no location, no monitoring, no surveillance. Everything a family member sees is something they sent — except one message the family can switch on: word that a check-in did not arrive.
- No tracking. No background location, no movement history, no activity monitoring. The one exception is a single location fix they switch on themselves, taken only at the moment they press for help (05).
- No surveillance. No ambient audio, video, or screen activity — ever.
- They choose what's shared. Check-ins and help requests go only to family who confirmed by email — plus, if you turn it on, word that a check-in didn't arrive.
- No ads, nothing sold. No advertising identifiers, no analytics tied to them, no data sold or shared.
01 Information the app stores on your device
- Their contacts (names, photos, phone numbers), their schedule, and their preferences — stored on the device.
01.5 What leaves the device
Three things leave the phone, and only when a family circle has been connected:
- Check-ins. "I'm okay today" — sent because they tapped the button.
- Help requests. When they confirm an emergency, the circle is told they pressed for help and called emergency services.
- Missed check-ins. If no check-in has arrived by the hour the family chose, the circle is told that none arrived. This is the one message Wave sends without them acting, and it is triggered by absence — never by watching them. It can be switched off.
Those messages carry their first name and what happened — never their location, and never the contents of anything else in the app.
One more thing can leave, only if they switch on "Let family set up my phone" in Setup: the settings their family has prepared for them — see 01.7. It is off unless they turn it on.
01.6 What the Wave server stores
The family channel runs on a deliberately tiny server. This is the complete list of what it holds:
- A circle id, and hashed pairing and device tokens.
- Their first name (so messages can say who they're from), timezone, the chosen worry window, and the check-in rhythm.
- Family contact handles (phone or email) and each person's alert preferences, each verified before any message is sent — this exists to stop Wave from being used to message people who never agreed.
- A single last check-in timestamp, overwritten each time. Not a history.
- The public half of the two encryption keys used for 01.7. Public keys are safe to hold; the private halves never leave either phone.
- A notification address for each browser that opted into alerts, so it can be pinged.
- Short-lived counters used to rate-limit abuse. Where these involve an IP address, it is stored only as a hash.
- If a circle has been paid for: a hashed purchase token, the Google order id, and the time it was verified (04).
Nothing else: no location, no message bodies, no analytics events. Everything the app holds for daily use — faces, schedule, settings — stays on their phone, with the one exception in 01.7.
01.7 The one exception: family setup help
Setting up a phone for someone is hard to do over the telephone, so family can prepare it for them. It is off unless the person holding the phone turns it on, and they can turn it off again at any time.
While it is on, what their family has prepared waits on our server until their phone collects it. That parcel can include the people they can call (names, phone numbers, relationships and photos), their "I'm okay" message, their check-in times, and the emergency-card details they chose to share — date of birth, medical notes, home address.
We cannot read any of it. It is encrypted on their family's phone with a key only the elder's phone holds, and our server stores nothing but the sealed result — it has no key and never sees the contents. This is why the list in 01.6 says no message bodies: what passes through is sealed, not stored in the open.
Each new parcel replaces the last, and the whole thing is erased the moment they switch the setting off. If they never turn it on, none of this data ever leaves their phone at all.
02 Information we collect
Wave has no accounts and no sign-up. The app collects nothing about the person using it — everything it holds for daily use stays on their phone (01). The only information we hold anywhere is the small family-channel record listed in 01.6, and — if they switched on family setup help — the sealed parcel described in 01.7, which we cannot read. Both exist only once a circle has been connected.
Wave never collects:
- Location, movement, or GPS data of any kind — with one exception the person turns on themselves, described in 05. Even then it goes straight from their phone into the message to their family; it never reaches our server.
- Ambient audio, video, or screen activity.
- Usage analytics tied to their identity, advertising identifiers, or any data sold or shared with third parties.
- Their address book. Wave asks for no contacts permission at all — see 05. Family can type contacts in for them, and those travel sealed (01.7), but Wave never reads the phone's own address book.
02.5 Family members and consent
A circle holds up to six people. Each is added by name and contact handle, then receives one email and confirms from their own inbox before anything is ever sent to them. Declining deletes their address immediately. Family members need no account, no app, and no purchase, and can remove themselves at any time.
03 Analytics and advertising
In the app: none. No analytics SDK, no advertising identifier, no ads, no profiling, and no third-party trackers of any kind.
On this website: wavetoday.app uses privacy-friendly, cookieless page counting (GoatCounter) to see how many people visit. No personal profiles, no cross-site tracking, no ads.
04 Purchases
Wave is free to download and free forever for the person holding the phone. One family member unlocks the family circle once, as a single in-app purchase handled entirely by Google Play.
We never see payment details. Card numbers, billing addresses and the rest are handled by Google and never reach us. To confirm an unlock is genuine and tie it to one circle, our server stores a hashed purchase token, the Google order id, and the time it was verified. Nothing else.
05 Permissions
Wave asks for as little as it can, and each permission exists for one visible feature:
- Phone calls. So tapping a face, or confirming an emergency, places the call directly instead of only opening the dialer. If it is denied, Wave falls back to the dialer — a denied permission can never stop a call going through.
- Location (optional, off unless turned on). Used once, at the moment they confirm a call for help, so the message to family can say where they are. Never before, never after, never in the background. It can be switched off at any time.
- Internet. For the family channel and for a shared family calendar, if one is set up.
- Billing. For the one-time circle unlock described in 04.
No contacts permission. Choosing a family member opens the phone's own contact picker, which hands Wave only the single person tapped. Wave never reads the address book.
05.5 Calls and messages
Calls placed from Wave go through the phone's own dialer or calling apps. Wave does not record, route, or listen to calls. Circle messages are delivered by web notification or email; optional text messages for relatives without a smartphone are sent through a carrier gateway, which sees only the number and the message text.
06 Children's privacy
Wave is made for older adults and the families who care for them. It is not directed to children, we do not knowingly collect information from anyone under 13, and nothing in the app is designed for or marketed to children. If you believe a child's information has reached us, write to us and we will delete it.
07 Your choices and rights
- Everything on the phone is theirs. Contacts, schedule, photos and settings live only on the device — uninstalling Wave, or clearing its storage, removes them completely. We hold no copy.
- Turn off the missed check-in notice. It is the one message Wave sends without them acting; it can be switched off in the app.
- Never share location. It is off unless turned on, and can be turned back off at any time.
- Leave a circle. Any family member can remove themselves, and declining the first email deletes their address on the spot.
- Delete the circle. Write to us and we will delete the circle record and everything attached to it.
08 Data security
- Everything travels over encrypted connections (HTTPS).
- Device and pairing tokens are stored only as one-way hashes, so a copy of our database yields nothing that could be used.
- When a family member adjusts settings remotely, the change is end-to-end encrypted between the two phones. Our server relays it without being able to read it.
- Nothing is delivered to an address that has not confirmed itself first.
09 Third-party services
Wave uses as few outside services as it can, and none of them receive anything about the person using the app beyond what is needed to deliver a message:
- Cloudflare — runs the family-channel server and its database.
- Google Play — the app store, and the billing for the one-time unlock (04).
- Resend — sends the consent and circle emails.
- Web push services (Google, Apple, Mozilla, Microsoft) — deliver the notification that wakes a family member's phone. The push itself carries no content.
- GoatCounter — cookieless page counting on this website only (03).
10 Changes to this policy
Wave is in active development; this policy will be updated as the app takes final shape, and material changes will be noted here with a new effective date.
August 10, 2026. Added 01.7 and expanded 01.6. Family setup help stages the settings a family prepares on our server, sealed, until the elder's phone collects them — the earlier wording said everything stayed on the phone, which was true only while that setting was off. Nothing about how Wave behaves changed; the description of it did. The same update names the remaining items the server holds: public encryption keys, browser notification addresses, and hashed rate-limit counters.
11 Contact
Questions about privacy? Reach us at support@ubersoft.pro.