Wave (the "app") is built and published by Ubersoft LLC, a Virginia limited liability company ("Ubersoft," "we," "us," "our") on one rule: they initiate, their circle receives. The app does not track its user — no location, no monitoring, no surveillance. Everything a circle member sees is something they sent — except one message the circle can switch on: word that a check-in did not arrive.
- No tracking. No background location, no movement history, no activity monitoring. The one exception is a single location fix they switch on themselves, taken only at the moment they press for help (05).
- No surveillance. No ambient audio, video, or screen activity — ever.
- They choose what's shared. Check-ins and help requests go only to circle members who confirmed by email — plus, if you turn it on, word that a check-in didn't arrive.
- No ads, nothing sold. No advertising identifiers, no analytics tied to them, no data sold or shared.
01 Information the app stores on your device
- Their contacts (names, photos, phone numbers), their schedule, and their preferences — stored on the device.
01.5 What leaves the device
Three things leave the phone, and only when a circle has been connected:
- Check-ins. "I'm okay today" — sent because they tapped the button.
- Help requests. When they confirm an emergency, the circle is told they pressed for help and called emergency services.
- Missed check-ins. If no check-in has arrived by the hour the circle chose, the circle is told that none arrived. This is the one message Wave sends without them acting, and it is triggered by absence — never by watching them. It can be switched off.
Those messages carry their first name and what happened — never their location, and never the contents of anything else in the app.
One more thing can leave, only if they switch on "Family setup help" in Setup: the settings someone they trust has prepared for them — see 01.7. It is off unless they turn it on.
01.6 What the Wave server stores
Wave Circle runs on a deliberately tiny server. This is the complete list of what it holds:
- A circle id, and hashed pairing and device tokens.
- Their first name (so messages can say who they're from), timezone, the chosen worry window, and the check-in rhythm.
- Circle members' contact handles (phone or email) and each person's alert preferences, each verified before any message is sent — this exists to stop Wave from being used to message people who never agreed.
- A single last check-in timestamp, overwritten each time. Not a history.
- The kind of the most recent alert (a check-in, a missed check-in, "I need help", or a test of it) and when it went out, overwritten each time. It lets a browser notification say what happened — so a call for help never arrives looking like a routine check-in.
- The public half of the two encryption keys used for 01.7. Public keys are safe to hold; the private halves never leave either phone.
- A notification address for each browser that opted into alerts, so it can be pinged.
- Short-lived counters used to rate-limit abuse. Where these involve an IP address, it is stored only as a hash.
- If a circle has been paid for: a hashed purchase token or Apple transaction id, the store's order reference, the product, the time it was verified, and which circle it unlocked (04).
Nothing else: no location, no message bodies, no analytics events. Everything the app holds for daily use — faces, schedule, settings — stays on their phone, with the one exception in 01.7.
01.7 The one exception: family setup help
Setting up a phone for someone is hard to do over the telephone, so someone they trust can prepare it for them. It is off unless the person holding the phone turns it on, and they can turn it off again at any time.
While it is on, what has been prepared for them waits on our server until their phone collects it. That parcel can include the people they can call (names, phone numbers, relationships and photos), their "I'm okay" message, their check-in times, and the emergency-card details they chose to share — date of birth, medical notes, home address.
We cannot read any of it. It is encrypted on the helper's phone with a key only the elder's phone holds, and our server stores nothing but the sealed result — it has no key and never sees the contents. This is why the list in 01.6 says no message bodies: what passes through is sealed, not stored in the open.
Each new parcel replaces the last, and the whole thing is erased the moment they switch the setting off. If they never turn it on, none of this data ever leaves their phone at all.
02 Information we collect
Wave has no accounts and no sign-up. The app collects nothing about the person using it — everything it holds for daily use stays on their phone (01). The only information we hold anywhere is the small Wave Circle record listed in 01.6, and — if they switched on family setup help — the sealed parcel described in 01.7, which we cannot read. Both exist only once a circle has been connected.
Wave never collects:
- Location, movement, or GPS data of any kind — with one exception the person turns on themselves, described in 05. Even then it goes straight from their phone into the message to their circle; it never reaches our server.
- Ambient audio, video, or screen activity.
- Usage analytics tied to their identity, advertising identifiers, or any data sold or shared with third parties.
- Their address book. Wave asks for no contacts permission at all — see 05. Someone in their circle can type contacts in for them, and those travel sealed (01.7), but Wave never reads the phone's own address book.
02.5 Circle members and consent
A circle holds up to six people. Each is added by name and contact handle, then receives one email and confirms from their own inbox before anything is ever sent to them. Declining deletes their address immediately. Circle members need no account, no app, and no purchase, and can remove themselves at any time.
03 Analytics and advertising
In the app: none. No analytics SDK, no advertising identifier, no ads, no profiling, and no third-party trackers of any kind.
On this website: wavetoday.app uses privacy-friendly, cookieless page counting (GoatCounter) to see how many people visit. No personal profiles, no cross-site tracking, no ads.
04 Purchases
Wave is free to download and free forever for the person holding the phone. One person unlocks Wave Circle once, as a single in-app purchase: through Google Play on Android, or Apple's App Store on iPhone and iPad.
We never see payment details. Card numbers, billing addresses and the rest are handled by Google or Apple and never reach us. To confirm an unlock is genuine and tie it to one circle, the app sends our server the store's proof of purchase — Google's purchase token, or Apple's transaction id — and our server asks that store whether it is a real, unrefunded purchase of Wave's unlock. It then stores a hashed copy of that token or transaction id, the store's order reference (Google's order id, or Apple's original transaction id), which product it was, the time it was verified, and the circle it unlocked. Nothing else.
05 Permissions
Wave asks for as little as it can, and each permission exists for one visible feature:
- Phone calls. So tapping a face, or confirming an emergency, places the call directly instead of only opening the dialer. If it is denied, Wave falls back to the dialer — a denied permission can never stop a call going through.
- Location (optional, off unless turned on). Used once, at the moment they confirm a call for help, so the message to their circle can say where they are. Never before, never after, never in the background. It can be switched off at any time.
- Internet. For Wave Circle and for a shared calendar, if one is set up.
- Billing. For the one-time circle unlock described in 04.
No contacts permission. Choosing someone to call opens the phone's own contact picker, which hands Wave only the single person tapped. Wave never reads the address book.
05.5 Calls and messages
Calls placed from Wave go through the phone's own dialer or calling apps. Wave does not record, route, or listen to calls. Circle messages are delivered by web notification or email; optional text messages for relatives without a smartphone are sent through a carrier gateway, which sees only the number and the message text.
06 Children's privacy
Wave is made for older adults and the people who care for them. It is not directed to children, we do not knowingly collect information from anyone under 13, and nothing in the app is designed for or marketed to children. If you believe a child's information has reached us, write to us and we will delete it.
07 Your choices and rights
- Everything on the phone is theirs. Contacts, schedule, photos and settings live only on the device — uninstalling Wave, or clearing its storage, removes them completely. We hold no copy.
- Turn off the missed check-in notice. It is the one message Wave sends without them acting; it can be switched off in the app.
- Never share location. It is off unless turned on, and can be turned back off at any time.
- Leave a circle. Any circle member can remove themselves, and declining the first email deletes their address on the spot.
- Delete the circle. Write to us and we will delete the circle record and everything attached to it.
08 Data security
- Everything travels over encrypted connections (HTTPS).
- Device and pairing tokens are stored only as one-way hashes, so a copy of our database yields nothing that could be used.
- When someone in their circle adjusts settings remotely, the change is end-to-end encrypted between the two phones. Our server relays it without being able to read it.
- Nothing is delivered to an address that has not confirmed itself first.
09 Third-party services
Wave uses as few outside services as it can, and none of them receive anything about the person using the app beyond what is needed to deliver a message:
- Cloudflare — runs the Wave Circle server and its database.
- Google Play — the app store, and the billing for the one-time unlock (04).
- Resend — sends the consent and circle emails.
- Web push services (Google, Apple, Mozilla, Microsoft) — deliver the notification that wakes a circle member's phone. The push itself carries no content.
- GoatCounter — cookieless page counting on this website only (03).
10 Changes to this policy
Wave is in active development; this policy will be updated as the app takes final shape, and material changes will be noted here with a new effective date.
September 23, 2026 — purchases. 04 and 01.6 now cover iPhone purchases through Apple's App Store, verified with Apple the same way Google Play purchases are verified with Google, and list every purchase field the server keeps (the product, and which circle a purchase unlocked, were missing). No practice changed with this edit.
September 23, 2026 — label. Wording only: 01.5 now quotes the remote-setup switch as it appears in Setup, "Family setup help". It used to quote an older label for the same switch.
September 23, 2026 — server update. Added one item to 01.6: the kind and time of the most recent alert, overwritten each time, so that browser notifications can tell a call for help from a routine check-in. In effect from September 23, 2026, when that server update was deployed; the effective date above moved with it.
September 23, 2026. Wording only. The people who receive check-ins are now called the person's circle rather than their family, because a circle can be relatives, carers, doctors, neighbours or friends, and the service that serves them is named Wave Circle. Nothing about what Wave collects, stores or sends changed, so the effective date stands.
August 10, 2026. Added 01.7 and expanded 01.6. Family setup help stages the settings a family prepares on our server, sealed, until the elder's phone collects them — the earlier wording said everything stayed on the phone, which was true only while that setting was off. Nothing about how Wave behaves changed; the description of it did. The same update names the remaining items the server holds: public encryption keys, browser notification addresses, and hashed rate-limit counters.
11 Contact
Questions about privacy? Reach us at support@ubersoft.pro.