Privacy Policy for WonderEdit

Effective Date: November 10, 2025

Last Updated: November 10, 2025

Version: 1.0

This version supersedes all prior versions of this Privacy Policy.

1. Introduction

Welcome to WonderEdit ("we," "our," or "us"). This Privacy Policy explains how S Wave Digital LLC collects, uses, discloses, and safeguards your information when you use our WonderEdit mobile application (the "App"). Please read this Privacy Policy carefully.

Our Contact Information:

Legal Name: S Wave Digital LLC
Business Address: 9225 Bay Plaza Blvd, Suite 417 PMB 1084, Tampa, FL 33619
Email: hello@s-wavedigital.com
Registered Agent: Northwest Registered Agent LLC, 7901 4th St N, STE 300, St. Petersburg, FL 33702

2. Information We Collect

2.1 Personal Information You Provide

When you create an account, we collect:

Email address (required for account creation and authentication)
Password (stored encrypted, never in plain text)
Optional: Apple ID information (if you sign in with Apple)

2.2 Automatically Collected Information

When you use the App, we automatically collect:

Device Information:

Device identifier (IDFV - Identifier for Vendor)
Device model and manufacturer
Operating system version (iOS version)
App version

Usage Data:

Credit balance and transaction history
Subscription status and tier
Images generated count
Feature usage patterns
Timestamps of actions

Technical Data:

IP address (temporarily for API requests)
Authentication tokens (JWT)
Error logs and crash reports

2.3 User-Generated Content

Important: We do NOT permanently store your uploaded or generated images on our servers at this time. Images are processed in memory and discarded after generation. If this changes, we will update this policy and notify you.

2.4 Payment Information

We use Apple's In-App Purchase system. We do NOT collect or store your payment card information. Apple processes all payments and provides us only with:

Transaction IDs
Purchase confirmation
Subscription status
Product IDs purchased

For payment security details, please review Apple's Privacy Policy.

2.5 Information We Do NOT Collect

We do not collect:

Precise geolocation data
Your photo library (beyond images you explicitly select)
Contacts or address book
Camera or microphone access (except when you choose to take a photo)
Health or fitness data
Browsing history

3. How We Use Your Information

To Provide Services

Authenticate your account and maintain session security
Process image generation and editing requests
Manage your credit balance and subscriptions
Save your generated images to your device (if enabled)
Provide customer support

To Improve Our Services

Analyze usage patterns to improve features
Debug errors and fix technical issues
Develop new features and AI presets
Optimize app performance

For Security and Fraud Prevention

Detect and prevent abuse of the credit system
Identify device-level fraud patterns
Protect against unauthorized access
Maintain service integrity

4. How We Share Your Information

4.1 Third-Party Service Providers

We share information with trusted third-party service providers who assist us in operating the App:

Supabase (Database and Authentication)

Data Shared: Email, user ID, authentication tokens, credit balances, subscription status, transaction history

Purpose: User authentication, data storage, database management

Location: United States | Privacy Policy

Google Gemini API (AI Image Generation)

Data Shared: Image prompts (text), uploaded images (temporarily for processing), device authentication tokens

Purpose: AI-powered image generation and editing

Location: United States (Google Cloud) | Privacy Policy

Note: Images sent to Gemini are processed according to Google's policies. Google may use prompts to improve their AI models.

Render.com (Backend Hosting)

Data Shared: API requests containing authentication tokens and image generation parameters

Purpose: Backend service hosting and API proxy

Location: United States | Privacy Policy

Apple Inc. (In-App Purchases)

Data Shared: Purchase transactions, subscription status

Purpose: Payment processing and subscription management

4.2 We Do NOT Sell Your Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Storage and Security

5.1 Where We Store Your Data

Your data is stored in:

Supabase: United States (primary database)
Render.com: United States (backend services)
Your Device: iOS Keychain (authentication tokens), UserDefaults (preferences, cached credit balance)

5.2 How We Protect Your Data

We implement industry-standard security measures:

Encryption:

All data transmitted over HTTPS/TLS
Passwords hashed with bcrypt
Authentication tokens encrypted with JWT
Keychain storage for sensitive data on device

Access Controls:

Row Level Security (RLS) policies in database
Role-based access controls
Secure API authentication with short-lived tokens

Limitations: No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5.3 Data Retention

Account Data:

We retain your account information for as long as your account is active. After deletion: 30 days grace period for recovery, then permanent deletion.

Transaction Data:

Purchase records retained for 7 years (IRS requirement for business records).

Generated Images:

Currently NOT stored on our servers (processed in memory only).

Logs and Analytics:

Server logs retained for 90 days, error logs for 180 days, anonymized analytics for 2 years.

6. Your Privacy Rights

6.1 Access and Control

You have the right to:

Access your personal information
Correct inaccurate information
Delete your account and associated data
Export your data in a portable format
Object to certain data processing activities

How to Exercise Your Rights: Email us at hello@s-wavedigital.com with your request.

6.2 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request information about personal data collected
Right to Delete: Request deletion of your personal information
Right to Opt-Out of Sale: We do NOT sell your personal information
Right to Non-Discrimination: We will not discriminate for exercising your rights

6.3 European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

Right to Access: Request a copy of your data
Right to Rectification: Correct inaccurate data
Right to Erasure: Request deletion ("right to be forgotten")
Right to Data Portability: Receive your data in machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Lodge a Complaint: File a complaint with your supervisory authority

6.4 Account Deletion

To delete your account:

Email hello@s-wavedigital.com with subject "Delete My Account"
We will verify your identity
Account will be deactivated immediately
Data will be permanently deleted within 30 days
Exception: Transaction records retained for 7 years per legal requirements

7. Children's Privacy

WonderEdit is NOT intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

COPPA Compliance: If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at hello@s-wavedigital.com. We will delete such information within 48 hours.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

Material Changes: For significant changes that affect your rights, we will provide at least 30 days' notice before the changes take effect.

Your Continued Use: Your continued use of the App after the effective date constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

S Wave Digital LLC

9225 Bay Plaza Blvd

Suite 417 PMB 1084

Tampa, FL 33619

Email: hello@s-wavedigital.com

Response Time: We will respond to privacy inquiries within 5-7 business days.

Consent

By creating an account and using WonderEdit, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.

S Wave Digital LLC

Version 1.0 | November 10, 2025