Privacy Policy

What we collect

• Waitlist. Your email address, when you joined, and how you found us (the site or campaign that sent you).
• Account. Your email address and sign-in details. If you sign in with Apple or Google, we receive the name and email address they share with us (which may be a private relay address).
• Purchases. Your plan, credits, and a record of each transaction (amount, date, currency, billing country, payment type, and the last digits of a card). Payment details go straight to our payment processor; we never see or store full card or bank numbers.
• What you watch. Titles and episodes you view, how far you get, and what you unlock, so we can keep your place and improve the Service.
• Device and usage. IP address, device and browser type, operating system, language, approximate location derived from your IP, app installation identifier, push notification token (if you allow notifications), crash reports, pages and screens viewed, referring pages, and timestamps.
• What you send us. Support emails and anything in them.

We do not ask for, and do not want, sensitive information such as government IDs, health information, or precise location. If we ever need to verify your age, we will say what we collect and why at that time.

How we use it

• To run the Service: stream video, keep your place, run your account, and help you when you ask.
• To take payment, manage plans and credits, send receipts and renewal notices, and prevent fraud and abuse.
• To email you about the waitlist, launch, and the Service. Every marketing email has an unsubscribe link.
• To understand how the Service is used, fix problems, and decide what to make next.
• To keep the Service secure, enforce our Terms, and meet our legal obligations.

We do not use your personal information to train AI models, and we do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

What you watch stays private

We do not share information that identifies you together with what you have watched with anyone, except service providers who help us run the Service under confidentiality obligations, when the law requires it (for example, a valid court order), or with your separate, express consent. We do not use what you watch for advertising by anyone else.

Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember your settings, and keep the Service secure. We also use PostHog, our analytics provider, on the website and in the app to understand how the Service is used and to find problems: the pages and screens you visit, what you tap or click, how you arrived (such as the referring site or ad campaign), your device, browser and approximate location from your IP address, errors, and recordings of how pages and screens are used (session replays). Anything you type into a form is masked before it leaves your device. PostHog processes this for us as a service provider and does not use it for advertising. Our waitlist page also uses the Meta Pixel, the TikTok Pixel, the Pinterest Tag, the Reddit Pixel and the Google tag, which set cookies to tell us whether our ads on Facebook, Instagram, TikTok, Pinterest, Reddit, Google, and YouTube led you to visit or join. We also tell these platforms directly from our servers when you visit that page and when you join the waitlist, with those cookies, the ad you clicked to get here (which we keep in our own cookie for up to 90 days), your IP address and browser, and, when you join, a scrambled (hashed) copy of your email address, so they can match it to an ad you saw. They use it under their own privacy policies. These tools never see what you watch. If your browser sends the Global Privacy Control signal, the pixels do not load and we send nothing; you can also block these cookies in your browser, or email us to opt out. You can clear or block cookies in your browser, but signing in needs them.

Who we share it with

• Service providers that process data for us under contract and only to provide their services, including hosting and databases, video and file storage and delivery, payment processing (Stripe), app distribution (Apple), sign-in (Apple, Google), email delivery, product analytics and crash reporting (PostHog), and the tools our team uses to work and support you.
• Advertising partners (Meta, TikTok, Pinterest, Reddit, and Google): the waitlist signup information described under Cookies, so we can measure our ads.
• Legal and safety: when required by law or legal process, or when we believe in good faith it is needed to protect the rights, property, or safety of Waura, our users, or others, or to enforce our Terms.
• Business transfers: as part of a merger, acquisition, financing, or sale of assets, subject to this policy.
• With your consent, or at your direction.

We do not sell personal information for money. Some US state laws treat the ad measurement described under Cookies as “sharing” for cross-context behavioral advertising or as targeted advertising; you can opt out of it with the Global Privacy Control signal or by emailing us. We do not knowingly sell or share the information of anyone under 16.

Your rights

Depending on where you live (including California and other US states, the EU, the UK, and Switzerland), you may have the right to know what personal information we have about you, get a copy, correct it, delete it, object to or restrict how we use it, withdraw consent, and opt out of sale, sharing, targeted advertising, or profiling. We will not treat you differently for using these rights.

To make a request, email info@waura.com from the address tied to your account or waitlist signup. We will verify it and answer within the time the law requires (usually 30 to 45 days). You may use an authorized agent with your written permission; we may ask you to confirm the request directly. If we decline a request, you may appeal by replying to our answer, and, if you are in the EU, UK, or Switzerland, complain to your data protection authority.

In the EU, UK, and Switzerland, we rely on these legal bases: performing our contract with you, our legitimate interests in running, securing, and improving the Service, your consent (such as for marketing email), and our legal obligations.

How long we keep it

We keep account and viewing information while you have an account, and waitlist emails until you unsubscribe or the waitlist ends. Transaction records are kept as long as tax, accounting, and payment rules require (generally seven years), and logs and crash reports for up to 12 months. When you ask us to delete your information, we delete or de-identify it, except what we must keep by law, to prevent fraud, or to resolve disputes; copies in backups are removed as the backups expire.

Security

We protect information with encryption in transit, access controls, and by leaving payment details to PCI-compliant processors. No system is perfectly secure, and we cannot guarantee the security of what you send us. If a breach affects your personal information, we will notify you as the law requires.

Adults only

The Service is only for people 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, email info@waura.com and we will delete it and close the account.

Where your information is processed

We are based in the United States, and we and our providers process information in the US and other countries whose privacy laws may differ from yours. Where the law requires, we protect transfers with approved safeguards such as standard contractual clauses.

Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is material, we will tell you by email or in the Service before it takes effect.

Contact

Waura, Inc.. Privacy questions and requests: info@waura.com.