Wave note Privacy Policy

Last updated: July 27, 2026

This Privacy Policy explains how rflx.app (“we,” “us,” or “our”) handles information when you use the Wave note app and its share extension (together, “Wave note”).

Privacy at a glance

Wave note is designed to keep your memories and reference material under your control:

  • You do not need to create a Wave note account.
  • Your saved content is stored on your device and, when iCloud is available for Wave note, in your private iCloud database so it can sync across your devices.
  • We do not sell your personal information.
  • We do not use your saved text, links, photos, checklists, voice recordings, board names, or search queries for advertising or analytics.
  • Wave note does not use third-party advertising or track you across apps and websites.
  • We use Firebase Analytics for limited product-usage measurements and Firebase Crashlytics for app stability and crash diagnostics.

Information handled by Wave note

Content you choose to save

Depending on how you use the app, Wave note may store:

  • notes, formatted text, checklists, and completion state;
  • web links, link titles, and cached link-preview images;
  • photos you select or share with the app;
  • voice notes you record;
  • board names, symbols, colors, and entry organization;
  • reminder dates and completion state; and
  • technical information needed to order, display, sync, and manage your entries.

This content is used only to provide the features you request. Semantic and exact search are performed on your device. We do not send your saved content or search queries to our analytics or crash-reporting services.

Share extension

When you share text, links, or images to Wave note from another app, the share extension writes a temporary package in the app’s local shared container. The main app imports that package into your library and removes the successfully imported temporary package. The App Group used for this process is local to your device and is separate from iCloud sync.

iCloud and CloudKit

Wave note uses Apple’s CloudKit private database to sync your library between devices signed in to your iCloud account. Synced content can include all content listed above. Apple states that a CloudKit private database is accessible only to the current user by default, is not visible in the developer portal, and counts against the user’s iCloud storage.

If iCloud is unavailable, Wave note may continue to keep content locally on your device. iCloud and CloudKit are operated by Apple and are subject to Apple’s Privacy Policy.

Photos, microphone, notifications, and Apple Music

Wave note uses system-protected device features only when needed:

  • Photos: Apple’s system photo picker lets you choose the specific images to add to an entry without giving Wave note general access to your photo library.
  • Microphone: to record a voice note while you use the recording control.
  • Notifications: to schedule reminders you create. Reminder notifications are scheduled and delivered using Apple’s notification system.
  • Apple Music: to search for, select, and play Apple Music catalog content. Your Apple Music subscription and playback are managed by Apple.

You can change these permissions in your device’s Settings. Wave note does not receive your Apple Account password or payment-card details.

When you add a web link, Apple’s Link Presentation framework may contact the linked website to retrieve its title, icon, or preview image. The website or its service providers may receive standard network information such as your IP address and may apply their own privacy policies. Opening a saved link takes you to a third-party website or app whose practices we do not control.

Purchases

Wave note uses Apple’s StoreKit and the App Store to offer and restore Wave note Pro purchases. Apple processes payment and account information. We receive product and transaction status needed to determine whether Pro features are available, but we do not receive your full payment details. Purchases are subject to Apple’s privacy practices.

Product analytics

We use Google Analytics for Firebase to understand, in aggregate, how Wave note features are used and to improve the app. Analytics may process an app-instance or installation identifier, general device and app information, approximate location derived from IP address, and usage events.

The events we intentionally record are limited to information such as:

  • which main tab was selected;
  • the general type of an entry created or deleted (for example, text, photo, checklist, link, or voice note);
  • where entry creation started;
  • whether an entry had a reminder;
  • pin and board actions;
  • counts associated with board deletion or completed share imports; and
  • onboarding completion.

We do not include saved text, checklist text, URLs, titles, photos, voice recordings, board names, entry identifiers, reminder dates, or search queries in these events.

Analytics collection is disabled during our automated tests. Wave note does not use analytics data for third-party advertising or cross-app tracking.

For more information, see Google Analytics for Firebase, Firebase privacy and security information, and Google’s Privacy Policy.

Crash and diagnostic information

We use Firebase Crashlytics to identify crashes and improve reliability. Crashlytics may process crash stack traces, app version, device model, operating-system version, installation identifiers, timestamps, and other technical state associated with a crash. We do not intentionally attach your saved content to crash reports.

For more information, see Firebase privacy and security information and Google’s Privacy Policy.

Communications

If you email us for support or another request, we receive the information you provide, such as your email address, message, and any attachments. Please do not send private entry content unless it is necessary for your request.

How we use information

We use information described in this Policy to:

  • provide, maintain, sync, and restore Wave note features;
  • process and verify purchases;
  • respond to support requests;
  • understand feature usage and improve the app;
  • diagnose crashes, prevent abuse, and protect the app’s security; and
  • comply with legal obligations and enforce our Terms of Use.

Where applicable law requires a legal basis, we rely on performing our agreement with you, our legitimate interests in operating and improving Wave note, your consent for optional device permissions, and compliance with legal obligations.

How information is shared

We share information only as described in this Policy:

  • Apple provides iCloud/CloudKit, StoreKit and App Store purchases, notifications, Photos access, Link Presentation, and Apple Music features.
  • Google provides Firebase Analytics and Firebase Crashlytics.
  • Authorities or other parties may receive information if reasonably necessary to comply with law, protect rights and safety, investigate fraud or security issues, or complete a business transfer. Any successor would remain subject to this Policy for information collected under it.

We do not sell or rent your personal information. We do not share your saved content with Google Analytics or Crashlytics.

Apple and Google may process information in countries other than your own under their respective terms, safeguards, and privacy policies.

Retention and deletion

  • Saved content: remains on your device and, when enabled, in your private iCloud database until you delete it or manage the app’s iCloud data. Deleting an entry in Wave note removes it from the app’s active library and the deletion is synchronized through iCloud when sync is available.
  • Removing the app: uninstalling Wave note removes its local data from that device, but content already stored in iCloud may remain available for synchronization or restoration. You can manage data stored by apps in your iCloud settings.
  • Analytics and diagnostics: are retained according to our configured retention settings and the applicable Google service terms, then deleted or aggregated.
  • Support messages: are retained only as long as reasonably needed to resolve the request, maintain business records, or meet legal obligations.

Because your CloudKit content is stored in your private iCloud database, we cannot directly view, export, or delete that content for you. You control individual entries through Wave note and can manage the app’s iCloud data through your Apple Account settings.

Your choices and rights

You can:

  • choose whether to grant Photos, microphone, notifications, and Apple Music access;
  • edit or delete entries in Wave note;
  • manage Wave note’s iCloud storage through Apple settings;
  • manage or cancel purchases and subscriptions through your Apple Account; and
  • contact us to request access to, correction of, or deletion of personal information we control, or to object to or restrict certain processing.

Privacy rights vary by location. We may need to verify a request before acting on it. We may also be unable to associate a person with de-identified or pseudonymous analytics data.

Children’s privacy

Wave note is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Where local law requires a higher age for a person to consent to data processing, a parent or guardian must provide any required consent. If you believe a child has provided personal information to us improperly, contact us so we can take appropriate action.

Security

We use reasonable technical and organizational measures designed to protect information. Your saved library is protected by the security of your device and Apple Account, and CloudKit uses Apple’s account-based access controls. No storage or transmission method is completely secure, so we cannot guarantee absolute security.

Changes to this Policy

We may update this Privacy Policy as Wave note or legal requirements change. We will post the revised Policy at this URL and update the “Last updated” date. If a change materially affects your rights, we will provide additional notice where required.

Contact us

For privacy questions or requests, contact:

contact@rflx.app

rflx.app