Privacy Policy

Last updated: September 27, 2026

Waaait (“we,” “us,” “the service”) is a small, invite-based app for sending time-delayed letters and questions to people you already know. This policy explains what information we collect, how we use it, and how you can control it.

Waaait is a personal project operated by an individual developer, not a registered company. If you have questions about this policy or your data, contact myer@kakao.com.

1. Who this applies to

Waaait is not open to the general public — it’s a “nano community” product. You can only join by being invited by, or connecting with, someone who already uses it. This policy covers everyone who creates a Waaait account.

2. Information we collect

Account information. When you sign in with Google, we receive your name, email address, and profile picture from Google. We only request Google’s basic sign-in scopes — we do not access your Gmail, Google Drive, Google Calendar, or Google Contacts.

Content you create. This includes letters and their titles/bodies, photos you attach or upload, questions and answers you send through Ask, your nickname, and anything you add to your “About me” section.

Location information. If you set a home location for your Space, or choose to “bury” a letter at a map location, we store those coordinates. Location data is only collected when you actively set it — we do not track your device’s real-time location in the background.

Automatically collected information. Basic technical data needed to run the service (e.g., timestamps of when content was created or opened, error logs). We do not use third-party advertising trackers or sell any data to advertisers.

3. How we use your information

We use your information to operate the core features of the app: authenticating you, delivering letters and questions to the right people at the right time, showing your connections your Space and content according to the visibility rules below, and sending in-app notifications about new letters or questions.

We do not use your data for advertising, and we do not sell your data to any third party.

4. Who can see your information

Waaait is built around small, trusted circles, and visibility is deliberately limited:

  • Your profile, “About me,” and Space are visible only to people you’re connected with.
  • A letter or question is visible only to its intended recipient(s) (or, for letters to yourself, to you alone unless you choose to make a specific letter visible to your connections).
  • Photos you add to your Space follow the same connections-only visibility.
  • No content is ever publicly discoverable or searchable by people outside your connections — there is no public directory or search.

5. Third-party services we use

We rely on a small number of infrastructure providers to run Waaait. Each only receives the data necessary to perform its function:

  • Google — for sign-in (authentication only).
  • Supabase — our database, file storage, and authentication backend. Your account data, content, and photos are stored here.
  • Vercel — hosting for the web application.
  • GitHub — infrastructure that runs our automated backup job. The data is handled only briefly, within that job, before it is encrypted.
  • Cloudflare — storage for our backups. Backups are encrypted before they are sent, so Cloudflare cannot read them.

These providers process data on our behalf under their own security and privacy commitments; we don’t share your data with them for their own independent use.

6. Data retention and deletion

We keep your account and content for as long as your account is active. If you’d like your account and associated data deleted, email myer@kakao.com with your request. We’ll verify the request and delete your account, content, and personal data within a reasonable time, except where we’re required to retain limited records by law.

We keep encrypted daily backups of the database and photos for up to 30 days, used only to restore the service after a failure. Deleted data may remain in these backups for up to 30 days before it is removed for good.

7. Children’s privacy

Waaait is not directed at children under 14, and we do not knowingly collect data from children under 14. If you believe a child has created an account, contact us at myer@kakao.com and we will remove it.

8. Security

We take reasonable technical measures (such as relying on established providers like Supabase and Google for authentication and storage) to protect your information, but no service can guarantee perfect security. Please use a strong, unique password for your Google account and keep your device secure.

9. International data storage

Because we use providers like Supabase and Vercel, your data may be stored or processed on servers located outside your home country. We take reasonable steps to ensure these providers handle data responsibly.

10. Changes to this policy

If we make material changes to this policy, we’ll update the “Last updated” date above and, where appropriate, notify users through the app.

11. Contact

Questions, concerns, or requests about your data: myer@kakao.com