Privacy Policy

Wuva (the "App") · Effective date: September 22, 2026 · Last updated: September 23, 2026

Wuva is a reminder app that lets people you trust send you reminders — including, at the highest priority level, a real alarm that can wake your phone even when it is silenced. This Privacy Policy explains what information we collect when you use Wuva, why we collect it, how it's used and shared, and the choices and rights you have — including rights specific to residents of the United States, Canada, and the European Economic Area, the United Kingdom and Switzerland.

Wuva is operated by Davy Han ("we," "us," "our"). If you have any questions about this policy or how your information is handled, contact us at [email protected].

1. Information we collect

We collect information in three ways: what you give us directly, what's generated by using the App, and what your device shares as part of standard notification/alarm delivery.

Account & profile

Data	Why we have it
Email address	Sign-in (one-time passcode), or via Sign in with Apple / Google, and account recovery.
Display name, phone number, profile photo, postal code	Optional profile fields you choose to fill in — shown to people in your Circle so they know who's messaging them.
Time zone	Detected from your device so reminders fire at the correct local time for you and for whoever you send one to.

Relationships and reminders

Data	Why we have it
Invitations and Circle connections	The relationship graph that determines who is allowed to send whom a reminder, at what priority level, and under what quiet-hours/quota rules you each set.
Reminder content (title, message text, schedule, priority level, recurrence)	What you're actually using the App for. The message body is either one of the App's built-in preset phrases or free text you type yourself — we don't inspect, categorize, or use this content for anything beyond delivering it.
Delivery, acknowledgement and reply records	So both sides can see a history of what was sent, delivered, and responded to.

Device & delivery data

Data	Why we have it
Push notification token, platform, OS version, app version	Required to actually deliver a push notification or a system-level alarm to your specific device via Apple's or Google's notification services.
Notification/alarm permission status (e.g. Critical Alerts, exact-alarm authorization)	Lets the App tell you honestly whether a given priority level will actually be able to reach you, instead of silently failing.
Delivery attempt logs and error codes	Troubleshooting — e.g. figuring out why a reminder didn't ring.

Subscription information

If you subscribe to a paid plan, your purchase is handled entirely by Apple's App Store (or Google Play) billing, using a subscription-management platform (RevenueCat) as our subprocessor. We receive your subscription status (active, trial, cancelled, expired) and which product you purchased — we never receive or store your payment card details; those stay with Apple/Google.

2. How we use your information

To create and secure your account, and verify it's really you signing in.
To operate the core feature: scheduling, delivering, and tracking reminders between people who've connected with each other.
To enforce the permission rules a recipient sets for a given sender (which priority levels are allowed, quiet hours, daily limits).
To send the actual push notifications / critical alerts / system alarms your reminders require, through Apple's and Google's notification infrastructure.
To provide customer support when you contact us.
To detect abuse (e.g. a "block" or "report" you file against another user) and keep the service safe.
To manage subscriptions and entitlements.

We do not use your reminder content, contacts, or profile information to build an advertising profile, and we do not sell your personal information to third parties.

We share information only where necessary to run the App:

The other person in a reminder. Your display name and photo are visible to people you're connected with in your Circle; the content of a reminder is visible to its sender and recipient.
Apple and Google — to deliver push notifications (APNs, FCM), to operate Sign in with Apple / Google Sign-In if you use them, and to process subscriptions through the App Store / Google Play. Sign-in code emails are sent through Google's Gmail service.
Alibaba Cloud — hosts our servers and database in the United States (Silicon Valley, California); it stores and processes data on our behalf and does not use it for its own purposes.
RevenueCat — our subscription-management subprocessor; receives purchase/entitlement events, not your reminder content or Circle data.
Cloudflare — provides network/CDN infrastructure in front of our servers; sees network-level traffic metadata, not your account credentials.
Law enforcement or legal process, only where we're required to by a valid legal request, or to protect the rights, safety, or property of our users or the public.
A successor entity, if the App is ever transferred as part of a merger, acquisition, or sale of assets — subject to this same policy or a materially equivalent one.

We do not sell your personal information, and we do not share it with data brokers or advertising networks.

4. Location information (Emergency feature)

Wuva's Emergency feature lets someone you've specifically granted "emergency location" permission to request your location during a genuine emergency. We only ever collect precise location (latitude, longitude, accuracy) when:

you have explicitly turned on "allow emergency location" for that specific person, and
they have sent an emergency location request, and
you have actively chosen to share your location in response to that specific request.

We never collect your location in the background, and never for any purpose other than fulfilling a request you've chosen to answer. A shared location expires and is not retained indefinitely (see Section 5).

5. Data retention

We keep account and reminder data for as long as your account is active, so the App's history features (delivery/reply history) continue to work. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we're required to retain limited records (e.g. for fraud prevention, dispute resolution, or legal compliance). Shared emergency-location data is retained only briefly and is not kept as a location history.

6. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS/TLS) between the App and our servers, access controls on our infrastructure, and hashed/tokenized storage for authentication credentials. No method of transmission or storage is 100% secure, and we can't guarantee absolute security, but we work to protect your information appropriately for what it is.

7. Your choices and controls in the App

You control who's in your Circle, and can remove anyone from it at any time from their page in your Circle.
You control which priority levels each connection is allowed to send you, quiet hours, and daily quotas — from the Circle screen.
You control whether emergency location sharing is enabled for a given connection, and you decide, request-by-request, whether to actually share your location.
You can edit or remove your profile photo, phone number, and postal code at any time from Account settings.
You can change your language preference at any time; this doesn't affect what data we collect.
You can block or report another user from their page in your Circle. Blocking stops them from sending you further reminders, requesting your location, or reconnecting with you; we review every report within 24 hours.
You can delete your account at any time from within the App (Account → Delete account), or by contacting us (Section 15). Deleting your account removes your name, phone number, photo and postal code, removes you from every Circle along with the permissions you granted or received, and cancels reminders that haven't been delivered yet. If you signed in with Apple, we also revoke Wuva's access to your Apple ID.

8. Your rights — United States residents

Depending on your state of residence, you may have rights under state privacy laws (such as the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and similar laws in other states) including the right to:

know what personal information we've collected about you and why;
request a copy of, or deletion of, your personal information;
correct inaccurate personal information;
opt out of the sale or "sharing" of personal information — we do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of;
not be discriminated against for exercising any of these rights.

To exercise any of these rights, contact us at [email protected]. We'll verify your identity (typically by confirming control of the email address on your account) before acting on a request.

Wuva is not intended for children under 13, in compliance with the Children's Online Privacy Protection Act (COPPA) — see Section 11.

9. Your rights — Canada (PIPEDA and BC PIPA)

Wuva is operated from British Columbia. For users in Canada, we handle your personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA):

Accountability — we're responsible for the personal information under our control, as described throughout this policy.
Identifying purposes — we only collect information for the purposes described in Sections 1–2, identified before or at the time of collection.
Consent — creating an account, granting a Circle connection permissions, and sharing your location in response to an emergency request are all affirmative actions you take; nothing is collected without your knowledge.
Limiting collection — we collect only what's needed to operate the features described above.
Limiting use, disclosure and retention — see Sections 2, 3, and 5.
Accuracy — you can correct your profile information at any time in Account settings.
Safeguards — see Section 6.
Openness — this policy is publicly available at all times.
Individual access — you may request a copy of the personal information we hold about you.
Challenging compliance — you may direct any complaint about our handling of your information to [email protected]; if unresolved, you may also contact the Office of the Privacy Commissioner of Canada or, in British Columbia, the Office of the Information and Privacy Commissioner for British Columbia.

If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, the EU General Data Protection Regulation (GDPR), the UK GDPR or the Swiss Federal Act on Data Protection applies to how we handle your personal information.

Controller. The controller of your personal information is Davy Han, the operator of Wuva, reachable at [email protected].

Legal bases. We process your information only where the law allows it:

To provide the service you signed up for (performance of a contract) — your account and sign-in, your Circle and its permission settings, creating and delivering reminders and replies, push notifications and alarms, and managing your subscription.
With your consent — the optional profile fields you choose to fill in (phone number, photo, postal code) and each emergency location you choose to share. You can withdraw consent at any time by removing those fields or by not sharing your location; withdrawing doesn't affect processing that already happened.
Our legitimate interests — keeping the service secure, investigating reports and preventing abuse, and troubleshooting delivery problems. We weigh these interests against your rights, and you can object to this processing (see below).
Legal obligations — keeping limited records where the law requires it.

Your rights. You have the right to:

access the personal information we hold about you and get a copy of it;
have inaccurate information corrected — most of it you can edit yourself in Account settings;
have your information erased — you can delete your account yourself in the App (Account → Delete account);
restrict our processing of your information in certain circumstances;
receive the information you gave us in a structured, commonly used, machine-readable format, and have it transmitted to another controller (data portability);
object to processing based on our legitimate interests;
withdraw any consent you've given, at any time;
lodge a complaint with a data protection supervisory authority — in particular the one in the EEA country where you live or work, the UK Information Commissioner's Office (ICO), or the Swiss Federal Data Protection and Information Commissioner (FDPIC).

To exercise any of these rights, email [email protected]. We'll verify it's really you (usually by confirming control of your account's email address) and respond within one month. We don't make decisions about you based solely on automated processing that produce legal or similarly significant effects.

11. Children's privacy

Wuva is not directed at, and is not intended to be used by, children under the age of 13, or under the minimum age at which your country allows a child to use online services without a parent's consent (up to 16 in some EEA countries). We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it.

12. Where your data is stored

Our servers and database are hosted by Alibaba Cloud in the United States (Silicon Valley, California). If you use Wuva from outside the United States — including from Canada, the EEA, the United Kingdom or Switzerland — your information is transferred to and processed in the United States, which may not offer the same level of data protection as your own country. We apply the protections described in this policy to your information wherever it is processed, and we only use service providers (listed in Section 3) that are bound to protect it.

13. Not a medical or emergency-dispatch service

Wuva is a personal reminder tool between people who trust each other. It is not a medical device, does not provide medical advice, and does not replace calling 911 (U.S.) / 911 (Canada) or your local emergency services in a real emergency. Reminder content you or another person write (for example, a medication reminder) is ordinary user-generated text to us — it is not reviewed, verified, or treated as protected health information. Delivery of any reminder, including the Emergency priority tier, depends on network connectivity, device settings, and operating-system behavior outside our control, and is not guaranteed.

14. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in the App. Continued use of Wuva after a change takes effect means you accept the updated policy.

15. Contact us

Questions, requests, or complaints about this Privacy Policy or your personal information: [email protected].