Privacy

Privacy Policy

Last updated: 21 October 2026

Wavo (wavo.in) helps people find someone near them to run or work out with. This policy explains what we collect, why, who can see it, how long we keep it, and what you can do about it. In short: other members only ever see where you train, never where you live, and we don't sell your data or show you ads.

What we collect

When you sign in with Google: your name, email address and Google profile photo (we copy the photo once, so your profile starts with one), and a Google account ID that links your sign-ins. We don't get your Google password.

Your profile: first name, photo, age range, gender, a short bio, your goal, how often you train, whether you're looking for running, the gym or both, and settings such as “only match me with women” and pausing your profile.

Where and when you train: the spots or gyms you save, your usual start time and days, and your pace or level (and, for the gym, what you train).

Location: if you allow it, we use your phone's location to show people and places near you and to suggest a spot. We save only a rough area (rounded to about 1 km) of where you signed up, which only the Wavo team can see. If you don't share location, we may use the approximate city from your internet connection instead. We never store a precise trail of where you are.

What you do on Wavo: waves, matches, messages in private and group chats (including photos and any location you choose to share in a group chat), reactions, run plans, group runs you host or join, sessions you post and the cheers on them, reviews you write, and people you block or report.

Identity check (optional): if you ask for the verified badge, a photo of your ID and a selfie. We delete both images as soon as our team has approved or rejected them; we keep only the result.

Technical data: notification subscriptions for the devices where you turn on notifications, and standard request details (such as IP address and browser) that our hosting provider records, and that we use briefly to limit abuse.

Why we use it

To run Wavo: show you people who train at the same place, time and level, let you wave, match, chat and plan runs, and run group runs.
To keep people safe: the women-only setting, blocking, reports, verified badges and limits on abuse.
To send you notifications and emails you've allowed (waves, matches, messages, run reminders and Wavo news). You can turn these off in Settings, and every email has a one-click unsubscribe link.
To understand and improve Wavo, using totals and counts from our own database. We don't use advertising or third-party tracking tools.

Who can see what

Other members can see your first name, photo, bio, goal, how often you train, your spot or gym, your usual time and pace or level, and whether you're verified. They never see your email, your age range, your gender, or where you live. Nobody can message you until you have both waved.
Group runs: people in a group run see who's going and the group chat.
Shared sessions you post with a partner are visible to members in the Community feed, once you've both approved them.
Public pages on wavo.in (spots, cities) show places and totals only, never information about a person.
The Wavo team (a small group of admins) can see account details, including email addresses, to run the service, check IDs and handle reports. They see how many messages a chat has, not what private chats say. Admin access to accounts is logged.

Services we use

We share data only with the providers that run Wavo for us, and only what each needs:

Vercel: hosts the website and app.
MongoDB Atlas: stores Wavo's database.
Google (Firebase Authentication and Google sign-in): signs you in.
Google Maps Platform and OpenStreetMap services (Nominatim, Photon, OpenFreeMap): place search and maps. They receive what you search for and the area you're looking at.
Brevo: sends Wavo's emails.
Your browser's push service (for example Google, Apple or Mozilla): delivers notifications you've turned on.

These providers may process data outside India. We don't sell your personal data or share it with advertisers. We may disclose information if the law requires it or to protect someone's safety.

How long we keep it

Your account, profile, spots, matches, messages and posts: until you delete them or your account.
ID and selfie images: until our team has reviewed them, then deleted.
Notifications: 60 days. Live-update events: about 10 minutes. Abuse-limit counters: minutes.
Reports someone else filed about an account are kept after that account is deleted, so safety history isn't lost.

Cookies and storage

We use one cookie to keep you signed in (for up to a year from your last visit) and one small cookie that only says you're signed in. Your browser's storage keeps preferences such as running or gym mode. Google's sign-in may set its own cookies under Google's policies. We don't use advertising or tracking cookies.

Your choices and rights

See and change your profile, spots and notification settings any time in the app.
Pause your profile to hide it from others, block anyone, and report anyone.
Turn location off; you can still search for a place instead.
Delete your account in Settings → Delete my account. This removes your profile, photos, spots, waves, matches and their chats, group runs you host, posts you're in, reviews and verification data.
Under India's Digital Personal Data Protection Act, 2023 you can ask us for a summary of your data, ask us to correct or erase it, withdraw consent, and raise a grievance. Email us at support@wavo.in and we'll reply as soon as we can.

Safety and age

Wavo is for people aged 18 and over. Please meet new training partners in public places and tell a friend your plan. We protect data with encrypted connections, access limited to the Wavo team, and limits on abuse, but no service can be perfectly secure.

Changes

If we change this policy in a way that matters, we'll update the date above and let members know in the app or by email.

Contact

Questions or requests about your data: support@wavo.in.