WAVE Media Studios
    Back to AYFY
    AYFY
    AYFY Privacy

    Privacy Policy

    How AYFY collects, uses, protects, and deletes personal and wellness information.

    Last Updated: September 29, 2026
    Effective Date: September 29, 2026
    Developer / Data Controller: Wave Media Studios LLC
    Address: 135 Riverside Pkwy, Suite 2P, Austell, GA 30168, United States
    Application: AYFY
    Contact Email: privacy@wavemediastudios.com

    Wave Media Studios LLC ("we," "us," or "our") respects your privacy. This Privacy Policy describes how your personal and wellness information is collected, used, processed, and safeguarded when you access or use the AYFY mobile application and related web services (the "App").


    1. Information We Collect

    A. Information You Provide Directly

    • Account Information: If you link an Apple ID or Google account, we collect your authorized email address, display name (if provided), and a basic profile identifier.
    • Profile & Onboarding Information: First name, birth date, sex, height, baseline weight, and optional baseline measurements you enter during setup.
    • Meal & Nutrition Logs: Food photos captured via your camera (including before and after meal photos), meal descriptions, logged liquids, and timestamps.
    • Wellness & Medication Cycle Data: The GLP-1 medication and dose you select, your injection day schedule, body weight you choose to log, self-reported fullness scores, digestive comfort ratings, symptoms (such as nausea or fatigue), and check-in responses.

    B. Information Collected Automatically

    • Push Notification Identifiers: If you allow notifications, a push notification identifier for your device is registered with OneSignal so we can send Satiety Sage check-ins and app notifications. You can turn off notifications anytime in your device settings.
    • Diagnostics & App Usage: Feature interaction events, scan volume counts, error logs, and operating system versions, managed internally via our secure Supabase cloud infrastructure. We do not use third-party advertising or behavioral tracking SDKs.

    2. How We Use Your Information

    We use your information exclusively to provide, maintain, and improve the App's core functionality:

    • Calculating real-time Gastric Readiness Gauge scores and Gut Comfort Forecasts.
    • Facilitating 2-hour Satiety Sage check-ins and compiling Pattern Finder insights.
    • Enabling before and after meal portion comparisons.
    • Displaying your weight trends from weights you log.
    • Enforcing fair-use daily camera scan limits and managing AYFY Premium entitlements.
    • Providing customer support and resolving technical issues.

    We do NOT sell, rent, or trade your personal or wellness data to data brokers, third-party advertisers, or marketing agencies.


    3. Service Providers & Processing Architecture

    We partner with select infrastructure providers to operate the App under strict contractual terms:

    • Cloud Database & Storage: Supabase provides encrypted database hosting, authentication, and private media storage. Food photos are stored in private, encrypted buckets accessible only by your authenticated session.
    • AI Vision Engine: When you scan a meal, the meal photo is transmitted securely to Google Gemini Vision APIs to evaluate portion sizes, macronutrients, and acidity factors. If you rename a meal or add details to correct a scan, that text is sent with the photo to re-score the meal. Google processes this data ephemerally to produce meal scores and does NOT use it to train AI models. We ask for your explicit consent inside the App before any photo or correction is transmitted for AI analysis.
    • Subscription Infrastructure: RevenueCat, Apple App Store, and Google Play Store process subscription transactions and validate entitlement status.
    • Push Notifications: OneSignal delivers push notifications (through Apple Push Notification service and Firebase Cloud Messaging) using a device push identifier. OneSignal does not receive your meal photos or health data and does not use your data for advertising.

    4. Data Retention & Deletion

    • Retention: We retain your meal logs, wellness data, and profile information only for as long as your account remains active.
    • Backups: Encrypted server backups containing deleted data are overwritten on a rolling schedule within 30 days. Anonymized purchase transaction records may be retained for up to 7 years as required by tax and financial compliance laws.
    • Consent Records: When you delete your account, we keep a minimal, de-identified record of the consents you gave or declined and when (for example, "health data consent granted on [date]"). This record contains no health data, photos, name, or readable email address. It is linked only to an irreversible code generated from your email, is used solely to demonstrate compliance with privacy laws, and is automatically deleted after 3 years.
    • Account Deletion: You can permanently delete your account and all associated data at any time directly inside the App under Profile → Account → Delete Account, or via our public request portal at /ayfy/delete-account.

    5. Your Privacy Rights

    Depending on your state or country of residence, you may have the right to:

    • Access the personal data we hold about you.
    • Correct inaccurate or outdated data.
    • Request permanent deletion of your data.
    • Obtain a copy of your data in a portable format.
    • Withdraw previously granted consent.

    You can exercise these rights directly within the App or by emailing privacy@wavemediastudios.com with the subject line "Privacy Request." We will verify your identity and respond within 45 days. We will not discriminate against you for exercising your rights. If we decline a request, you may appeal by replying with the subject line "Privacy Appeal."

    For comprehensive information regarding consumer health data rights (including under Washington's My Health My Data Act, Nevada, and Connecticut laws), see our Consumer Health Data Privacy Policy at /ayfy/consumer-health-data.


    6. Children's Privacy

    The App is intended solely for adults aged 18 and older. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected personal information from someone under 18, we will delete it promptly.


    7. Security

    We maintain administrative, technical, and physical safeguards—including SSL/TLS encryption in transit and AES-256 encryption at rest—to protect your personal information against unauthorized access, loss, or misuse.


    8. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Effective Date" at the top of this page and, where appropriate, by displaying a notice within the App.


    9. Contact Us

    Wave Media Studios LLC
    135 Riverside Pkwy, Suite 2P, Austell, GA 30168, United States
    Website: https://www.wavemediastudios.com/ayfy
    Email: privacy@wavemediastudios.com