Privacy Policy

Wave Reader – RSS Feed Reader App
Effective Date: February 5, 2026

1. Data Controller

Responsible for data processing under GDPR:

Bartos Gwozdz
Vibe Coding
Dortmund, Germany
Email: bartos@buildingvibes.de
Phone: +49 170 9649443

2. Overview

Wave Reader is a local-first RSS feed reader for iOS. Your privacy is fundamental to how this app is built. Wave does not collect, store, or transmit personal data to external servers operated by us.

3. Data Collection

Wave does not collect any personal data.

Specifically, we do not collect:

• Usage analytics or tracking data
• Device identifiers or advertising IDs
• Location data
• Browsing history or reading habits
• Crash reports or diagnostics sent to us

4. Data Storage

All app data is stored locally on your device and optionally synced via Apple iCloud:

• Feed subscriptions: Stored in the app's local database (SwiftData)
• Articles: Cached locally for offline reading
• Reading preferences: Stored in the app's local settings
• Folders and organization: Stored in the app's local database
• Reading progress: Scroll positions stored locally (and via iCloud if enabled)
• Profile information: Optional, stored locally and via iCloud if enabled

4.1 iCloud Sync (Optional)

If your device is signed into iCloud, Wave uses Apple CloudKit to sync your data across your devices. This includes:

• Feed subscriptions
• Articles and read/unread status
• Folders and organization
• Reading progress (scroll positions)

This data is stored in your private iCloud container and is not accessible to us or any third party. iCloud sync is managed entirely by Apple. You can disable iCloud sync for Wave in your device's Settings > Apple Account > iCloud.

4.2 Backups

Wave offers an optional backup feature. You can choose to store backups either:

• In iCloud: Stored in your private iCloud Documents container
• Locally on device: Stored in the app's Documents directory

Backup data includes your feed subscriptions, folders, and feed settings. You control where backups are stored via Settings > Account & iCloud.

5. Sign in with Apple (Optional)

Wave supports optional Sign in with Apple during onboarding. When you use this feature:

• Your Apple ID email (or relay email) and display name are stored locally on your device
• We do not receive or store your Apple ID credentials on any server
• You can skip Sign in with Apple and use the app as a guest

6. Network Activity

Wave connects to the internet for the following purposes:

1. Fetching RSS/Atom feeds: The app downloads feed content from URLs you provide. These requests go directly to the feed publisher's servers.
2. Loading article content: When using full article extraction, the app fetches the article webpage directly from the publisher.
3. Loading feed icons: The app fetches favicon images from feed publisher websites.
4. iCloud sync: If enabled, data syncs via Apple's CloudKit infrastructure.
5. Background refresh: If enabled, feeds are refreshed periodically in the background.

Wave does not send any data about you or your reading habits to any server operated by us.

7. Third-Party Services

• Apple iCloud (CloudKit): Used for optional data sync across your devices. Subject to Apple's Privacy Policy.
• Sign in with Apple: Used for optional authentication. Subject to Apple's Privacy Policy.

Wave does not integrate with any third-party analytics, advertising, or tracking services.

8. OPML Import/Export

When you import or export OPML files, these files are processed entirely on your device. No feed subscription data is sent to external servers during import or export.

9. Permissions

Wave Reader requires the following permissions:

• Internet access: Required to fetch RSS feeds
• No camera permission
• No location permission
• No contacts permission
• No calendar permission

10. Your Rights (GDPR Art. 15-21)

Since Wave Reader does not transmit personal data to the developer, you have full control over your data:

• Right of Access (Art. 15 GDPR): All data is located locally on your device
• Right to Erasure (Art. 17 GDPR): Delete the app to remove all data
• Right to Data Portability (Art. 20 GDPR): Your data remains locally with you
• Right to Object (Art. 21 GDPR): You can delete feed subscriptions anytime

Delete data: Uninstall the app or delete app data in iOS Settings > Wave Reader > "Reset App".

11. Data Security

Wave Reader uses standard iOS security mechanisms:

• Data is stored in an isolated iOS Sandbox
• With device protection enabled (Face ID/Touch ID), data is encrypted
• RSS feed fetching uses secure HTTPS connections (when supported by feed provider)
• Optional: iCloud data is end-to-end encrypted by Apple

12. Children's Privacy

Wave does not collect any data from any users, including children under 13. The app is rated 4+ and is safe for all ages.

13. Changes to This Privacy Policy

If this privacy policy is updated, the changes will be reflected here with an updated effective date.

14. Contact

If you have questions about this privacy policy, contact us at:

Website: buildingvibes.de
Support: buildingvibes.de/wave/support

---

App Store Connect – Privacy Nutrition Label

For App Store Connect (Apple Privacy Report):

• Data Collection: None (by developer)
• Data Linked to You: None
• Data Used to Track You: None
• Data Not Linked to You: None
• Third-Party Data: RSS feed providers may collect IP addresses (not controlled by developer)

Summary: Wave Reader is a fully privacy-first app. All your data stays on your device. RSS feeds are fetched directly from sources (like in a regular web browser) – no intermediary storage on our servers.