In short
Wavepress does not collect anything. The recordings you import or make, the posters you design, and the files you export all stay on your phone. None of it is sent to us. We hold no copy, and there is no server of ours for it to be sent to.
There is no account, no sign-in and no password, because there is nothing to sign in to. Your phone's own lock screen is what keeps your posters private.
There is no analytics SDK, no crash reporting, no advertising and no tracking of any kind in the app. The App Store and Play Store privacy labels say no data collected and no data shared, and that is literally true rather than a best effort.
Who we are
Wavepress is published by Gap Found. For any privacy question, email gapfound.apps@gmail.com.
What is on your phone, and nowhere else
Everything below is written to encrypted files in the app's private storage on your device.
| What | Why the app holds it |
|---|---|
| The audio you import or record | So a poster can be redrawn later at a different size or detail level without you having to find the original file again |
| The waveform measurements taken from it | A few thousand numbers describing how loud the recording is over time. This is what is actually drawn |
| Your title, subtitle and date | They are printed on the poster |
| Your design choices | Style, colour, typeface, print size, detail and amplitude |
| Whether the one-time unlock has been purchased | So the app knows not to watermark your exports while offline |
Your audio is never transcribed, analysed for content, or listened to. The app measures loudness over time and draws it. It has no speech recognition and no idea what a recording contains.
What actually leaves your phone
One thing, and it carries none of your content.
| Where | What it receives |
|---|---|
| Apple / Google | Payment processing for the one-time unlock, handled entirely by the platform. We never see card details, and we are not told who bought it. |
| RevenueCat | An anonymous identifier their software generates on the device, and the fact that the unlock was purchased or restored. It is how the app knows not to watermark your exports. No audio, no posters, no titles, no name and no email. |
| Anywhere else | Nothing. The app makes no other network requests. It does not check for updates, fetch fonts, or report errors. The typefaces, the drawing and the print engine are all inside the app. |
When you tap Share on an exported poster, that file goes wherever you send it — Files, AirDrop, email, a print shop. That is you sending it, through your phone's own share sheet. The app is not involved beyond handing the file over.
Microphone
Wavepress asks for the microphone only when you tap Start recording, and uses it only while that recording is running. The audio is written straight into the app's encrypted storage on your device.
It is never streamed anywhere, never recorded in the background, and never captured while the app is not open. If you only ever import files, you can decline the permission and every other part of the app still works.
How it is protected
On your phone: your posters are held as a single file encrypted with AES-256-GCM, and each imported or recorded audio file is encrypted the same way. The key is generated on the device the first time you open the app and stored in the iOS Keychain or the Android Keystore, set so that it does not sync to iCloud and does not travel in a device backup.
Every save is re-encrypted from scratch with a fresh random number used once and never again. Reusing that number is the classic way this kind of encryption is broken, so the app also checks for a repeat and refuses to write rather than produce a weakly protected file.
Tampering is detected, not ignored. If a stored file is altered by anything other than the app, it fails to open rather than loading corrupted data. There is no way to read the files without the key, and the key never leaves the device.
Exported posters are not encrypted, deliberately — a PDF a print shop cannot open would be useless. They are written to the app's temporary folder when you export, and the operating system clears that folder on its own schedule.
No secret keys in the app: the only key shipped inside Wavepress is RevenueCat's public client key, which is designed to be in an app.
Being straight about the limits: because there is no server, the check that you bought the unlock happens on your phone rather than somewhere you cannot alter. That is genuinely weaker than a server-side check. It is the same trade that keeps your recordings private: with nothing of yours on our side, there is nothing on our side to arbitrate either.
Your rights
Access and export
Everything is already in your hands. Every poster exports as a PDF and a PNG you keep. There is no copy held anywhere else to request.
Correction
Every poster is editable in the app, at any time, including its title and date.
Deletion
We cannot delete your content, because we do not have it. You delete it yourself: each poster has a Delete control, and Settings has "Erase all posters", which removes every poster and every stored audio file on the device. Removing the app does the same thing. See Deleting your data.
That deletion is final. There is no copy anywhere for us to restore from.
Purchases
Your purchase belongs to your Apple ID or Google account, not to us. "Restore purchase" asks the store what that account already owns. To query or delete purchase records, contact Apple or Google — we hold none.
Complaints
Email us first. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Children
Wavepress carries a 4+ rating on the App Store, because it contains nothing objectionable. It is made for adults putting a recording on a wall, it is not directed at children, and it is not distributed in the Kids Category. We do not knowingly collect information from anyone at all, at any age — there is no mechanism in the app by which any personal information could reach us.
Changes
If this policy changes materially we will say so in the app before the change takes effect. The date at the top always reflects the current version.