Last updated: November 2, 2026
Waaait (“we,” “us,” “the service”) is a small app for leaving letters for close friends on a map, at the places you remember. This policy explains what information we collect, how we use it, and how you can control it.
Waaait is a personal project operated by an individual developer, not a registered company. If you have questions about this policy or your data, contact m3nhan@gmail.com.
Waaait is built for small circles of people who already know each other. Anyone can create an account, but you only exchange letters with people you connect with, and you connect through a link someone shares with you. This policy covers everyone who creates a Waaait account.
Account information. When you sign in with Google, we receive your name, email address, and profile picture from Google. We only request Google’s basic sign-in scopes — we do not access your Gmail, Google Drive, Google Calendar, or Google Contacts. You can also upload or take a profile photo in Settings, which replaces the picture from Google. It is shown to people you’re connected with, to members of your group, and on the page of any invite or letter link you share. It is deleted with your account.
Content you create. This includes letters and their titles/bodies, photos you attach or upload, questions and answers you send through Ask, your nickname, and anything you add to your “About me” section.
Location information. If you set a location for your Space (it doesn’t have to be your home), or choose to pin a letter at a map location, we store those coordinates. The location you set for your Space is shown to the people you’re connected with as an exact pin, together with its name, exactly where you place it. You can choose a nearby place instead of your address, and move or change it at any time in Settings. We don’t track your location in the background. While the app is open, your device’s location is used only to place a pin (the pin you choose is saved with your letter), to check that you’re at a letter’s spot, and to show letters near you on the home and upcoming screens. We don’t keep your device’s location itself. If a letter is set to open only at its spot, your device’s location is sent to our server at the moment you check your location to open a letter, to measure the distance. We do not store it.
Automatically collected information. Basic technical data needed to run the service (e.g., timestamps of when content was created or opened, error logs). We do not use third-party advertising trackers or sell any data to advertisers.
Cookies and similar storage. Waaait uses only the cookies and browser storage it needs to work: a sign-in session cookie (so you stay signed in), a cookie that remembers you’ve finished setup, a short-lived cookie that carries an invite link through sign-up, and a cookie that stores your time zone so dates appear on the right day. While you write a letter, a draft is kept in your browser’s session storage so it isn’t lost if the page reloads; it stays on your device and is removed when you send it or close the tab. We don’t use advertising or analytics cookies, and the app doesn’t include third-party analytics or advertising trackers. Signing in with Google happens on Google’s own pages, which have their own cookie policies. You can clear cookies in your browser settings; you will then be signed out.
We use your information to operate the core features of the app: authenticating you, delivering letters and questions to the right people at the right time, showing your connections your Space and content according to the visibility rules below, and sending in-app notifications about new letters or questions.
We do not use your data for advertising, and we do not sell your data to any third party.
Waaait is built around small, trusted circles, and visibility is deliberately limited:
We rely on a small number of infrastructure providers to run Waaait. Each only receives the data necessary to perform its function:
These providers process data on our behalf under their own security and privacy commitments; we don’t share your data with them for their own independent use.
We keep your account and content for as long as your account is active. If you’d like your account and associated data deleted, email m3nhan@gmail.com with your request. We’ll verify the request and delete your account, content, and personal data within a reasonable time, except where we’re required to retain limited records by law.
We keep encrypted daily backups of the database and photos for up to 30 days, used only to restore the service after a failure. Deleted data may remain in these backups for up to 30 days before it is removed for good.
Waaait is not directed at children under 14, and we do not knowingly collect data from children under 14. If you believe a child has created an account, contact us at m3nhan@gmail.com and we will remove it.
We take reasonable technical measures (such as relying on established providers like Supabase and Google for authentication and storage) to protect your information, but no service can guarantee perfect security. Please use a strong, unique password for your Google account and keep your device secure.
Because we use providers like Supabase and Vercel, your data may be stored or processed on servers located outside your home country. We take reasonable steps to ensure these providers handle data responsibly.
If we make material changes to this policy, we’ll update the “Last updated” date above and, where appropriate, notify users through the app.
Questions, concerns, or requests about your data: m3nhan@gmail.com