Privacy Policy
1. Your music stays on your phone
Wavecard reads the songs stored on your device — audio, title, artist, album, cover art and lyrics (embedded lyrics or an .lrc file you choose) — to build a music card. The audio is decoded and analysed (spectrum, loudness, beats) and the video is rendered entirely on your device. Your music, covers, lyrics and videos are never uploaded, and we operate no servers that receive your content. Wavecard only reads your music files and never modifies them.
Videos and still images you export are saved to your gallery (Movies/Wavecard and Pictures/Wavecard) and leave your phone only when you choose to share them through Android's share sheet. Lyrics you sync with “Tap to sync” and your settings are kept in the app's private storage; cloud backup of that storage is disabled. There is no account.
2. Permissions
- Music and audio (READ_MEDIA_AUDIO on Android 13+, storage read on Android 12 and older) — asked when you first open the Songs tab, to list and read your songs. Read-only. If you decline, you can still pick a single file with the system file picker.
- Folder access you choose — optional, through the system folder picker, only to read .lrc lyric files next to your songs.
- Photo Picker — optional, to use a custom cover image; Wavecard sees only the photo you pick and does not request access to your photo or video library.
- Notifications — optional: for free users, an occasional reminder you can turn off.
- Internet and network state — ads, analytics, purchases and consent only. Your music and videos are never sent.
Wavecard does not use the microphone, camera or location permissions and does not request access to all files.
3. Analytics and crash reports (Google Firebase)
With your consent where required, we use Google Analytics for Firebase and Firebase Crashlytics to understand how the app is used and to fix crashes. We log anonymous events such as “paywall viewed” or “purchase completed”, plus device model, OS and app version, approximate region and an app-instance identifier. We never log your content; the app enforces this with an allow-list of event parameters. Crash reports contain the error type and stack trace only. Firebase Remote Config is used to tune paywall and ad settings.
4. Advertising (Google AdMob and Unity Ads)
The free version shows ads: one slim banner on the song list and history screens, an occasional full-screen ad after you finish sharing a video, and optional rewarded ads you choose to watch to unlock a Pro tool for a while. Ads never appear while you create, preview or export a card, on the share screen, during onboarding or on the paywall, and never appear in the first two minutes of first use. Wavecard Pro removes all ads.
Ads are served by Google AdMob, with Unity Ads competing through AdMob mediation. These partners may collect the advertising ID, device and usage information and approximate location derived from your IP address to serve and measure ads. See Google's and Unity's privacy policies.
5. Your choices (GDPR, UK GDPR, Swiss FADP, US state laws)
In the EEA, the UK and Switzerland, Wavecard asks for your consent through Google's consent message (IAB TCF) before personalised ads or analytics are used. If you decline, ads are non-personalised and analytics stays off. In US states with privacy laws (such as California, Virginia, Colorado), you can opt out of the “sale” or “sharing” of personal information and targeted advertising. You can change your choice at any time in Settings → Privacy choices.
Legal bases (GDPR): consent for analytics and personalised ads; performance of a contract for the features you use and for purchases; legitimate interest for crash diagnostics where consent is not required. You may request access, deletion, correction or portability of data we control, object to processing, or lodge a complaint with your supervisory authority. California residents (CCPA/CPRA): we do not sell personal information for money; ad partners may receive identifiers as described above, which you can opt out of in Privacy choices. We do not discriminate against users who exercise their rights.
6. Purchases
Subscriptions and the lifetime purchase are processed by Google Play Billing. We never receive your payment details; Google tells the app whether Pro is active.
7. Retention and deletion
Your content remains on your device until you delete it or uninstall the app; exported videos and images stay in your gallery until you delete them there. Analytics data is retained by Google for up to 14 months. See how to delete your data.
8. Children
Wavecard is not directed to children under 13 (under 16 in the EEA) and we do not knowingly collect their data.
9. Changes
We will update this page if our practices change and revise the date above.