Waverley Privacy Policy

Effective date: September 18, 2026

Waverley is published by Sam.

This Privacy Policy explains what information Waverley processes, how that information is used, when information may be sent to third-party services, and the choices available to you.

Contact:
[email protected]

Website:
https://sam14.com/

1. Overview

Waverley is a media discovery and playback client. It can work with services and media sources that you choose to configure.

Waverley does not operate or sell an IPTV service and does not provide its own catalog of IPTV streams.

Waverley does not use advertising SDKs, analytics SDKs, cross-app tracking, or advertising identifiers.

2. Information Waverley Processes

Account Information

If you create a Waverley account, the app processes:

• your email address
• a unique account/user identifier

Authentication is provided using Supabase Auth. Password authentication is handled by Supabase; Waverley does not receive or store your plaintext password.

Account information is used to provide sign-in, account features, optional account synchronization, and account deletion.

Optional Account Sources and Provider Credentials

Waverley can store credentials or configuration for services you choose to add, including:

• IPTV/Xtream source information
• playlist or source URLs
• IPTV usernames and passwords
• supported provider API keys or credentials
• provider-specific configuration

These credentials are normally stored securely on your device using Apple Keychain or other app-local storage as appropriate.

If you are signed in and explicitly enable the "Use Account Sources" feature, certain source credentials and supported provider keys may also be stored in Waverley's Supabase backend so they can be associated with your account.

This synchronization is optional and is controlled by you.

3. Local App Data

Waverley stores app functionality data locally on your device, which may include:

• profiles and profile preferences
• library information
• watch progress
• watched status
• playback preferences
• subtitle preferences
• appearance settings
• search and browsing state
• IPTV configuration
• provider configuration
• cached media metadata and artwork

As of the effective date of this policy, Waverley's iOS profile, watch-history, watch-progress, and library data are primarily local to the device and are not generally synchronized to Waverley's backend unless a specific account-enabled feature states otherwise.

4. Third-Party Services You Choose to Use

Depending on the features you configure, Waverley may communicate with third-party services such as:

• Supabase
• TMDB
• Trakt
• MDBList
• IntroDB
• IPTV or media servers that you add yourself

When you use one of these services, Waverley may send information required to perform the requested feature, such as:

• search terms
• media identifiers
• API requests
• authentication tokens
• API keys
• server URLs
• usernames or credentials needed by the service

Requests to user-configured IPTV or media sources are made for the purpose of accessing the source you provided.

Those third-party services process information according to their own terms and privacy policies. Sam does not control the independent privacy practices of third-party services that you choose to connect.

5. Support Communications

If you contact support at [email protected], information you voluntarily include in your message may be processed to respond to your request.

This can include:

• your email address
• the contents of your support message
• technical information you choose to provide

Email routing for the sam14.com domain is provided through Cloudflare.

Support communications may be retained for as long as reasonably necessary to resolve or document the support request.

6. Information Waverley Does Not Use for Advertising or Tracking

Waverley does not:

• sell personal information
• rent personal information
• use personal information for targeted advertising
• use third-party advertising SDKs
• use cross-app tracking
• use Apple's advertising identifier for tracking
• request App Tracking Transparency permission for advertising purposes

Waverley also does not request access to your:

• precise or approximate location
• contacts
• photo library
• camera
• microphone

unless a future feature clearly requires such access and this policy is updated accordingly.

7. How Information Is Used

Information processed by Waverley is used to:

• create and authenticate your account
• provide app functionality
• connect to services and sources you configure
• synchronize optional Account Sources
• remember your preferences
• provide media discovery and playback features
• maintain security and prevent unauthorized access
• respond to support requests
• process account deletion

Information is not used for advertising profiling.

8. Data Storage and Service Providers

Waverley uses Supabase for account authentication and certain backend functionality.

Depending on the feature, Supabase may process:

• account email address
• account/user identifier
• optional Account Sources data
• optional provider credentials associated with your account

Cloudflare is used for sam14.com website hosting, email routing, and certain static infrastructure used by Sam.

Third-party providers you configure may separately receive the information required for their services.

9. Security

Sensitive credentials stored locally by Waverley are stored using Apple Keychain where applicable.

Privileged backend credentials, including Supabase administrative credentials, are not included in the Waverley iOS app.

Waverley's account-deletion service performs privileged operations on the server rather than exposing administrative credentials to the client.

No system can guarantee absolute security, but reasonable technical measures are used to protect information handled by Waverley.

10. Account Deletion

You can permanently delete your Waverley account from within the app:

Settings → Account → Delete Account

After you confirm deletion, Waverley requests permanent deletion of your account from the backend.

Deleting your account removes the Supabase authentication account and server-side data associated with that account through Waverley's backend data relationships.

After successful deletion, Waverley signs the device out and removes app-managed local account information and credentials associated with the deleted account.

Account deletion is intended to be permanent and cannot be undone.

Information held independently by third-party services that you connected to Waverley is subject to those services' own deletion and retention policies.

11. Data Retention

Account-related server data is generally retained while your Waverley account remains active or as necessary to provide the requested account functionality.

When you permanently delete your account through Waverley, the account and associated Waverley backend data are deleted as described above.

Local app data is retained on your device as needed for app functionality and can be cleared through relevant app actions, sign-out/account-deletion flows, or device-level app management.

Support communications may be retained as reasonably necessary to handle the request or maintain support records.

12. Your Choices

You can choose whether to:

• create a Waverley account
• use Waverley without certain account features
• connect third-party services
• add IPTV or other media sources
• enable optional Account Sources synchronization
• remove configured sources or credentials
• permanently delete your Waverley account

For privacy or data questions, contact:

[email protected]

13. Website Privacy

The Waverley pages hosted on sam14.com are intended to be simple informational pages.

The site does not intentionally use advertising trackers, behavioral analytics, or third-party advertising cookies.

Infrastructure providers such as Cloudflare may process ordinary network information required to deliver the website securely.

14. Changes to This Policy

This Privacy Policy may be updated when Waverley's features, data practices, or service providers change.

When material changes are made, the effective date at the top of this page will be updated.

15. Contact

For privacy questions, account questions, deletion questions, or support:

Sam
[email protected]
https://sam14.com/