Privacy Policy — WaveUp
Last updated: October 28, 2026
This policy explains what data SeedLab collects when you use the WaveUp and WaveUp Business apps and the waveup-sa.com website, why we collect it, and how you can control it.
Who we are
WaveUp is a daily-offers platform operated by SeedLab in the Kingdom of Saudi Arabia, which is responsible for your data under the Personal Data Protection Law (PDPL). This policy covers:
- WaveUp app: for customers browsing shop offers.
- WaveUp Business app: for shops that publish and manage their offers.
- Website: waveup-sa.com.
Data we collect
We collect only what the apps need to work. You can browse offers as a visitor without an account.
WaveUp (customers)
| Data | Purpose | Required? |
|---|---|---|
| Name and email address | Creating your account and signing in | Only if you create an account |
| Profile photo | Taken from your Google account when you sign in with it (Android only) | No |
| Approximate location | Ordering offers by distance and showing how far they are. Sent rounded with the offers request only, and never saved to your account | No — the app works fully without it |
| Likes, times you open sharing for an offer, and the duration of your first view of each offer | Saving favourites, ordering offers, and aggregated statistics for shops. Linked to your account when you are signed in. For visitors we only count shares as an anonymous total. We never know whom you shared with or through which app | Collected as you use the app |
WaveUp Business (shops)
| Data | Purpose | Required? |
|---|---|---|
| Email address | Creating the shop account and signing in | Yes |
| Shop name, description and link | Shown to customers alongside offers | Yes |
| Manager's phone number | Contact about the account | Yes |
| Logo and offer images | Publishing offers | Yes, to publish offers |
| Branch location | Chosen by the shop on the map and shown to customers with its offers | Yes |
We do not collect or store payment card numbers.
How we use data
- Running your account and signing you in.
- Showing and ordering offers, including nearby ones if you allow location.
- Saving your likes and favourites.
- Giving shops aggregated statistics about their offers (views, likes and shares), without names or anything that identifies customers.
- Answering your questions and providing support.
- Protecting the service from abuse.
We do not sell your data, we do not track you across other apps or websites, and we do not show ads. Neither app contains third-party analytics, advertising or tracking tools.
Who we share data with
We share your data only with service providers that help us run WaveUp, and only as much as needed:
| Provider | What they receive | Why |
|---|---|---|
| Google (Sign-In) | Name, email and account photo | Only if you choose to sign in with Google on Android |
| Google (Maps) | Address search text and the branch location chosen on the map | WaveUp Business, to set the branch location |
| Stripe | Payment details | Processing shop payments. Card details are entered directly on Stripe's page and never reach us |
| Hosting provider | Data stored on our servers | Running the service and storing data |
We may disclose data when required by a competent authority under the laws of the Kingdom of Saudi Arabia.
What others can see: shop details and offers are public inside the app. Customer data is never shown to shops.
Where data is stored
WaveUp data is stored on servers in Canada. It is transferred outside the Kingdom as permitted by the PDPL and its regulations, only as needed to run the service, with encrypted connections and restricted access.
Location and permissions
- Location (WaveUp): if you allow it, we use your approximate location only while you use the app, to order offers from nearest and show the distance. It is sent rounded (about 110 metres) with the offers request only. We do not save it to your account, we do not track you, and we never read your location in the background. You can decline or withdraw permission at any time in your device settings, and the app works fully without it.
- Location (WaveUp Business): if you tap “My location” and allow it, we use your device location only to move the map to you; it is not sent to our servers. The saved branch location is the point you choose on the map.
- Photo library (WaveUp Business): only to upload the shop logo and offer images. We do not access any other photos.
Data retention and account deletion
We keep your data while your account exists. You can delete your account inside the app: Settings → Delete account.
- The account is deactivated immediately, and you have 30 days to change your mind.
- After 30 days your data is permanently deleted.
If you cannot access the app, email us at seedlabteam@gmail.com and we will delete it for you.
Your rights
Under Saudi Arabia's Personal Data Protection Law, you have the right to:
- Be informed about what we collect and why (this policy is part of that).
- Access a copy of your data.
- Correct inaccurate data — most of it you can edit in Settings.
- Delete your account and data.
- Withdraw consent, for example by turning off location permission in your device settings.
For any request, contact us and we will respond within 30 days.
Security
Your data travels encrypted (HTTPS), and access is limited to a small team. No system is 100% secure; if a breach affects your data, we will notify you and the relevant authorities as the law requires.
Children
WaveUp is not intended for children under 13, and we do not knowingly collect their data. If we learn that a child has an account, we will delete it.
Changes to this policy
If we make a significant change, we will let you know in the app before it takes effect and update the date at the top of this page.
Contact us
- Email: seedlabteam@gmail.com
- WhatsApp: +966 55 233 8250
- Website: waveup-sa.com