Privacy Policy

Last updated: May 2026

Introduction

This Privacy Policy describes how Wai Lana Productions, LLC ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our website at app.wailana.com and our mobile applications (together, the "Service").

This policy applies to information collected through the Service. It does not apply to information collected by third-party websites or services we do not control.

Information we collect

We collect the following categories of information.

Information you provide

  • Account information: email address, password (stored as a salted hash), and any social sign-in identifiers from Google or Apple.
  • Profile information: your display name, language preference, interests, and pain-point selections.
  • Communications: messages you send us through feedback forms, surveys, or support requests.

Information collected automatically

  • Usage information: content you view or interact with, playback events, favorites, playlists, practice history, and feature usage.
  • Device information: device type, operating system, browser, language, screen size, and approximate location derived from IP address.
  • Log information: IP address, timestamps, referring pages, error reports, and similar diagnostic data.
  • Cookies and similar technologies: small data files used for authentication, session management, language preference, and analytics. See the "Cookies and tracking" section below.

Information from third parties

When you sign in with Google or Apple, we receive your email address and basic profile information from the provider, in accordance with the permissions you grant.

How we use your information

We use the information we collect to:

  • Provide, operate, and maintain the Service, including authentication and personalization.
  • Recommend content based on your stated interests, pain points, and practice history.
  • Send service-related communications such as account notifications, security alerts, and feedback responses.
  • Send optional marketing or newsletter content, only if you opt in.
  • Diagnose problems, monitor performance, and improve the Service.
  • Detect, prevent, and address fraud, security incidents, and policy violations.
  • Comply with legal obligations.

How we share your information

We do not sell your personal information.

We share information with the following categories of service providers (data processors) who help us operate the Service, under contracts that require them to safeguard your information:

  • Convex: application database and backend functions.
  • Better Auth: authentication and session management.
  • Mux: video streaming, playback, and playback analytics.
  • PostHog: product analytics and feedback events.
  • Sentry: error monitoring and diagnostics.
  • Lokalise: translations and content localization.
  • Vercel: application hosting and edge delivery.
  • Amazon Web Services (AWS): cloud storage and media processing.
  • CloudFront: content delivery network.

If we introduce paid features in the future, we will share payment information with payment processors as needed to complete transactions, and we will update this Privacy Policy.

We may also share information:

  • To comply with applicable law, legal process, or government requests.
  • To protect the rights, property, or safety of Wai Lana Productions, LLC, our users, or others.
  • In connection with a merger, acquisition, or sale of part of our business. We will notify you and give you choices to the extent required by law.

Cookies and tracking

We use cookies and similar technologies for:

  • Essential cookies: required for authentication, security, and remembering your language preference. The Service cannot function without these.
  • Analytics cookies: PostHog uses anonymized identifiers to measure how the Service is used so we can improve it.

You can control cookies through your browser settings. Blocking essential cookies will affect your ability to use the Service.

Your rights

Depending on where you live, you may have the following rights regarding your personal information.

For all users

You can access, update, or delete most of your information from within the Service. You can also contact us at web@wailana.com to:

  • Request a copy of the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your account and associated data.
  • Request export of your data in a portable format.
  • Object to or restrict certain uses of your information.
  • Withdraw consent for any processing that relies on consent.

European Economic Area, UK, and Switzerland (GDPR)

You have rights of access, rectification, erasure, restriction, portability, and objection. The legal bases on which we rely are:

  • Performance of a contract: providing the Service you requested.
  • Legitimate interests: improving the Service, ensuring security, and preventing fraud, balanced against your rights.
  • Consent: optional features like marketing communications.
  • Legal obligation: compliance with applicable laws.

You have the right to lodge a complaint with your local data protection authority.

California (CCPA / CPRA)

You have the right to know what personal information we collect, how it is used, and with whom it is shared. You have the right to request deletion and correction, the right to opt out of any sale or share of personal information (we do not sell personal information), and the right not to be discriminated against for exercising your rights.

Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at web@wailana.com and we will delete it.

If you are a parent or guardian and aware that your child has provided personal information without your consent, please contact us so we can take appropriate action.

International transfers

We are based in the United States, and our service providers may process information in the United States and other countries. When we transfer personal information from the European Economic Area, UK, or Switzerland to a country that has not received an adequacy decision, we use Standard Contractual Clauses or another lawful transfer mechanism.

Data retention

We retain personal information for as long as your account is active or as needed to provide the Service. After account deletion, we retain limited information for a reasonable period to:

  • Comply with legal, accounting, or reporting obligations.
  • Resolve disputes and enforce agreements.
  • Detect and prevent fraud.

Anonymized or aggregated data, which cannot reasonably be linked back to you, may be retained for longer.

Security

We use technical and organizational measures designed to protect your personal information, including encryption in transit, access controls, and regular security review. No system is perfectly secure, and we cannot guarantee absolute security. If you become aware of unauthorized access to your account, please contact us immediately.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email at least 14 days before the changes take effect. Your continued use of the Service after the effective date means you accept the updated Privacy Policy.

Contact

For questions about this Privacy Policy or to exercise your rights, please contact us at web@wailana.com. We aim to respond within 30 days.