Privacy Policy
Last Updated: September 7, 2026
This Privacy Policy describes how Wave AI LLC ("Company", "we", "us", or "our") collects, uses, and protects information. Wave AI LLC is a limited liability company registered in the State of Wyoming, United States.
Wave AI LLC operates:
- DND AI — our mobile application for iOS (the "App"), available on the Apple App Store. Sections 1 through 5 of this policy describe the App.
- This website (www.waveaillc.com), which is informational and does not require an account.
- Social accounts owned by Wave AI LLC, which we use to market our apps. Section 6 describes the data we access through social platform APIs for those accounts.
By using the App and submitting images for AI processing, you explicitly consent to the data practices described in this Privacy Policy, including the transmission of your images to the third-party AI services identified below.
1. Information We Collect
DND AI is an AI-assisted tabletop role-playing app. Alongside generated narration, adventures, and rules answers, it provides AI-powered image transformation features — for example, transforming a selfie into a fantasy character such as an orc, elf, or other styled character.
We collect the following types of information:
A. Images You Upload (Including Face Data)
When you use the App's character creation, face swap, or scene generation features, you may upload photos (such as selfies) for AI processing.
- Images are used solely to generate AI-transformed results.
- We do not use your images for advertising.
- We do not sell your images.
- We do not use your images to train AI models.
B. Generated Images
The AI-generated images created from your uploads are temporarily processed to deliver results to you and then deleted. Where you choose to save a generated character or scene to your in-app library, the result is retained in your account as described in subsection D.
C. Face Data
The App processes facial images (selfies) you provide to generate AI-transformed character images. In connection with this:
- What we collect: Facial images you upload containing your likeness ("face data").
- Purpose: Face data is used solely to generate AI-transformed artistic results (e.g., fantasy characters). It is not used for facial recognition, identity verification, advertising, or any purpose other than the requested transformation.
- Your consent: By submitting an image for transformation, you explicitly consent to the transmission of that image to Fal.AI and Google Cloud (our AI processing providers) strictly for the purpose of generating your requested output.
- Third-party sharing: Your facial images are transmitted to Fal.AI and Google Cloud solely to perform the transformation. These providers are contractually prohibited from using your data for any other purpose.
- Storage: Face data is processed on secure servers. It is not stored permanently. Images are automatically deleted after processing is complete (typically within minutes).
- No profiling: We do not build profiles, datasets, or models from your face data.
D. Account and Gameplay Data
To save your progress across sessions and devices, the App creates an account and stores the content you generate:
- Account identifiers: An account identifier issued by Firebase Authentication (Google), and an email address if you choose to sign in with one.
- Gameplay content: Characters you create, character cards, generated adventures and scenario text, maps, saved scenes, and items in your in-app library. This content is stored in Firebase Firestore (Google) and retained while your account exists.
- Rules and narration prompts: The text you send to the AI dungeon master and to the rules codex, processed to generate the response and to maintain continuity within your session.
- Subscription status: Whether your account has an active subscription. Payment is processed by Apple; we do not receive or store your payment card details.
You may request deletion of your account and all associated gameplay content at any time — see Section 7.
E. Basic Usage Data (Automatically Collected)
We may collect limited technical information via Firebase (Google) such as:
- Device type
- Operating system version
- App version
- Anonymous usage statistics
- Crash reports and diagnostic logs, collected through Firebase Crashlytics when the App encounters an error
This data is used to:
- Improve app performance
- Fix bugs
- Enhance user experience
We do not collect precise location data.
2. How We Use Your Information
We use collected information only to:
- Provide AI image transformation services
- Process and return generated images
- Generate narration, adventures, and rules answers, and keep your session consistent
- Save your characters and gameplay content so you can return to them
- Maintain and improve app functionality
- Ensure security and prevent abuse
- Comply with legal obligations
We do not use your personal images for marketing purposes.
3. Image Processing & Storage
- Images are temporarily transmitted to our third-party AI providers (Fal.AI and Google Cloud) for processing.
- Images are not stored permanently on our servers or by our AI providers after processing is complete.
- We do not publicly display user images.
- We do not allow other users to access your content.
- Images are deleted automatically within minutes of processing completion.
4. Sharing of Information — Third-Party AI Services
We do not sell or rent your personal data.
When you submit an image for AI transformation, that image (including any face data it contains) is transmitted to the following third-party service providers:
Fal.AI (fal.ai)
- Role: Primary AI image generation and processing
- Data sent: The image you upload for transformation
- Purpose: To generate your requested AI-transformed output
- Data protection: Fal.AI processes your image solely to return the generated result and is contractually prohibited from using it for any other purpose, including training AI models without your consent.
- Privacy policy: https://fal.ai/privacy
Google Cloud
- Role: Cloud infrastructure and AI processing services
- Data sent: The image you upload for transformation (routed via Google Cloud infrastructure)
- Purpose: Secure cloud processing and delivery of AI outputs
- Data protection: Google Cloud processes data under strict contractual obligations and industry-standard security controls.
- Privacy policy: https://cloud.google.com/terms/cloud-privacy-notice
Firebase (Google)
- Role: App backend, user authentication, gameplay content storage, and anonymous analytics
- Data sent: Account identifiers, saved gameplay content, app usage events, and crash diagnostics
- Purpose: Authentication, database, and app performance monitoring
- Privacy policy: https://firebase.google.com/support/privacy
All service providers are required to maintain data confidentiality, security, and provide protections equivalent to or greater than those described in this Privacy Policy.
5. Your Consent and Control
Before your image is transmitted to third-party AI providers, you must take an explicit action (e.g., tapping "Generate") to initiate the process. This action constitutes your informed consent to the data sharing described in Section 4.
You may withdraw consent at any time by discontinuing use of the image transformation feature. Previously transmitted images that have already been processed and deleted cannot be retrieved.
6. Our Use of Social Media Platform APIs
This section describes data that Wave AI LLC accesses about its own business accounts on social media platforms. It does not describe data collected from users of our App, and it does not involve any data belonging to other people.
Wave AI LLC operates social media accounts to market its apps, posting organic photo carousels and short videos. We are building an internal content-performance tool that uses social platform APIs — including the TikTok API for Business (Organic/Accounts API) — to review how our own posts performed and decide what to publish next. The following limits apply:
- Scope of accounts: We connect only to social media accounts owned and controlled by Wave AI LLC, and only where that account has explicitly granted authorization through the platform's OAuth flow. We do not connect accounts belonging to any other person or organization.
- Data accessed: Account profile information and content-performance metrics for our own account and our own posts — for example, views, likes, comments, shares, and reach. We do not collect the personal data of any other user.
- No public-content scraping: We do not scrape, crawl, or bulk-collect public content from social platforms.
- Purpose limitation: Retrieved data is used solely for internal content analytics — deciding what Wave AI LLC posts next. It is not used for advertising targeting, profiling, or any automated decision-making about individuals.
- No resale or sharing: We do not sell, rent, license, or otherwise share this data with any third party. It is not combined with data from our App and is not disclosed outside Wave AI LLC, except where required by law.
- Token handling: OAuth access and refresh tokens are stored encrypted, used only to make authorized API calls on behalf of our own accounts, and revoked and deleted when an account is disconnected.
- Retention and deletion: Data retrieved through these APIs is deleted when the corresponding account is disconnected from our tool, or on written request to admin@waveaillc.com. See Section 7.
We comply with the developer terms and policies of each platform whose API we use, including their requirements on data retention, deletion, and permitted use.
7. Data Deletion Requests
You can ask us to delete your data at any time. Email admin@waveaillc.com with the subject line "Data deletion request". No account or login is required to make a request.
A. App account and gameplay data
On request, we permanently delete your account identifier, saved characters and character cards, generated adventures and scenario text, maps, saved scenes, and library items. Please send your request from the email address associated with your account, or include your in-app account identifier, so that we can locate the correct account. We complete verified deletion requests within 30 days and confirm by email.
Uploaded photos and face data are already deleted automatically within minutes of processing and are not retained beyond that point.
B. Social platform API data
Data retrieved from a Wave AI LLC social account through a platform API is deleted automatically when that account is disconnected from our internal tool, and the associated OAuth tokens are revoked at the same time. A deletion can also be requested in writing at the address above, and we complete it within 30 days.
C. What we retain
After deletion, we retain only records we are legally required to keep, such as transaction records held for tax and accounting purposes. These do not include your images, gameplay content, or social platform data.
8. Data Security
We implement reasonable technical and organizational safeguards to protect your data.
However, no system is 100% secure. We encourage users not to upload sensitive personal information.
9. Children's Privacy
The App is not intended for children under 13 years of age.
We do not knowingly collect personal data from children. If we become aware that such data has been collected, we will delete it promptly.
10. Your Rights
Depending on your location, you may have rights to:
- Request access to your data
- Request deletion of your data
- Withdraw consent
To exercise these rights, contact us at: admin@waveaillc.com. Deletion requests are handled as described in Section 7.
11. Changes to This Policy
We may update this Privacy Policy from time to time.
When we do, we will update the "Last Updated" date. Continued use of the App after changes indicates acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy, please contact:
Wave AI LLC
Registered in Wyoming, United States
Email: admin@waveaillc.com
See also our Terms of Use.