1. Who is responsible for data
Service operator: Individual Entrepreneur Evgenii Vinogradov. Country of registration: Georgia. Identification Number: 302287629. Legal address: 0151 Georgia, Tbilisi, Lochini St., 3, Apartment 5. Contact: waitera.support@gmail.com. This policy covers the Waitera app and website. Data comes from you, your device, your chosen sign-in service and public event sources. This version is prepared for review and is not yet in force.
2. Data and processing purposes
We use an account identifier, installation identifier and data from the sign-in method you choose: an email address for a code; Apple or Google identifiers and information they provide; Telegram ID, display name, username and an available profile photo. Waitera does not receive passwords for external accounts. We store expectations, favorites, search queries and results, language, region, time zone and notification preferences to provide the features you select. Interest in a future plan and technical events help us assess product interest and fix problems; this is not a purchase. The basis for processing depends on its purpose: performing our agreement for core features, separate consent for optional transfers, a legitimate interest in security and diagnostics balanced against user rights, and applicable legal obligations. This policy is not blanket consent to all processing.
3. AI search and query recipients
Before the first AI search, the app asks permission to send the query text to DeepSeek to find an event and check the information. Permission is saved for this account on this device. You can withdraw it on the privacy policy page in the app; this stops new queries from being sent but does not undo earlier requests. The catalog is available without this permission. A query can contain personal information if you enter it; do not include sensitive information or other people’s private data. External search and information sources may process search phrases prepared for them. AI does not make decisions with legal effects on you. The test pilot may still return demonstration responses. End-user retention terms at the API provider and the full external search setup for release are still being verified; we do not currently promise zero retention or exclusion from model training.
4. Region and location
You can choose a country and city manually. If you allow region detection, the app makes one attempt to obtain approximate location while in use and passes coordinates to the Apple or Android system geocoding service. Waitera code stores the selected country and city, not a movement history or the original coordinates from this operation. Background location tracking is not provided. Declining permission does not prevent manual region selection. You can change permission in phone settings; the system service processes data under its own terms.
5. Delivery, security and processing locations
For email sign-in, Resend receives the recipient address and the message containing the code. Firebase Cloud Messaging and Apple Push Notification service deliver notifications using registration tokens and message content. An external sign-in service receives information when you contact it. Google processes messages sent to waitera.support@gmail.com. The server processes IP addresses and technical information for networking, rate limits and diagnostics. The current VDSka server is in the Netherlands; this describes the test environment and does not promise Russian storage. Resend’s main processing operations are in the United States. DeepSeek is a provider from China; the terms and processing countries for its API must be documented separately for release. Processing is therefore not confined to one country. The localization, transfer and contractual arrangements must be completed before public launch in Russia. Transport uses HTTPS and the app session uses the operating system’s secure storage; the local app cache is not a separately encrypted database.
6. Retention and deletion
Account and expectation data is needed while you use the service. Request account deletion in your profile or by contacting support; you do not need to reinstall the app to contact us. Uninstalling or signing out does not delete the server account. After deletion, sign-in data, personal expectations and notifications are deleted or unlinked depending on the record type; public events remain in the catalog. Technical and research records may temporarily remain without their previous direct account link; this does not mean all text in them is automatically anonymous. With Apple sign-in, encrypted information needed to revoke authorization may remain queued until Apple successfully processes revocation. Backups expire through rotation rather than immediately. The current candidate configures AI pipeline records for 90 days, one-time code records for 24 hours after expiry, and notification buffers for 7 days after sending; server cleanup is still being verified. The backup script keeps 14 latest snapshots, which does not mean 14 days without a verified schedule. Final retention periods for all logs, backups and processors will be documented before publication.
7. Your rights and requests
You may request information about processing, a copy of your data, correction, deletion, restriction or withdrawal of consent as provided by applicable law. The app includes data export. Email waitera.support@gmail.com and describe the action you need. We may ask for the minimum information needed to verify account ownership; do not send a password, sign-in code or passport copy without a separate justified request. Georgian rules set 10 working days for many access, correction and deletion requests; some actions have different deadlines and exceptions. We follow a shorter mandatory deadline where applicable. We explain refusals or permitted extensions. You may contact the competent supervisory authority or court; contacting us does not remove that right.
8. Age, changes and publication
Waitera is for users aged 16 and over and is not a children’s service. If we learn that we process data of a user below the permitted age, we will consider deletion and ending access in accordance with the law. Optional AI and notification permissions are not bundled with general acceptance of the terms. Material processing changes will be explained before they apply, with new consent where required. This draft has no effective date: hosting, API provider terms and retention verification must be completed before publication. The app and public pages must use the same current version.