Last updated: September 26, 2026
Opine Technologies Inc. (“us”, “we”, or “our”) operates https://waffle.ai and the Waffle mobile application (collectively referred to as the “Service”).
This Privacy Policy explains what data we collect, how we use it, which third-party services we share it with, and what rights you have over your data. By using the Service, you agree to the collection and use of information in accordance with this policy.
When you create an account, we collect the following through our authentication provider:
We store the prompts you type, messages and transcripts from brief chats and calls, and the structured briefs used to generate audio. These can include context you choose to share about yourself. We also store your audio requests, generation progress and completed audio.
Waffle operators manage each Person's profile and Sources. Sources include video titles, links and transcripts used to ground generated scripts. Source references are visible in the app. We store cloned-voice identifiers and evidence of permission to use those voices. Voice providers process voice samples and generated scripts to produce synthetic speech.
We store your chosen topics, age band, settings, saved audio, likes, comments and playback activity. If you enable notifications, we store your device push token and permission settings to notify you when audio is ready.
New audio is private in the app until you publish it. Publishing makes the audio and its title available to others, with your username when you have one. Public audio can appear in discovery, search and shared website pages. Publishing does not publish your raw brief messages or call transcript, but the generated audio may reflect personal details in your brief. Review it before publishing.
Private audio is excluded from public listings and share pages. Media files use unlisted URLs; anyone who obtains a direct media URL can play it. Unpublishing removes public access through Waffle's listings and share pages but does not revoke a media URL or copies already saved by others.
For iOS subscriptions, Apple processes payment. RevenueCat receives store transaction and purchase history, product and subscription status, trial and renewal information, and an identifier linked to your Waffle account. Its SDK also processes app, device and store information needed to operate purchases. We store your verified access status, product, expiration, renewal status and verification time to enable playback controls, restore purchases, resolve billing problems and monitor subscription activity. We do not receive your payment card details or Apple Account password.
The identifier sent to RevenueCat contains your Waffle account ID and service environment, not your email or name. It can be linked to your account by us. The billing SDK does not collect advertising identifiers. If you separately allow advertising measurement, we share trial and subscription starts with OpenAI as described below.
AI providers process the information needed to prepare your brief, retrieve relevant Sources, write an audio script and synthesize speech.
Use account deletion or contact us to request removal of previous briefs or audio.
In addition to the AI services listed above, we use the following third-party services to operate Waffle:
Apple and RevenueCat process iOS purchases and subscription history. RevenueCat validates purchases, supplies access status and provides subscription analytics and customer support tools. See RevenueCat's Privacy Policy.
If you allow advertising measurement, our website loads the OpenAI Measurement Pixel to measure page visits, Start listening clicks and clicks to the App Store and attribute them to ads in ChatGPT. OpenAI receives event information, browser and network information, and advertising attribution identifiers. An App Store click does not confirm an app installation or purchase. When automatic advanced matching is enabled in our advertising account, the pixel may detect supported customer information entered on our website, such as an email address, and send a securely hashed version to help match conversions to ads.
The pixel uses first-party cookies: __oppref stores an ad attribution identifier for up to 30 days, and __obref stores a browser reference for up to 365 days. We store your choice in your browser. The pixel loads only after you allow measurement. You can withdraw your choice using Ad cookie settings; this stops future measurement and removes these pixel cookies. Our events opt out of future user-level personalization. See OpenAI's Privacy Policy.
Advertising measurement in the app is off unless you allow it. On iOS, system tracking permission is also required. When enabled, our server sends completed registration, free-trial starts and paid-subscription starts to OpenAI, together with event times, plan identifiers, hashed email and account identifiers, and available ad attribution and browser references carried by app links. We do not send your Apple advertising identifier. These events opt out of future user-level personalization.
You can turn this off in the app's Privacy settings. The change takes effect on our server once your device reconnects and synchronizes. We check iOS tracking permission when the app becomes active. Withdrawing consent stops future delivery, including pending events. Website and app preferences are managed separately. Deleting your account removes the associated consent and delivery records from Waffle.
All third-party service providers listed above are contractually obligated to protect your data and use it only for the purposes described in this policy. We select providers that maintain industry-standard security practices including encryption in transit and at rest, access controls, and regular security audits.
Providers process data under their applicable service terms and privacy policies. We send brief content, Source excerpts, scripts and speech only to the providers used for the requested processing step.
Waffle uses the collected data for the following purposes:
We retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. Brief messages, call transcripts, generation records and audio are retained to operate your account and requests until removed through deletion. Account deletion removes your briefs, generated audio, including public audio, and associated interactions. Operator-managed People, Sources and cloned voices are separate from listener accounts and are not removed when a listener deletes their account. We will retain and use your data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Use Delete account in Waffle Account to request deletion, or contact us at the email below. We remove stored subscription snapshots and account links during account deletion and request erasure of the corresponding RevenueCat customer profile. Failed provider cleanup is retried before deletion completes. RevenueCat processes erasure asynchronously. Completed billing notification records keep event identifiers, timing and processing results for 30 days to handle duplicate delivery; account identifiers are removed when processing completes or during account deletion.
Account deletion does not cancel Apple billing. Apple and RevenueCat may retain records under their own applicable obligations. If you restore a purchase after creating a new Waffle account, store transactions can be synchronized again to provide that account with access.
Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where data protection laws may differ from those of your jurisdiction.
If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there. Our third-party providers may also process data in their respective locations.
The security of your data is important to us. We use industry-standard encryption, access controls, and security practices to protect your information. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, please contact us at the email below.
Our Service is not intended for use by children under the age of 18. We do not knowingly collect personally identifiable information from children under 18. If you become aware that a child has provided us with Personal Data, please contact us.
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date. You are advised to review this Privacy Policy periodically for any changes.
If you have any questions about this Privacy Policy, please contact us:
By email: founders@waffle.ai