Last updated 1 September 2026
Waffle is a photo app for a small group of friends. It works because the photos stay between you. This page says exactly what is collected, who can see it, and how to get rid of it, in plain language, because a policy nobody can read protects nobody.
Waffle is made by Batter, a one-person project based in San Jose, California. Questions, requests, or complaints: hello@feedwaffle.com. A real person reads that address.
Either an email address and password, or a sign-in from Apple or Google. If you use Apple, Apple may give Waffle a relay address rather than your real one. That is Apple's feature, and it works fine here. Google supplies your email, name, and profile picture.
You also choose a handle and a display name, and may add a bio and a profile picture.
The app reads your device's time zone and stores it. This is not tracking. It is how the app knows when your day ends, so a photo taken at 11pm counts for that day and not the next. It updates when your phone's time zone changes.
No location. No contacts. No advertising identifier. No analytics, crash reporting, or attribution SDK. The app has none installed. No browsing history, and no data from any other app on your phone.
This is the part most policies are vague about, so here it is precisely.
| Thing | Who can see it |
|---|---|
| Your photos | Only friends who have accepted you, and members of a waffle you share. Enforced by the database on every request, including on the image files themselves, which are served through short-lived signed links and cannot be opened by anyone else. |
| Your comments | Anyone who can see that photo, while it is live. After 24 hours, only the person whose photo it is. |
| Handle, name, bio, profile picture, time zone | Any signed-in Waffle user. This is what makes it possible for a friend to find you. See the note below. |
| Profile picture and plate cover images | Anyone with the direct image link. These are stored unsigned so they can load quickly everywhere in the app. Your photos are not stored this way. |
| Reports you file | Only Batter. Not the person reported. |
| Blocks and mutes | Only you. The other person is never told. |
Accounts, content, and photos are hosted on Supabase, a managed database and storage provider. Photos live in a private storage bucket that is not reachable without a signed link generated for someone the rules already allow.
This website is hosted on Vercel, and loads its fonts from Google Fonts, which means Google sees the IP address of anyone loading this page, as it would on most of the web. The site sets no cookies and runs no analytics.
If you join the waitlist, your email address is stored so you can be told when the app launches. That list cannot be read by the key this page uses; it can only be added to.
Email itself is sent by Resend, a delivery provider. Anything Waffle emails you goes through them: confirming your address, resetting a password, and the one note that says the app is ready. They handle your email address and the message, and nothing else. Waffle sends no marketing email and has no newsletter to be added to.
Some things never leave your device: your light/dark preference, whether you have seen the intro, your notification settings, and any photo that has not finished uploading yet. Notifications are generated on your phone. Waffle has no push server, so no notification you receive has passed through anyone's hands.
If you allow it, Waffle also saves a copy of each photo you post into your own camera roll. That copy is yours and is unaffected by anything you do in the app.
If you add a home screen widget, the app copies the handful of small thumbnails the widget draws into a private folder shared between the app and the widget. That folder is on your phone, is readable only by Waffle, and is emptied when you remove the app. Nothing about the widget is sent anywhere, and it never contacts a server of its own.
| Permission | Why |
|---|---|
| Camera | Required. Photos are taken live in the app. That is the product. Nothing is ever imported from your camera roll. |
| Photo library | Optional, two ways: to save a copy of your own photos, and to pick a profile or cover picture. Waffle does not read your library for anything else. |
| Notifications | Optional. Only for reminders you set and for telling you a photo has become permanent. All generated on your phone. |
Waffle never asks for location, contacts, microphone, or health data.
A photo can be deleted for 24 hours after you post it. After that it is permanent. That is the whole idea of the app, and it is enforced in the database rather than by hiding a button. Deleting your account is the way to remove a photo that has set.
Settings → Delete account. This removes your profile, every waffle you started, every photo you posted, your comments and hearts, and your friendships. The image files are deleted too, not only the records pointing at them.
Two honest caveats. Photos you added to a shared waffle are deleted with your account, but the waffle itself survives for the people still in it. And a comment you left on someone else's photo goes with your account, which may leave a gap in a conversation they can still see.
Deletion is immediate and cannot be undone. If you would rather have a copy first, save your photos from inside the app before you delete.
Waffle is not directed at children under 13 and accounts are not knowingly created for them. If you believe a child has made an account, email hello@feedwaffle.com and it will be removed.
Wherever you live, you can ask what is held about you, ask for a copy, ask for it to be corrected, or ask for it to be deleted. The Delete account button does the last one immediately; for anything else, email hello@feedwaffle.com.
If you are in California, the CCPA gives you those rights explicitly, plus the right not to be discriminated against for using them. Waffle has never sold or shared personal information, so there is nothing to opt out of. If you are in the UK or EU, the lawful basis for handling your content is the contract between you and Waffle: you asked it to store your photos so your friends could see them.
Everything travels over encrypted connections and is encrypted at rest by the hosting provider. Access rules are enforced by the database rather than by the app, which means a modified or broken copy of the app still cannot reach someone else's photos.
That said: this is a small project run by one person, and no system is perfect. If you find a security problem, email hello@feedwaffle.com and it will be taken seriously.
If this policy changes in a way that matters, the date at the top changes and anyone on the waitlist or using the app will be told. Old versions of this page are kept in the project's public history.