Your family's data, treated with care
Waggle is built for European families, so the most personal details of family life stay private, protected, and firmly under your control. Here's how.
Data architecture
Waggle is built on Supabase and PostgreSQL. Every record belongs to one family, and row-level security ensures families stay isolated at the database layer.
Waggle runs on Supabase with PostgreSQL as the source of truth. Your family's records live in a managed, production-grade database.
Every record is tied to a single family. Calendar events, tasks, meals, and messages are never shared across families by design.
Row-level security (RLS) is enforced on database tables so one family can never read another family's data — even at the query layer.
AI security
Waggle uses leading AI models through the Vercel AI SDK. AI runs server-side, scoped to your family, and never trained on your data.
AI models are accessed through the Vercel AI SDK, with helpers centralised server-side — not scattered across the client.
AI features only operate on the requesting family's data. Your information is never sold or used to train models.
Voice transcription and content ingestion run on the server, keeping sensitive inputs off other families' devices and out of shared client code.
Account security
Sign-in and session management are handled by Supabase Auth — the same foundation that secures your family's data in the database.
Authentication is handled by Supabase Auth. Sign in with email and password, or use Google or Apple OAuth.
Sessions are managed through shared, hardened clients with standard secure cookie handling.
Your rights under GDPR
Waggle is designed around European data protection law. These rights aren't fine print to us — they shape how the product is built.
Request a full export of your family's data at any time, in a portable format.
Ask us to delete your family's data and we will remove it — completely.
We collect only what the product needs, use it only for what you asked, and never for advertising.
Encryption & compliance
We take a straightforward approach: encrypt data, respect your ownership, and be honest about what we do and do not claim.
Data is encrypted in transit with TLS and encrypted at rest by our infrastructure providers.
Clear data ownership, purpose limitation, and respect for your family's privacy choices — by design, not as an afterthought.
We do not claim certifications we have not earned — we focus on doing the work honestly.
Questions about security?
We're happy to walk through how Waggle handles your family's data. Reach out anytime — no sales pitch required.