Privacy Policy

1. Data Controller

Black Igel
Karl Eisenträger
Eschersheimer Straße 41
12099 Berlin, Germany

Email: support@getwaker.app

2. Data We Collect

Account Data (Stored)

• Apple ID, email, name (if shared during Sign in with Apple)
• App Store transaction ID of your Waker installation (only to honor a parent's or guardian's withdrawal of consent, see Section 9)
• Privacy consent date, account deletion timestamp (if applicable)
• Usage counters for service limits

Alarm Settings (Stored)

• Times, labels, preferences, your name, daily goals, morning routine actions (app versions before 3.7)

Streak & Wake-Up History (Stored)

• If you use the streak feature: which days you completed a wake-up (per calendar day), the number of conversation exchanges per day, your chosen commitment weekdays, streak counters, and freeze balance
• Used to provide the streak feature and the in-app history view; deleted when you delete your account

Cancellation Feedback (Stored)

• If you cancel your subscription and choose to share feedback, we store your selected reasons and optional free-text comments
• Raw feedback is kept for 180 days, then anonymized (user link and free text removed; only structured reasons and timestamps are retained for product analysis)

Retention Offer State (Stored)

• Whether you declined or redeemed a retention offer, and the offer identifier
• This is kept permanently to honor your opt-out choice and enforce one-time redemption

Usage Milestones (Stored)

• One-time product milestones (e.g. onboarding completed, first alarm set, first wake-up completed) with a timestamp; no content, transcripts, or location
• During onboarding: which screens you saw, how long each was shown, and whether you moved forward; same consent, same 180-day anonymization as milestones
• Used to understand and improve the first-run experience; deleted when you delete your account
• Before you sign in, milestones are linked to a random identifier generated on your device; not your Apple ID, name, or any advertising identifier. After sign-in they are linked to your account, and the identifier is removed or anonymized on the same schedule as the milestones themselves
• Anonymized after 180 days (the link to your account and device is removed; only the milestone type and timestamps remain as aggregate data)
• Milestone timestamps are also attached to your subscription profile at RevenueCat (see Section 4)

Alarm Reliability (Stored)

• When you schedule an alarm, when an alarm's Talk button is used, and whether the wake-up conversation started, completed, or failed; with a timestamp, the alarm's internal identifier, and the app version
• The timestamp records when your alarm went off, so this data reflects your wake-up times
• No transcripts, no audio, no location, no alarm name
• Used only to find and fix alarms that do not work
• Anonymized after 180 days (the link to your account and to the alarm is removed; only the event type, the timestamps, and the app version remain as aggregate data)
• Deleted immediately if you delete your account

Ad Measurement (Only With Your Consent)

• Only for App Store accounts in the United States, and only if you tap "Accept" on Waker's "Ad measurement" screen AND allow tracking in Apple's prompt. Otherwise nothing is sent to Meta
• Before both consents, the Meta SDK is not even loaded: it stores nothing on your device and sends nothing
• The Meta SDK in the app sends to Meta: your device's advertising identifier (IDFA), an identifier the SDK creates on your device, basic device details (for example model, iOS version, language, time zone), your IP address, the facts that you installed and opened Waker, how long you used it each time, and whether you allow tracking
• RevenueCat sends to Meta: your subscription purchases and renewals (product, price, currency, date), the identifier the SDK created, and a one-way encoded (hashed) form of your RevenueCat customer ID
• Never sent to Meta: transcripts, voice, alarm content, goals, calendar, weather, location, your age range
• Purpose: to learn which of our ads led to an install and a subscription, and to let Meta improve the delivery of our ads
• Only for people aged 18 or older, and never for users whose Apple Account age range is under 18
• Your answer (Accept or Decline, the version of the text, the date) is stored on your device and, as a record of your choice, with your subscription profile at RevenueCat
• Withdraw anytime: Settings → Privacy → Ad measurement, or turn off tracking for Waker in iOS Settings (Waker sees this the next time you open it). Ad measurement stops at once; work the Meta SDK had already started can still finish until Waker is closed. RevenueCat stops sending to Meta when the removal of the Meta identifier reaches it; usually within seconds, without a connection the next time Waker is online

Session Data (Processed in Real-Time)

During alarm sessions, the following is sent to our server and to OpenAI to generate the wake-up conversation:

• Text transcripts of your speech (converted on-device by Apple before transmission)
• Your alarm configuration: name, wake time, daily goal/affirmation, morning routine action (app versions before 3.7), personality preference, language preference, temperature-unit preference
• Weather data (temperature, conditions); if you enabled weather context
• Calendar events (title, time, location); if you enabled calendar context
• Your wake-up streak (current and best streak, streak freezes) and today's date

Our server does not persist this data after the session ends. OpenAI retains API requests for up to 30 days for abuse monitoring (see Section 4).

Data That Never Leaves Your Device

• Voice recordings; converted to text on-device by Apple
• GPS location; used only by Apple WeatherKit, never sent to us
• The onboarding voice preview (your name, alarm time, weather, first calendar event spoken aloud) is generated entirely on-device; nothing about it is transmitted

3. How We Use Your Data

We use your data to:

• Provide the wake-up conversation service
• Personalize your alarm experience
• Include weather and calendar context in conversations
• Detect and fix alarms that fail to start
• Prevent abuse of the service
• Measure which of our ads work (only with your consent)

Legal Basis: Contract fulfillment and consent (for optional features). Ad measurement is based only on your consent (Art. 6(1)(a) GDPR; for the access to your device, § 25(1) TDDDG).

4. Third Parties and Processors

Transfers protected by EU Standard Contractual Clauses (Meta: EU-US Data Privacy Framework).

5. Data Retention

• Account data: Until you delete your account
• Alarm settings: Until you delete them or your account
• Streak & wake-up history: Until you delete your account
• Cancellation feedback: 180 days, then anonymized
• Usage milestones: 180 days, then anonymized (or deleted earlier with your account)
• Alarm reliability events: 180 days, then anonymized (or deleted earlier with your account)
• Retention offer state (declined/redeemed): Permanently
• Session data (transcripts, weather, calendar, alarm configuration): Not stored on our servers. Processed by OpenAI under their 30-day abuse-monitoring retention, then deleted.
• Voice recordings: Never transmitted
• Usage counters: Reset daily at UTC midnight
• Records of a parent's or guardian's withdrawal of consent (App Store transaction ID, date): Kept to honor the withdrawal
• Ad measurement: The Meta identifier is removed from your subscription profile at RevenueCat when you withdraw your consent (in Waker or in iOS Settings), sign out or delete your account, and when you sign in on an iPhone where you have not given your consent (also after reinstalling Waker); you can give it again in onboarding or in Settings → Privacy → Ad measurement. The data the Meta SDK stored on your device is deleted, at the latest the next time you open Waker, as soon as ad measurement can no longer run with your consent: for example when you withdraw it (in Waker or in iOS Settings), delete your account, or another person signs in on the device. After an ordinary sign-out it stays on the device, with your consent, until you sign back in. Meta keeps data under its own policy

6. Your Rights

Under GDPR, you have the right to:

• Access, correct, delete, restrict, or export your data
• Withdraw consent at any time (ad measurement: Settings → Privacy → Ad measurement)
• Lodge a complaint with the supervisory authority

Contact: support@getwaker.app
Or use Settings → Delete Account

Supervisory Authority:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219, 10969 Berlin

7. Account Deletion

Delete anytime via Settings → Delete Account.

When you delete your account:

• Personal information (email, name) is erased
• All alarms are permanently deleted
• Streak and wake-up history is permanently deleted
• Raw cancellation feedback you submitted is immediately deleted on account deletion
• Usage milestones are permanently deleted
• Alarm reliability events are permanently deleted
• The Meta identifier is removed from your subscription profile at RevenueCat, the data the Meta SDK stored on your device is deleted, and ad measurement stops
• Usage counters are retained to prevent abuse
• Retention offer state (declined/redeemed) is retained to enforce one-time redemption and honor permanent opt-out
• Already anonymized feedback (older than 180 days) remains anonymous and is not affected
• The App Store transaction ID is removed from your account (a record of a parent's or guardian's withdrawal of consent stays, see Section 5), and we ask Apple to revoke Waker's Sign in with Apple authorization (you confirm with your Apple Account first)

If you sign up again with the same Apple ID, previous usage limits and offer decisions apply.

8. Security

We protect your data using:

• HTTPS encryption for all data transmission
• Secure token-based authentication
• No storage of voice recordings (on-device speech recognition)

9. Children

Waker is not for users under 16. We do not knowingly collect data from children.

Where a law requires an age check (for example in Texas), Waker asks Apple for the age range of your Apple Account. The age range stays on your device; we never receive it. If the age is under 16, Waker cannot be used. If a parent or guardian withdraws consent through Apple, we block the account.

Waker does not use ad measurement for users whose Apple Account age range is under 18.

10. Changes

We may update this policy. Continued use constitutes acceptance.

11. Contact

support@getwaker.app

12. This website

This section covers visits to getwaker.app. The website sets no cookies of its own, uses no analytics and loads no fonts or scripts from third parties.

The website runs on a server of Hetzner Online GmbH (Germany) in a data center in Finland (EU). Hetzner processes the data on our behalf under Art. 28 GDPR. For each request, the web server logs:

• the IP address of the requesting device
• the date and time
• the requested page or file, the HTTP status code and the amount of data sent
• the referrer URL
• the browser and operating system (user agent)

We need these logs to run the website securely and to detect attacks. The legal basis is Art. 6(1)(f) GDPR. The logs are rotated daily and deleted automatically after 15 days at the latest.

All requests pass through Cloudflare (see section 4). To block automated attacks, Cloudflare can set a technically necessary cookie (for example __cf_bm). It expires after 30 minutes without activity. The legal basis is Art. 6(1)(f) GDPR.

If you email support@getwaker.app, Proton AG (Switzerland) hosts our mailbox. The European Commission has adopted an adequacy decision for Switzerland. We use your message only to answer it.

Impressum

Black Igel
Karl Eisenträger
Eschersheimer Straße 41
12099 Berlin, Germany

Email: support@getwaker.app

Verantwortlich für den Inhalt nach § 18 Abs. 2 MStV:
Karl Eisenträger