Privacy Policy

1. Data Controller

Black Igel
Karl Eisenträger
Eschersheimer Straße 41
12099 Berlin, Germany

Email: support@getwaker.app

2. Data We Collect

Account Data (Stored)

• Apple ID, email, name (if shared during Sign in with Apple)
• Privacy consent date, account deletion timestamp (if applicable)
• Usage counters for service limits

Alarm Settings (Stored)

• Times, labels, preferences, your name, daily goals, morning routine actions

Streak & Wake-Up History (Stored)

• If you use the streak feature: which days you completed a wake-up (per calendar day), the number of conversation exchanges per day, your chosen commitment weekdays, streak counters, and freeze balance
• Used to provide the streak feature and the in-app history view; deleted when you delete your account

Cancellation Feedback (Stored)

• If you cancel your subscription and choose to share feedback, we store your selected reasons and optional free-text comments
• Raw feedback is kept for 180 days, then anonymized (user link and free text removed; only structured reasons and timestamps are retained for product analysis)

Retention Offer State (Stored)

• Whether you declined or redeemed a retention offer, and the offer identifier
• This is kept permanently to honor your opt-out choice and enforce one-time redemption

Usage Milestones (Stored)

• One-time product milestones (e.g. onboarding completed, first alarm set, first wake-up completed) with a timestamp; no content, transcripts, or location
• During onboarding: which screens you saw, how long each was shown, and whether you moved forward; same consent, same 180-day anonymization as milestones
• Used to understand and improve the first-run experience; deleted when you delete your account
• Before you sign in, milestones are linked to a random identifier generated on your device; not your Apple ID, name, or any advertising identifier. After sign-in they are linked to your account, and the identifier is removed or anonymized on the same schedule as the milestones themselves
• Anonymized after 180 days (the link to your account and device is removed; only the milestone type and timestamps remain as aggregate data)
• Milestone timestamps are also attached to your subscription profile at RevenueCat (see Section 4)

Alarm Reliability (Stored)

• When you schedule an alarm, when an alarm's Talk button is used, and whether the wake-up conversation started, completed, or failed; with a timestamp, the alarm's internal identifier, and the app version
• The timestamp records when your alarm went off, so this data reflects your wake-up times
• No transcripts, no audio, no location, no alarm name
• Used only to find and fix alarms that do not work
• Anonymized after 180 days (the link to your account and to the alarm is removed; only the event type, the timestamps, and the app version remain as aggregate data)
• Deleted immediately if you delete your account

Session Data (Processed in Real-Time)

During alarm sessions, the following is sent to our server and to OpenAI to generate the wake-up conversation:

• Text transcripts of your speech (converted on-device by Apple before transmission)
• Your alarm configuration: name, wake time, daily goal/affirmation, morning routine action, voice and personality preference, language preference, temperature-unit preference
• Weather data (temperature, conditions); if you enabled weather context
• Calendar events (title, time, location); if you enabled calendar context

Our server does not persist this data after the session ends. OpenAI retains API requests for up to 30 days for abuse monitoring (see Section 4).

Data That Never Leaves Your Device

• Voice recordings; converted to text on-device by Apple
• GPS location; used only by Apple WeatherKit, never sent to us
• The onboarding voice preview (your name, alarm time, weather, first calendar event spoken aloud) is generated entirely on-device; nothing about it is transmitted

3. How We Use Your Data

We use your data to:

• Provide the wake-up conversation service
• Personalize your alarm experience
• Include weather and calendar context in conversations
• Detect and fix alarms that fail to start
• Prevent abuse of the service

Legal Basis: Contract fulfillment and consent (for optional features).

4. Third-Party Processors

Transfers protected by EU Standard Contractual Clauses.

5. Data Retention

• Account data: Until you delete your account
• Alarm settings: Until you delete them or your account
• Streak & wake-up history: Until you delete your account
• Cancellation feedback: 180 days, then anonymized
• Usage milestones: 180 days, then anonymized (or deleted earlier with your account)
• Alarm reliability events: 180 days, then anonymized (or deleted earlier with your account)
• Retention offer state (declined/redeemed): Permanently
• Session data (transcripts, weather, calendar, alarm configuration): Not stored on our servers. Processed by OpenAI under their 30-day abuse-monitoring retention, then deleted.
• Voice recordings: Never transmitted
• Usage counters: Reset daily at UTC midnight

6. Your Rights

Under GDPR, you have the right to:

• Access, correct, delete, restrict, or export your data
• Withdraw consent at any time
• Lodge a complaint with the supervisory authority

Contact: support@getwaker.app
Or use Settings → Delete Account

Supervisory Authority:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219, 10969 Berlin

7. Account Deletion

Delete anytime via Settings → Delete Account.

When you delete your account:

• Personal information (email, name) is erased
• All alarms are permanently deleted
• Streak and wake-up history is permanently deleted
• Raw cancellation feedback you submitted is immediately deleted on account deletion
• Usage milestones are permanently deleted
• Alarm reliability events are permanently deleted
• Usage counters are retained to prevent abuse
• Retention offer state (declined/redeemed) is retained to enforce one-time redemption and honor permanent opt-out
• Already anonymized feedback (older than 180 days) remains anonymous and is not affected

If you sign up again with the same Apple ID, previous usage limits and offer decisions apply.

8. Security

We protect your data using:

• HTTPS encryption for all data transmission
• Secure token-based authentication
• No storage of voice recordings (on-device speech recognition)

9. Children

Waker is not for users under 16. We do not knowingly collect data from children.

10. Changes

We may update this policy. Continued use constitutes acceptance.

11. Contact

support@getwaker.app

12. This website

This section covers visits to getwaker.app. The website sets no cookies of its own, uses no analytics and loads no fonts or scripts from third parties.

The website runs on a server of Hetzner Online GmbH (Germany) in a data center in Finland (EU). Hetzner processes the data on our behalf under Art. 28 GDPR. For each request, the web server logs:

• the IP address of the requesting device
• the date and time
• the requested page or file, the HTTP status code and the amount of data sent
• the referrer URL
• the browser and operating system (user agent)

We need these logs to run the website securely and to detect attacks. The legal basis is Art. 6(1)(f) GDPR. The logs are rotated daily and deleted automatically after 15 days at the latest.

All requests pass through Cloudflare (see section 4). To block automated attacks, Cloudflare can set a technically necessary cookie (for example __cf_bm). It expires after 30 minutes without activity. The legal basis is Art. 6(1)(f) GDPR.

If you email support@getwaker.app, Proton AG (Switzerland) hosts our mailbox. The European Commission has adopted an adequacy decision for Switzerland. We use your message only to answer it.

Impressum

Black Igel
Karl Eisenträger
Eschersheimer Straße 41
12099 Berlin, Germany

Email: support@getwaker.app

Verantwortlich für den Inhalt nach § 18 Abs. 2 MStV:
Karl Eisenträger