Privacy policy

Waketfup is an alarm app. To work, it needs an account, your alarms and a record of how each alarm went. This page lists every piece of data the app handles, what we use it for, and how you get rid of it. We do not sell data and we show no ads.

1. Who is responsible

Write to us at the address above for anything in this policy.

2. What the app stores and why

Your account

When you sign up we store:

• your email address, or the relay address Apple gives us when you hide your email
• the account id that Apple or Google sends us when you sign in with them
• your username, your display name and your birth year
• a profile picture, if you add one
• the language your device uses

We need this to create your account, to sign you in, to check that you are 16 or older and to show your name inside the app. Friends find you by your exact username, see "Friends and notifications" below.

Legal basis: the contract with you (Art. 6(1)(b) GDPR). Retention: as long as your account exists. When you delete your account, all of it goes at once.

Sign-in with Apple or Google runs on their servers first. Apple and Google learn that you signed in to Waketfup; their own privacy policies cover that step. If you sign in by email, we send you a one-time code through our email provider.

Your alarms and alarm runs

For every alarm we store its time, repeat days, label, sound, volume and the tasks you attached. For every time an alarm rings we store when it was scheduled, when it rang, when you first touched the screen, when it ended, how it ended (completed, emergency exit, abandoned, missed), which tasks you solved, whether you used the emergency call button, your platform and the app version. Your streak is computed from these runs.

We store this so your alarms survive a new phone, so the history screen and the streak work, and so we can see which alarm mechanics fail on which devices.

Legal basis: the contract with you (Art. 6(1)(b) GDPR). Retention: until you delete the alarm or run in the app, or until you delete your account.

Crash reports

When the app crashes or an alarm fails to fire, the app sends a report to Sentry. A report contains the error, the stack trace, your device model, operating system version, app version, your language, and a random installation id. The app also sends a small sample of performance traces (one in ten app starts). Reports carry no name, email or username.

We need this to find bugs that only appear on real phones. An alarm app that silently fails is useless, so this runs without asking.

Legal basis: our legitimate interest in a working app (Art. 6(1)(f) GDPR). Retention: Sentry deletes reports after 90 days.

Analytics events

Only if you allow it, the app sends usage events to PostHog: which screens you open, that you created or enabled an alarm, that a run was completed or abandoned, that you saw the paywall, started a purchase or restored one, that you switched snapshots on or off, how many photos a morning left behind, and that you shared a photo or a card. Each event carries your account id, app version, platform and language, plus counts like the number of tasks. No event contains your email, name, username, alarm labels or any text you typed.

We use this to see where people get stuck. You decide during onboarding or later in Settings under Privacy, and you can switch it off there any time. Switching it off stops the events and unlinks the app from your id.

Legal basis: your consent (Art. 6(1)(a) GDPR). Retention: when you delete your account, we delete your person at PostHog and every event linked to it. Events from before you gave consent carry a device id, not your account, and expire after twelve months.

Purchase state

When you subscribe to Waketfup Pro, Apple or Google handle the payment. We never see your card or bank details. RevenueCat, our subscription service, tells us whether your subscription is active, which plan you chose, when it expires, whether it will renew and whether a payment failed. We store that state next to your account id.

We need this to unlock the app, to warn you before an expired subscription silences an alarm, and to restore your purchase on a new phone.

Legal basis: the contract with you (Art. 6(1)(b) GDPR). Retention: as long as your account exists. Apple and Google keep their own purchase records under their own rules.

Friends and notifications

Friends on Waketfup are mutual. You send a request by username, invite link or QR code, and the other person accepts it or not. Nobody sees a list of your friends, and there are no public profiles. Someone who types your exact username or opens your invite link sees your username, display name and profile picture before sending a request, nothing more.

Your accepted friends see:

• your username, display name and profile picture
• your current and your best streak
• the time and label of your next alarm, unless you switch on "Hide my alarm times" in Settings
• whether one of your alarms is ringing right now
• a post for each morning you finish or chicken out of: when the alarm rang (without the clock while you hide your alarm times), your tasks with what you did, how long it took and your streak; after a chicken-out, the sentence you typed and the task you gave up at
• the emoji reactions on your posts and who left them

For this your phone writes your time zone, your streak, your next alarm and whether an alarm is ringing to your profile, and it writes the post when a morning ends. Friends see posts from the last 30 days. Your invite link carries a random code; you can replace it in the app, and the old link stops working. We store friend requests, friendships and blocks as well.

If you allow notifications, the app registers a push token for your phone with Expo, which delivers pushes through the push services of Apple and Google. We store the token with your account. When a friend finishes a morning, chickens out, sends or accepts a friend request, reacts to your post, or has let an alarm ring for five minutes, and when your prank or poke reached someone, our server sends you a push through Expo with its text: a username, a time, a task count, a streak, a typed sentence or the title of a prank. A poke reaches the phone as a push without any text; it only wakes the app so it can fetch the poke. You pick which kinds you get in Settings under Notifications. Turning notifications off for Waketfup in the settings of your phone stops all of them.

Legal basis: the contract with you (Art. 6(1)(b) GDPR). Retention: a friendship lasts until one of you removes or blocks the other, posts and reactions until you delete your account. A push token goes when you sign out, when your phone stops accepting pushes, or when you delete your account.

Pranks, pokes and reports

A friend you allow can prank your next alarm, and you can prank theirs. A prank is either a recording of up to 30 seconds made in the app or a sound from our library. A recording goes into a private storage bucket in Frankfurt, and only the sender and the friend it is meant for can fetch it. The friend's phone downloads it before the alarm and plays it once. Afterwards the friend sees who sent it and its title, and the sender gets a push. You switch pranks off for everyone in Settings, or for one friend on their profile.

While a friend's alarm rings, you can poke them, either with a short sound built into the app or with a voice clip of up to five seconds. A clip is stored the same way and plays once on the friend's phone. When your alarm has rung for five minutes and nobody has touched the phone, your phone asks our server to tell your friends, so they can poke you.

We delete a recording from storage once it has played, once the prank expired unplayed after 7 days, or once a removed friendship or a block cancelled it, and at the latest 14 days after it was sent. A recording that someone reported stays until we have dealt with the report.

You can report a person, a post, a prank or a poke in the app. A report stores who reported it, who is reported, what it is about, the reason and anything you wrote. We get an email about it through Resend and handle it on an internal page, where we can hear the reported recording. We remove content and close accounts that break our terms. A closed account can no longer sign in, and its pranks and pokes that were still waiting are removed. We keep a report until it is dealt with and delete it 12 months after that, so that repeated reports about the same person can be judged together.

Blocking someone ends your friendship, cancels pranks waiting between you, removes the reactions you left on each other's posts and hides you from each other in search and in the feed. The other person is not told.

Legal basis: the contract with you (Art. 6(1)(b) GDPR); for reports, also our legitimate interest in keeping the app free of abuse (Art. 6(1)(f) GDPR).

3. Who processes data for us

These companies run parts of the service under contracts that bind them to our instructions:

Apple and Google act as store operators and as sign-in providers on their own responsibility.

This website sets no cookies and runs no analytics. Vercel keeps short-lived server logs with your IP address to keep the site running.

4. Camera tasks, snapshots and the share card

Some tasks use the camera to count your reps. Your phone analyses every frame itself. Neither the picture nor the body points the app reads out of it ever reach a server, nothing is recorded, and camera tasks never use the microphone. Two tasks use the camera in another way: one scans a code you set up, one compares a photo with a reference photo you took. The code and the reference photo stay on the phone; the alarm stores a hash of the code and nothing of the photo.

Snapshots are off until you switch them on in Settings. With them on, the phone takes a photo every ten seconds while a camera task is on screen, at most twenty per morning, starting with one the moment the camera opens. Those photos live in the app's own storage on your phone. They never go into your account and never reach our servers, not even as the fact that they exist. The app deletes them after the period you pick in Settings, which is 7, 30 or 90 days, or keeps them until you delete them; it also deletes them when you delete that morning, when you delete a single photo, and when you delete your account. A photo leaves your phone only when you share it or save it to your photo library yourself, and the app asks for permission to write to your photo library the first time you tap Save.

The share card with your wake time, your tasks and your streak is drawn on your phone from data you already see in the app. It goes nowhere until you share or save it.

5. Your rights

You can:

• get a copy of your data (access, Art. 15 GDPR)
• have wrong data corrected (Art. 16)
• stop sharing with a friend: remove them or block them in the app. Your profile and your posts disappear from their app at its next refresh
• delete everything: open Settings and tap Delete account. This removes your account, alarms, runs, profile picture, friends, posts, reactions, pranks, pokes and the recordings you sent, push tokens and purchase state from our servers immediately (Art. 17). A report you made stays, without your name, until we have dealt with it
• receive your data in a portable format (Art. 20)
• object to processing based on our legitimate interest (Art. 21)
• withdraw your analytics consent in Settings under Privacy at any time (Art. 7(3))
• complain to a data protection authority. Ours is the Saxon Data Protection Commissioner (Sächsischer Datenschutzbeauftragter), Bernhard-von-Lindenau-Platz 1, 01067 Dresden, Germany, datenschutz.sachsen.de

For everything except deletion and consent, write to us. We answer within a month.

6. Age

Waketfup is for people aged 16 and older. Onboarding asks for your birth year and refuses younger users. If you learn that someone under 16 has an account, tell us and we delete it.

7. Changes

We update this page when the app changes what it stores. The date at the top tells you when. For changes that affect you materially we tell you inside the app before they apply.