Wakey
Privacy Policy
This policy explains what Wakey (“we”, “us”) collects, why, and what control you have. It covers the Wakey mobile app for iOS and Android and this website.
1. The short version
- You can use Wakey without an account. Alarms work entirely on your device.
- If you create an account, we store your alarms, wake-up history and streaks so they survive a reinstall or a new phone.
- Mission photos are never stored. They are sent for verification, checked, and discarded. Only the verdict is kept.
- Your commitment signature never leaves your device.
- We do not sell your personal information and we do not use it for third-party advertising.
2. What we collect
Account data
If you sign in, we store an account identifier and, depending on how you sign in, your email address. Signing in with Apple using “Hide My Email” gives us only a relay address. We also store a display name, the answers you give during onboarding (your wake-up reason and goal), your time zone, and the timestamp at which you signed the commitment screen.
App data you create
| Data | Why we hold it |
|---|---|
| Alarms — time, repeat days, label, mission type, sound and volume settings | To sync your alarms across devices and restore them after a reinstall |
| Wake events — target time, time zone, when you logged in, outcome, mission type, number of verification attempts | To calculate streaks and show your progress |
| Streaks and achievements | To show your current and best streak and unlocked badges |
| Bedtime app-lock rules, if you use that feature | To apply your blocking schedule |
| Subscription status (entitlement, status, renewal date) | To unlock Premium features |
| Verification logs — mission type, pass/fail, a confidence score, a short reason, and how long the check took | To debug missions and improve accuracy. The photo itself is not part of this record. |
Camera, microphone and motion
Some missions use your device sensors:
- Camera — photo missions (photograph an item, the sky, your made bed, grass, or a scripture page) and pose-based missions (Push-Ups, Squats).
- Microphone and speech recognition — spoken affirmation missions.
- Motion and pose detection — runs entirely on your device. Video frames for pose missions are processed locally and are never uploaded.
For photo missions, the captured image is transmitted to our verification service, which passes it to Google’s Gemini API to judge whether the mission was completed. The image is not written to our database or to any storage bucket — it exists only for the duration of that request. Only the verdict (pass/fail, confidence, short reason) is logged against your account. If you would rather no image ever left your device, choose one of the mission types that is checked entirely on your device — Math, Affirmation, Bible Verse, Push-Ups or Squats.
Your signature
The commitment signature drawn during onboarding stays on your device. We store only the timestamp at which it was captured, never the image of the signature.
Diagnostics and product analytics
We may collect crash reports and technical diagnostics, and product analytics events describing how the app is used — for example that onboarding was completed, an alarm rang, a mission was completed or failed, a streak changed, or the paywall was viewed. These events describe actions, not content: they never include photos, audio, or the text of your affirmations. They are tied to a pseudonymous identifier and are used to fix bugs and improve the product.
What we never collect
We do not collect your precise location, your contacts, your calendar, your messages, your health records, or a list of the apps installed on your device. We do not track you across other companies’ apps and websites, and we do not use your data for third-party advertising.
3. Why we are allowed to process it (UK and EU users)
| Purpose | Legal basis |
|---|---|
| Providing alarms, missions, streaks and sync | Performance of a contract |
| Verifying photo missions | Performance of a contract |
| Managing subscriptions and preventing abuse | Performance of a contract; legitimate interests |
| Crash diagnostics and product analytics | Legitimate interests, and consent where required by local law |
| Responding to your support emails | Legitimate interests |
4. Who we share it with
We use a small number of processors, and only to run the service:
| Provider | What it handles |
|---|---|
| Supabase (self-hosted on our own server) | Account authentication and your app data |
| Google (Gemini API) | Photo-mission verification. Images are sent for the check and are not retained by us. |
| RevenueCat | Subscription entitlement management |
| Apple and Google | Payment processing and app distribution. We never see your payment card details. |
| Sentry | Crash and error diagnostics |
| Mixpanel | Product analytics events |
We may also disclose information where we are legally required to, or to protect our rights and the safety of users. We do not sell personal information, and we do not “share” it for cross-context behavioural advertising as those terms are used under California law.
5. International transfers
Our servers are located in Europe. Some processors listed above operate in the United States and elsewhere; where personal data is transferred outside the UK or EEA we rely on the appropriate safeguards those providers offer, such as Standard Contractual Clauses.
6. How long we keep it
- Account and app data: for as long as your account exists.
- Mission photos: not retained — discarded once the verdict is returned.
- Verification logs, wake events and streaks: for as long as your account exists, because they are what your progress is made of.
- Diagnostics: typically up to 90 days.
- Support email: up to 24 months.
When you delete your account, the records above are deleted with it.
7. Your rights and choices
You can access, correct, export or delete your data, object to or restrict processing, and withdraw consent where we rely on it. The fastest route is in-app: Settings → Delete account, which erases your account and everything linked to it. You can also request deletion through this website, or email support@deepfai.com for any other request.
You can revoke camera, microphone or notification permissions at any time in your device settings; missions that need them will stop being offered. If you are in the UK or EEA you have the right to complain to your local supervisory authority.
8. Children
Wakey is not directed at children under 13, or under 16 where local law sets that age, and we do not knowingly collect their personal information. If you believe a child has given us personal data, email support@deepfai.com and we will delete it.
9. Security
Data is encrypted in transit using TLS. Access to production systems is restricted, and every table holding user data is protected by row-level security so one account cannot read another’s records. No system is perfectly secure, but we take this seriously.
10. Changes
If we make a material change we will update the date at the top of this page and, where the change is significant, tell you in the app.
11. Contact
Questions about this policy, or about your data: support@deepfai.com.