Wakey
Privacy Policy
This policy explains what Wakey (“we”, “us”) collects, why, and what control you have. It covers the Wakey mobile app for iOS and Android and this website.
1. The short version
- You can use Wakey without an account. Alarms work entirely on your device.
- When our server allows it, the app creates an anonymous online profile for you (no login needed). While it has one, it uploads your alarms and wake-up history to that profile, and we calculate your streak from them. Nothing is restored from it: a reinstall or a new phone starts a new profile.
- Without an online profile, nothing about you is stored on our server. Your alarms and history stay on your phone; the only data that leaves it goes to the subscription, diagnostics, analytics and advertising services listed in section 4.
- Mission photos are never stored. With your permission, they are sent for verification, checked, and discarded. Only the result of the check is kept.
- Your commitment signature never leaves your device.
- The free tier may show non-personalized banner ads. Premium users do not see ads.
- We do not sell your personal information or use it to target ads based on activity across other apps or websites.
2. What we collect
Profile and account data
An online profile is identified by a random ID. The app does not currently offer a way to add a login (email, Apple or Google) to it. If a profile does have one, we also store that email address, or the one the Apple or Google account gave us; with Apple’s “Hide My Email” that is only a relay address. Your onboarding answers stay on your device.
App data you create
| Data | Why we hold it |
|---|---|
| Alarms — time, repeat days, label, mission type, sound and volume settings | To keep a backup of your alarms with your profile. There is currently no way to restore them onto a reinstall or another phone. |
| Wake events — target time, time zone, when you logged in, outcome, mission type, number of verification attempts | To calculate streaks and show your progress |
| Streaks and achievements | To show your current and best streak and unlocked badges |
| Subscription status (entitlement, status, renewal date) | To unlock Premium features |
| Verification logs — mission type, pass/fail, a confidence score, a short reason, and how long the check took | To debug missions and improve accuracy. The photo itself is not part of this record. |
Camera, microphone and motion
Some missions use your device sensors:
- Camera — photo missions (photograph an item, the sky, your made bed, or grass) and pose-based missions (Push-Ups, Squats).
- Microphone and speech recognition — spoken affirmation missions.
- Motion and pose detection — runs entirely on your device. Video frames for pose missions are processed locally and are never uploaded.
For photo missions, and only after you allow it in the app, the captured image is transmitted to our verification service, which passes it to Anthropic’s API (Claude) to judge whether the mission was completed; if Anthropic is unavailable, the same image is sent to OpenAI’s API as a backup. This needs an online profile; without one, photo missions are not offered. The image is not written to our database or to any storage bucket — it exists only for the duration of that request. Only the verdict (pass/fail, confidence, a short reason and how long the check took) is logged against your profile. If you would rather no image ever left your device, choose one of the mission types that is checked entirely on your device — Math, Affirmation, Push-Ups or Squats — or turn on “On-device missions only” in Settings.
Your signature
The commitment signature drawn during onboarding stays on your device. We store only the timestamp at which it was captured, never the image of the signature.
Diagnostics and product analytics
We may collect crash reports and technical diagnostics, and product analytics events describing how the app is used — for example that onboarding was completed, an alarm rang, a mission was completed or failed, a streak changed, or the paywall was viewed. These events describe actions, not content: they never include photos, audio, or the text of your affirmations. They are tied to a pseudonymous identifier and are used to fix bugs and improve the product.
Advertising on the free tier
Free-tier users may see a banner supplied by Google AdMob. We request non-personalized ads only. Google may process your IP address (including to estimate general location), device or app identifiers, ads shown and your interactions with them, and SDK diagnostics and performance data to deliver, measure and protect the advertising service. The ads SDK is not initialized until Google’s consent system says an ad request is permitted. Premium users do not receive ad requests.
What we never collect
We do not collect your precise location, your contacts, your calendar, your messages, your health records, or a list of the apps installed on your device. We do not track you across other companies’ apps and websites or use your app data to personalize advertising.
3. Why we are allowed to process it (UK and EU users)
| Purpose | Legal basis |
|---|---|
| Providing alarms, missions and streaks, and backing up alarms and wake-up history to your profile | Performance of a contract |
| Verifying photo missions | Performance of a contract |
| Managing subscriptions and preventing abuse | Performance of a contract; legitimate interests |
| Crash diagnostics and product analytics | Legitimate interests, and consent where required by local law |
| Non-personalized advertising on the free tier | Consent where required; otherwise legitimate interests |
| Responding to your support emails | Legitimate interests |
4. Who we share it with
We use a small number of processors, and only to run the service:
| Provider | What it handles |
|---|---|
| Supabase (self-hosted on our own server) | Account authentication and your app data |
| Anthropic (Claude) | Photo-mission verification (vision model). Images are sent for the check and are not retained by us; Anthropic does not use API data to train its models and deletes it in line with its commercial terms. |
| OpenAI | Backup photo-mission verification (vision model), used only if Anthropic is unavailable. Images are sent for the check and are not retained by us, and are not used to train models. |
| RevenueCat | Subscription entitlement management |
| Apple and Google | Payment processing and app distribution. We never see your payment card details. |
| Sentry | Crash and error diagnostics |
| Mixpanel | Product analytics events |
| Google AdMob | Non-personalized banner advertising for free-tier users, including delivery, measurement, diagnostics and fraud prevention |
We may also disclose information where we are legally required to, or to protect our rights and the safety of users. We do not sell personal information, and we do not “share” it for cross-context behavioural advertising as those terms are used under California law.
5. International transfers
Our servers are located in Europe. Some processors listed above operate in the United States and elsewhere; where personal data is transferred outside the UK or EEA we rely on the appropriate safeguards those providers offer, such as Standard Contractual Clauses.
6. How long we keep it
- Profile, account and app data: for as long as your profile exists.
- Mission photos: not retained — discarded once the verdict is returned.
- Verification logs, wake events and streaks: for as long as your profile exists, because they are what your progress is made of.
- Diagnostics: typically up to 90 days.
- Support email: up to 24 months.
When you delete your account (your profile), the records above are deleted with it.
7. Your rights and choices
You can access, correct, export or delete your data, object to or restrict processing, and withdraw consent where we rely on it. The fastest route is in-app: Settings → Delete account, shown whenever the app has an online profile, which erases the profile and everything linked to it. You can also request deletion through this website, or email support@deepfai.com for any other request.
You can revoke camera, microphone or notification permissions at any time in your device settings; missions that need them will stop being offered. If you are in the UK or EEA you have the right to complain to your local supervisory authority.
8. Children
Wakey is not directed at children under 13, or under 16 where local law sets that age, and we do not knowingly collect their personal information. If you believe a child has given us personal data, email support@deepfai.com and we will delete it.
9. Security
Data is encrypted in transit using TLS. Access to production systems is restricted, and every table holding user data is protected by row-level security so one account cannot read another’s records. No system is perfectly secure, but we take this seriously.
10. Changes
If we make a material change we will update the date at the top of this page and, where the change is significant, tell you in the app.
11. Contact
Questions about this policy, or about your data: support@deepfai.com.