Privacy Policy

1. Data Collection & Storage

1.1 Local data: Alarm settings, nicknames, and preferences are stored in a local SQLite database on your device.

1.2 Cloud data: To enable purchase synchronization, the in-app virtual currency (V-Coin), and cross-device account recovery, the Application uses Firebase Authentication and Google Cloud Firestore to store the following information:

Anonymous account (default, created automatically on first launch):

• Firebase anonymous user ID
• V-Coin balance
• Records of purchased voice packs
• Referral code redemption record (if applicable)

Linked account (additionally stored when you choose to link Google or Apple via Settings → Link Account):

• Email address (when using Apple's "Hide My Email" feature, only the relay address provided by Apple is stored)
• Display name (obtained only on first Apple link; not provided on subsequent sign-ins)
• List of linked sign-in providers (e.g. google.com, apple.com)
• Account link timestamp

Linking an account is optional. Its purpose is to let you recover your V-Coins and voice packs by signing in with the same Google or Apple account after changing devices or reinstalling. You can sign out or delete your account in-app at any time.

1.3 Push token (FCM Token): To ensure alarms fire on time even when the Application is suspended by the operating system, the Application stores your device's Firebase Cloud Messaging push token in the Firestore pending_alarms collection. The token is used only for the Application's own alarm push notifications and is not shared with any other service or advertising platform.

1.4 Device information: The Application may collect basic device information (such as device model and operating system version) for debugging and compatibility purposes.

2. Third-Party Services

The Application uses the following Google Firebase services:

• Firebase Authentication (anonymous sign-in, Sign in with Google, Sign in with Apple)
• Cloud Firestore (cloud data synchronization)
• Cloud Functions (server-side purchase verification, settlement, and account deletion)
• Firebase Cloud Messaging (alarm push notifications)
• Firebase Storage (voice pack audio file downloads)

The above Firebase services are governed by the Google Privacy Policy (https://policies.google.com/privacy).

When you use "Connect Google", the data exchange between you and Google is additionally governed by Google's Privacy Policy. The Application requests only your email address and basic profile information (such as display name) from Google.

When you use "Connect Apple", the data exchange between you and Apple is additionally governed by Apple's Privacy Policy (https://www.apple.com/legal/privacy/). You may use Apple's "Hide My Email" feature; in that case the Application only receives the relay email address generated by Apple and cannot learn your real email address.

The Application does not use any advertising SDKs or third-party tracking/analytics tools.

3. Purchase Information

In-app purchases are processed by the Apple App Store or Google Play Store. We do not access or store your payment information (such as credit card numbers). Purchase records are stored only as voice pack IDs in Firestore for cross-device synchronization.

4. Audio Files

Free voice pack audio files are bundled with the Application. Paid voice pack audio files are downloaded to your device via Firebase Storage after purchase. Once downloaded, the audio files are stored locally and are not uploaded again.

5. Data Security

We protect your cloud data using the security mechanisms provided by Firebase, including encryption in transit (TLS) and Firestore security rules. Local data is protected by your device's operating system security mechanisms.

6. Data Retention & Deletion

6.1 Cloud data is retained until you actively request its deletion.

6.2 You can delete your account at any time from inside the Application (Settings → Delete Account). Once confirmed, the server immediately performs the following:

• Deletes all data in your users/{uid} document (V-Coin balance, purchased voice pack records, linked sign-in records, etc.)
• Deletes all of your pending alarm records in the pending_alarms collection
• Deletes your user record from Firebase Authentication

Once complete, you will continue using the Application as a fresh anonymous user; data from the deleted account cannot be recovered.

6.3 If you cannot access the Application, you can also request deletion via contact@hocatech.com. We will complete the deletion within 30 days.

6.4 Uninstalling the Application will delete all local data, but cloud data must be deleted via one of the methods above.

7. Children's Privacy

The Application is not designed for children under the age of 13, and we do not knowingly collect personal information from children. If you discover that a child is using the Application without parental consent, please contact us and we will promptly delete the related data.

8. Changes to This Policy

If significant changes are made to this Privacy Policy, we will notify you through an Application update. Continued use of the Application after such changes constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions, please contact us at contact@hocatech.com.