Privacy Policy

1. Data Collection & Storage

1.1 Local data: Alarm settings, nicknames, and preferences are stored in a local SQLite database on your device.

1.2 Cloud data: To enable purchase synchronization, the in-app virtual currency (V-Coin), and cross-device account recovery, the Application uses Firebase Authentication and Google Cloud Firestore to store the following information:

Anonymous account (default, created automatically on first launch):

• Firebase anonymous user ID
• V-Coin balance
• Records of purchased voice packs
• Referral code redemption record (if applicable)

Linked account (additionally stored when you choose to link Google or Apple via Settings → Link Account):

• Email address (when using Apple's "Hide My Email" feature, only the relay address provided by Apple is stored)
• Display name (obtained only on first Apple link; not provided on subsequent sign-ins)
• List of linked sign-in providers (e.g. google.com, apple.com)
• Account link timestamp

Linking an account is optional. Its purpose is to let you recover your V-Coins and voice packs by signing in with the same Google or Apple account after changing devices or reinstalling. You can sign out or delete your account in-app at any time.

1.3 Push token (FCM Token): To ensure alarms fire on time even when the Application is suspended by the operating system, the Application stores your device's Firebase Cloud Messaging push token in the Firestore pending_alarms collection. The token is used only for the Application's own alarm push notifications and is not shared with any other service or advertising platform.

1.4 Device information: The Application may collect basic device information (such as device model and operating system version) for debugging and compatibility purposes.

1.5 Vwake first-party product analytics: When you use the Application, we automatically collect product-usage data through Usage v2 and Firebase Analytics, including:

• Alarm and reminder scheduling and lifecycle events, notification clicks, UI displays, and dismiss, done, snooze, and outcome states
• Audio-source and fallback classifications, plus creator, voice-pack, and clip attribution IDs
• Platform, app version and build, operating-system version, time zone, occurrence identifiers, and timestamps
• Firebase App Instance ID, device identifiers (which may include the Android Advertising ID), coarse location derived from masked IP addresses, and product ID, name, and price from in-app purchase events

When you are signed in, these analytics events can be linked to your Firebase user ID. We use them to measure product effectiveness, improve reliability, and analyze attribution for creators and partner organizations. We do not use them for advertising or cross-service tracking.

2. Third-Party Services

The Application uses the following Google Firebase services:

• Firebase Authentication (anonymous sign-in, Sign in with Google, Sign in with Apple)
• Cloud Firestore (cloud data synchronization)
• Cloud Functions (server-side purchase verification, settlement, and account deletion)
• Firebase Cloud Messaging (alarm push notifications)
• Firebase Storage (voice pack audio file downloads)
• Firebase Analytics (Vwake first-party product analytics)

Firebase, including Firebase Analytics, provides these services as a data processor acting on Vwake's instructions. The services are also governed by the Google Privacy Policy (https://policies.google.com/privacy).

When you use "Connect Google", the data exchange between you and Google is additionally governed by Google's Privacy Policy. The Application requests only your email address and basic profile information (such as display name) from Google.

When you use "Connect Apple", the data exchange between you and Apple is additionally governed by Apple's Privacy Policy (https://www.apple.com/legal/privacy/). You may use Apple's "Hide My Email" feature; in that case the Application only receives the relay email address generated by Apple and cannot learn your real email address.

The Application does not use advertising SDKs or tracking or analytics tools that operate for a third party's own purposes. Firebase Analytics acts only on Vwake's instructions as a data-processing service for Vwake's first-party product analytics; the data is not used for advertising or cross-service tracking.

3. Purchase Information

In-app purchases are processed by the Apple App Store or Google Play Store. We do not access or store your payment information (such as credit card numbers). Purchase records are stored only as voice pack IDs in Firestore for cross-device synchronization.

4. Audio Files

Free voice pack audio files are bundled with the Application. Paid voice pack audio files are downloaded to your device via Firebase Storage after purchase. Once downloaded, the audio files are stored locally and are not uploaded again.

5. Data Security

We protect your cloud data using the security mechanisms provided by Firebase, including encryption in transit (TLS) and Firestore security rules. Local data is protected by your device's operating system security mechanisms.

6. Data Retention & Deletion

6.1 Usage v2 analytics evidence is retained for 13 months. Other cloud data is retained as needed to provide the service, perform contracts, and comply with legal requirements, or until you actively request its deletion.

6.2 You can delete your account at any time from inside the Application (Settings → Delete Account). Once confirmed, the account-deletion process performs the following:

• Deletes all data in your users/{uid} document (V-Coin balance, purchased voice pack records, linked sign-in records, etc.)
• Deletes all of your pending alarm records in the pending_alarms collection
• Deletes Usage v2 raw events, conflicts, occurrences, journeys, projections, and the local outbox that bear your Firebase user ID
• Deletes your user record from Firebase Authentication

Financial records that must be retained by law remain subject to a separate financial retention policy. Retained financial records cannot be used to reconstruct your Usage v2 analytics journey.

Once complete, you will continue using the Application as a fresh anonymous user; data from the deleted account cannot be recovered.

6.3 If you cannot access the Application, you can also request deletion via hello@vwake.app. We will complete the deletion within 30 days.

6.4 Uninstalling the Application will delete all local data, but cloud data must be deleted via one of the methods above.

7. Children's Privacy

The Application is not designed for children under the age of 13, and we do not knowingly collect personal information from children. If you discover that a child is using the Application without parental consent, please contact us and we will promptly delete the related data.

8. Changes to This Policy

If significant changes are made to this Privacy Policy, we will notify you through an Application update. Continued use of the Application after such changes constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions, please contact us at hello@vwake.app.