Privacy Policy

Last updated: 26 September 2026

What data the app handles, and where it stays

All of the following is created and stored only on your device (local database and app settings storage). It is never transmitted off the device:

• Alarms you create (times, labels, repeat days, chosen challenge, difficulty).
• Wake history & stats (when you woke, your wake score, streaks, snooze counts) shown on the in-app Analytics screen.
• App settings (theme, dark mode, and similar preferences).
• Sensor readings used during a challenge — GPS distance (Walk/Run), step counts (Steps/Stair), barometric altitude (Stair), camera frames (Photo/QR), microphone loudness (Voice). These are processed live, on-device, in memory to check whether you completed the challenge, and are not recorded or uploaded. Camera and microphone input is analysed on the fly and discarded.

Google ML Kit diagnostics (Photo and QR challenges)

Image and barcode recognition uses on-device ML Kit models bundled in the app — camera images are analysed on your phone and are never sent to Google or anyone else. When the Photo or QR challenge runs, the ML Kit library itself sends Google anonymous diagnostics: device information (model, OS version), app information (package name, app version), performance metrics and error codes, and a per-installation identifier that is not linked to you or your account. Google uses this to maintain and improve ML Kit (Google's ML Kit data disclosure). We do not receive it. If you never use the Photo or QR challenge, ML Kit sends nothing.

Permissions, and why each is used

• Notifications — to show the ringing alarm.
• Alarms & reminders (exact alarm) — to ring at the exact minute you set.
• Display over other apps / full-screen intent — so the alarm's challenge or stop screen opens by itself, on the lock screen and while you are using your phone.
• Ignore battery optimization (optional) — so the OS doesn't delay or kill the alarm; you grant this yourself.
• Location (Walk/Run challenges) — to measure how far you've moved, computed on-device. Your location is never stored or sent anywhere.
• Physical activity (Steps/Stair challenges) — to read the step counter.
• Camera (Photo/QR challenges) — analysed on-device; no photos are saved or sent.
• Microphone (Voice challenge) — only loudness is measured live; no audio is recorded or sent.
• Microphone (Own-Voice Wake Message, Pro) — if you record your own wake message, the clip is saved on your device only (in the app's private storage), played when the alarm rings, and deleted when you remove it. It is never uploaded, and it is excluded from cloud backup and device transfer.
• Motion sensors (Smart Wake, Back-to-Bed Guard) — motion is read live, on-device, to detect light sleep before the alarm and to check whether you've settled back to sleep after dismissing. Nothing is recorded or sent.
• Health Connect (optional) — if you turn it on, the app writes your sleep session to Health Connect on your phone. It does not read your health data and sends nothing off the device.
• NFC — while an alarm is ringing the app listens for a tag tap so it can count as a dismissal. It only registers that a tag was touched; tag contents are never read, stored or sent.
• Internet — used by Google Play Billing to process an optional NeuroAlarm Pro purchase (subscription or one-time), and by the ML Kit library for the anonymous diagnostics described above. The app makes no other network calls.
• Device admin (optional uninstall protection) — if you enable it, Android prevents the app being uninstalled while protection is on. It uses no admin powers beyond that (no wipe, no lock, no remote control). You can turn it off any time in Settings.

Wake Squad (not available in the current version)

Wake Squad, the paired-alarm feature offered in versions 1.0.x, is switched off in version 1.1 and later: the app no longer shows it, registers no push token, and makes no calls to our server. The description below is kept for users of older versions and for data still held from them.

Wake Squad was an opt-in Pro feature that paired your alarm with a friend's. Nothing was sent until you created or joined a squad yourself. When you did, the app sent to our server (hosted on Cloudflare):

• A random device identifier generated by the app — not your name, email, phone number or contacts. Squads were joined with a short invite code.
• A push-notification token (Firebase Cloud Messaging, delivery only — no Firebase Analytics or Crashlytics) so your squad could be nudged when someone overslept.
• Alarm events for the squad alarm: the committed wake time and whether you checked in on time, missed, or snoozed. No location, sensor data, photos or audio were ever included.

Any data from a squad created on an older version stays on our server until deleted, as described below.

How to request deletion of your data

Android Auto Backup

If Android's system "Back up to Google" is on for your device, a small set of app settings (such as your chosen theme) may be included in Android's standard Auto Backup to your own Google account (encrypted by Google, not accessible to us). Your alarms, wake/activity history and voice recordings are explicitly excluded from this backup. You control Auto Backup in your device's Google settings.

Third parties

NeuroAlarm contains no advertising SDK and no analytics SDK, and shares no data with third parties for advertising or analytics. Two Google services are involved: Google Play, solely to process an optional NeuroAlarm Pro purchase — payment is handled entirely by Google under its own terms, and we receive no personal or payment data from it — and Google ML Kit, which sends Google the anonymous diagnostics described above when you use the Photo or QR challenge. (Older versions with Wake Squad also used Cloudflare and Firebase Cloud Messaging, as described above.)

Your rights (GDPR / UK GDPR / CCPA)

We never collect or receive your data, so there is nothing on our side to access, correct, export, or delete (ML Kit diagnostics go to Google, not to us, and are not linked to you); Wake Squad data from older versions can be deleted on request as described above. All your data lives on your device and is fully under your control: you can delete any of it in the app, or remove all of it at once by clearing the app's data or uninstalling it.

Children

NeuroAlarm does not collect personal data from anyone, including children.

Changes

If this policy changes, the "Last updated" date above will change and the new version will ship with the app.

Contact

Questions about privacy: support@jkcodes.app