Privacy Policy

1. Who is responsible

Alarm24 is the controller for the processing described in this policy.

For any privacy question, or to exercise your rights, contact privacy@alarm24.app.

2. The app collects no personal data

The Alarm24 app contains no networking code. It does not communicate with any server operated by us or by anyone else, so there is no mechanism by which your data could reach us. We do not know that you installed the app, when you use it, or whether you got out of bed.

Everything the app creates stays in the app's private storage on your iPhone, protected by iOS file-level encryption:

• Alarms, schedules, sounds and mission settings, stored in a local database.
• A reliability history of alarm and mission events, recording only event type, alarm identifier and timestamp. Mission answers, photos and personal content are never written to it.
• The active alarm session, saved to disk so a crash or force quit cannot lose a mission in progress.

3. Camera, motion and other device permissions

Some missions need device sensors. Each is requested only when you configure a mission that needs it, and used only while that mission is on screen:

• Camera, used during QR/barcode and photo missions. Photo comparison happens entirely on your device using Apple's Vision framework. Images are held in memory for the comparison and are neither stored by the app nor transmitted anywhere.
• A QR or barcode you save as a reference is stored only as an HMAC-SHA256 hash in the iOS Keychain. The original code value is never saved, so it cannot be recovered from the app.
• Motion & fitness, used during shake, step and squat missions to count movement. Readings are processed in the moment and never stored or transmitted.
• Notifications, required for the alarm to reach you. Notification content is generated on your device.
• Alarm (AlarmKit), used on iOS 26 and later to register the alarm with the system.

4. What this website collects

This website is a promotional site. It has no accounts, no login, no forms and no newsletter.

If, and only if, you accept analytics cookies, we load Google Analytics 4 to understand which pages are read and which languages are used. Google Consent Mode v2 is configured to deny analytics storage by default, so nothing is loaded and no analytics cookie is set until you actively accept. IP addresses are truncated by Google before storage, and we have disabled Google Signals and advertising features.

Your cookie choice itself is stored locally in your browser so we don't ask again. That entry stays on your device and is never sent to us.

Separately, our hosting provider records standard server logs (IP address, timestamp, requested URL, user agent) for a short period as a technical and security necessity. These are not used to profile you.

5. Legal bases

Under GDPR Article 6, we rely on:

• Consent (Art. 6(1)(a)) for analytics cookies. You may withdraw it at any time on the Cookie Policy page, with no effect on the lawfulness of what happened before.
• Legitimate interests (Art. 6(1)(f)) for hosting and security logs, covering our interest in keeping the site available and secure, balanced against your rights and limited to short retention.

6. Who we share data with

We do not sell data, and we do not share it for advertising. We use two processors for the website only:

• Vercel Inc., for hosting and content delivery of alarm24.app.
• Google Ireland Limited, for Google Analytics 4, loaded only after you consent.
• Apple distributes the app through the App Store and provides us with aggregate, anonymised statistics we cannot link to any individual. Apple's own handling of your data is governed by Apple's privacy policy.

7. International transfers

Our processors may process data outside the European Economic Area, including in the United States. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework, together with additional technical safeguards such as IP truncation.

8. How long data is kept

• App data: for as long as you keep it. Deleting an alarm removes it; deleting the app removes everything, and we hold no copy.
• Analytics: Google Analytics data is retained for 14 months, then deleted automatically.
• Your cookie choice: 6 months, after which we ask again.
• Server logs: a short technical retention period at our hosting provider.

9. Your rights

Under the GDPR you have the right to access your data, to rectification, to erasure, to restriction of processing, to data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time.

In practice, because the app holds no data about you on our side, most of these rights have nothing for us to act on. There is no account to export or delete. For the website, contact us and we will respond within one month.

If you believe we have handled your data improperly, you may complain to the Dutch supervisory authority, Autoriteit Persoonsgegevens (https://autoriteitpersoonsgegevens.nl), or to the authority in your country of residence.

10. Children

Alarm24 is a general-audience utility and is not directed at children under 16. We do not knowingly collect data from anyone, including children.

11. Changes to this policy

If we change how data is handled, we will update this page and the date at the top. Material changes affecting the app will be described in the App Store release notes.

12. Contact

Privacy questions: privacy@alarm24.app. General enquiries: hello@alarm24.app.