Privacy Policy

WakeTogether · Effective 22 September 2026 · Contact: thientc9@gmail.com

WakeTogether is operated under the name WakeTogether. This policy explains how the WakeTogether mobile app and service process information.

Information we process

• Account and profile: email address, password hash, display name, optional phone number and avatar, locale and timezone.
• Connections and Social Alarms: invite and relationship records, alarm labels, schedules, target participants, delivery state and alarm responses.
• Device and security: installation identifier, platform/app/OS version, push token, native alarm capability, session and security records.
• Purchases: product, platform, verification/acknowledgement state and hashed transaction references. WakeTogether does not receive full payment-card details.
• Advertising: the Google Mobile Ads SDK may process advertising identifiers, diagnostics and ad interactions according to consent and regional requirements.

Device-only information

Personal Alarms, imported custom alarm sounds and per-alarm sound choices remain in the app's private device storage. They are not uploaded to WakeTogether servers. Removing the app or clearing its data removes this device-only information.

Purposes and sharing

We use information to authenticate users, connect invited users, synchronize Social Alarms, operate native alarm delivery, prevent abuse, support purchases, provide support and comply with law. We do not sell personal data. Data may be processed by hosting/database providers, email delivery, Expo push services, Google Play/AdMob and Apple services only as needed for these purposes.

Ads and consent

Free access may display Google banner ads on approved content screens. Ads never appear on authentication, permission recovery, purchase or ringing-alarm screens. Where required, the app asks for consent before initializing ads and provides a privacy-options control. Premium access suppresses ad requests.

Security

Production traffic uses HTTPS. Passwords, OTPs, refresh tokens and Store proofs are stored as hashes or protected credentials where applicable. Administrative actions use role checks, CSRF/origin protection and audit records.

Retention and deletion

• Account and Social Alarm data remain while the account is active.
• After a valid deletion request, active account data is deleted promptly; backups may take up to 30 days to expire.
• Operational security logs are normally retained for up to 90 days.
• Pseudonymized Store transaction evidence may be retained for up to seven years for fraud prevention, accounting, dispute handling and legal obligations.

Delete in Settings → Account & security → Delete account, or use the external deletion page.

Your choices

You may update profile information, change ad privacy choices where available, remove custom sounds, disconnect users, or request account deletion. Contact thientc9@gmail.com for privacy questions.

Changes

Material changes will update the effective date and, when appropriate, be communicated in the app or Store listing.