So Alarmed

Privacy Policy

Last updated: July 2, 2026

This Privacy Policy explains how So Alarmed ("the App", "we", "us", or "our") collects, uses, stores, and protects your information. So Alarmed is an alarm clock app for iPhone. It wakes you up and asks you to finish a short wake-up mission before the alarm will stop.

The App is built and run by Nandha Kumar Ilangovan ("the Developer"), who is the data controller responsible for your information under this Policy.

We designed So Alarmed to be privacy-first. The App shows no ads and contains no ad networks that display ads. We do not collect crash reports, and we do not sell your personal information. Most of your data never leaves your device. One narrow exception exists so we can tell whether our own advertising works: the App reports a few basic app events, such as installs, trial starts, and purchases, to Meta for ad measurement, as described in Sections 2.8 and 4. These events do not include your name, email, alarms, or any advertising identifier. By using the App, you agree to this Privacy Policy.

2. Information we collect

We only collect what the App needs to work. Everything is listed below.

2.1 Information kept only on your device

When you use the App without signing in, the following stays on your device. It is not sent to us or anyone else.

• Your alarms. For each alarm we store the time, an optional label you type, the chosen alarm sound, the chosen wake-up mission, the difficulty, the repeat days, and whether the alarm is on or off.
• Your wake-up streak, meaning the calendar dates on which you finished a mission and dismissed an alarm.
• App preferences and state, such as whether you have finished onboarding and your subscription status (see Section 2.4).

If you never sign in, none of this leaves your device.

2.2 Account information (only if you choose to sign in)

Signing in is optional and exists only to back up and sync your data. If you sign in with Sign in with Apple or Sign in with Google, we receive and store the following through Google Firebase Authentication:

• A unique account identifier (user ID) for your account.
• Your name, if your sign-in provider shares it.
• Your email address. With Sign in with Apple you can choose Apple's private email relay, in which case we only ever receive a relay address and never your real email.
• Which sign-in provider you used, Apple or Google.

2.3 Backed-up data (only if you choose to sign in)

While you are signed in, the App backs up the following to your private cloud record so it can be restored on your other devices:

• Your alarms, with the same fields described in Section 2.1.
• Your wake-up streak dates.
• Your onboarding status.

This backup only happens while you are signed in. If you sign out or never sign in, this data is not uploaded.

2.4 Subscription information

So Alarmed offers an optional paid subscription that is handled entirely by Apple's App Store and StoreKit. Apple tells us only your subscription status, for example whether you have an active subscription or trial, so the App can unlock paid features. We do not receive or store your name, card number, billing address, or any payment details. Apple handles all of that. Your subscription status is cached on your device only and is never sent to our cloud.

2.5 Motion sensor data (used live, never stored)

Two optional wake-up missions use your iPhone's motion sensors. The Shake mission reads the accelerometer to detect shaking. The Walk mission reads the pedometer, or step counter, to count steps.

This motion data is processed in real time on your device, used only to confirm you finished the mission, and then immediately discarded. It is never stored, never logged, and never sent anywhere. iOS asks your permission before these sensors are used, and you can turn that permission off at any time in the iOS Settings app. If motion access is not available, these missions fall back to a tap-based version.

2.6 Notifications

So Alarmed schedules alarms using Apple's AlarmKit on iOS 26 and later, and local notifications on earlier versions. These are created and delivered on your device by iOS. We do not run a push-notification server, and we do not send your data anywhere to deliver an alarm. If you start a free trial, the App may schedule a local reminder before the trial ends. That reminder contains no personal data.

2.7 Optional uninstall protection (Screen Time)

So Alarmed has an optional setting, off by default, called "Block uninstall while ringing". When you turn it on, the App uses Apple's Screen Time (Family Controls) to stop the App from being deleted from your device while an alarm is actively ringing, so the only way to silence the alarm is to finish the wake-up mission. iOS asks for your permission the first time you turn this on.

This setting only sets a temporary restriction while an alarm rings, and the restriction is lifted as soon as the alarm stops. It does not read your Screen Time data, your app-usage history, or any other information, and it sends nothing anywhere. You can turn it off at any time in the App's Settings, or remove Screen Time access for So Alarmed in the iOS Settings app.

2.8 Ad measurement data (Meta)

We advertise So Alarmed on Meta platforms such as Facebook and Instagram. To know whether those ads work, the App includes the Meta SDK, which reports basic app events to Meta Platforms: that the App was installed and opened, that a free trial was started, and that a purchase was made, including its price. Like any internet connection, these reports also carry standard device information such as your device model, iOS version, and IP address.

We have switched off the SDK's collection of Apple's advertising identifier (IDFA), and the App never asks for Apple's tracking permission. These events are not linked to your account, name, email, alarms, or streak. Working out which ad led to an install happens through Apple's SKAdNetwork system, which reports in aggregate and is designed by Apple so that individual users cannot be identified. You can read how Meta handles this data in the Meta Privacy Policy.

2.9 What we do not collect

To be clear, So Alarmed does not collect any of the following:

• Precise or approximate location
• Contacts, calendar, photos, camera, or microphone data
• Health or fitness records
• Advertising identifiers (IDFA) or any tracking identifiers
• Analytics profiles about how you use the App (the only usage events we report are the ad-measurement events in Section 2.8)
• Crash reports or diagnostic data
• Your Screen Time data, app-usage history, or web activity (the optional uninstall protection only sets a restriction; it never reads your Screen Time)
• Anything used to track you across other apps or websites

3. How we use your information

We use the limited information above only to:

• Run the App's core features, which means scheduling and ringing your alarms and running wake-up missions.
• Keep your wake-up streak on your device.
• Back up and sync your alarms and streak across your devices, if you sign in.
• Sign you in and keep your account secure, if you sign in.
• Unlock paid features based on your Apple subscription status.
• Measure whether our own ads bring people to the App, using only the events described in Section 2.8.
• Reply to you when you contact us for support or to use a privacy right.

Beyond that ad measurement, we do not use your information for advertising. We do not build profiles about you, we do not make automated decisions about you, and we do not sell your information.

4. How your information is shared

We do not sell your personal information. We share information only with the service providers listed below, which we need to run the App and to measure our own advertising:

Provider	Purpose	What they receive
Google Firebase (Authentication and Cloud Firestore), run by Google LLC	Optional account sign-in and cloud backup and sync	Your account info (Section 2.2) and backed-up data (Section 2.3), only if you sign in
Google Sign-In, run by Google LLC	Signs you in if you choose Google	Authenticates you and returns a sign-in token, only if you choose Google
Apple (Sign in with Apple, App Store and StoreKit, AlarmKit)	Optional Apple sign-in, subscription processing, and alarm scheduling	Authentication and your subscription transaction, handled under Apple's privacy policy
Meta SDK, run by Meta Platforms, Inc.	Measures whether our ads on Facebook and Instagram lead to installs and subscriptions (see Section 2.8)	Basic app events (install, app open, trial start, purchase and its price) and standard device info (device model, iOS version, IP address). Never your name, email, alarms, streak, or advertising identifier.

These providers process data for us or as independent controllers under their own privacy policies:

• Google Privacy Policy: https://policies.google.com/privacy
• Firebase Privacy and Security: https://firebase.google.com/support/privacy
• Apple Privacy Policy: https://www.apple.com/legal/privacy/
• Meta Privacy Policy: https://www.facebook.com/privacy/policy/

To protect the service from abuse, the App uses Firebase App Check together with Apple's App Attest. When the App talks to Firebase, it includes a token that shows the request comes from a genuine, unmodified copy of So Alarmed. This token verifies the App itself, not you. It contains no personal information and is not used to track you.

We may also share information if the law requires it, for example to follow a valid legal process, or to protect our rights, safety, or the safety of others. If the App is ever part of a merger, acquisition, or sale of assets, we will require the new owner to honor this Privacy Policy.

5. Data storage, security, and retention

Where your data lives. Local data such as your alarms, streak, and preferences is stored on your device. If you sign in, your backed-up data and account information are stored in Google Firebase, specifically Cloud Firestore and Firebase Authentication.

Security. Data sent to and from Firebase is encrypted in transit using HTTPS and TLS, and encrypted at rest by Google. Your cloud record is private to your account. Even so, no method of sending data over the internet or storing it electronically is completely secure, so while we use reasonable measures to protect your information, we cannot guarantee absolute security.

How long we keep it.

• On-device data stays on your device until you delete it in the App or delete the App.
• Cloud account and backup data is kept for as long as your account exists. When you delete your account (see Section 6), this data is deleted.

6. Your choices and rights

You stay in control of your data:

• Use the App without an account. All core alarm features work without ever signing in, and your data stays on your device.
• Sign out. Signing out stops any further cloud backup.
• Delete your account and your data. In the App, open Settings and tap Delete account. This permanently deletes your account and removes your alarms and wake-up streak from the cloud, in both Firebase Authentication and Cloud Firestore, and also removes them from this device. This cannot be undone.
• Manage permissions. You can grant or remove Motion & Fitness, Notifications, and Screen Time permissions at any time in the iOS Settings app. You can also turn the optional uninstall protection on or off in the App's Settings.
• Manage your subscription. You can manage or cancel your subscription in the App Store, under Settings, your name, then Subscriptions.

For any other request about your data, email us at inandha97@gmail.com (see Section 12).

7. Your rights under the GDPR (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights over your personal data:

• The right to access the personal data we hold about you.
• The right to correct inaccurate data.
• The right to erasure, also called the right to be forgotten.
• The right to restrict or object to processing.
• The right to data portability.
• The right to withdraw consent at any time, where we rely on consent.
• The right to complain to your local supervisory authority.

Legal bases. We process your information on these legal bases. We rely on performance of a contract to provide the App and the features you ask for, including backup when you sign in. We rely on your consent for things you switch on yourself, such as motion-based missions or signing in, and you can withdraw that consent at any time. We rely on our legitimate interests in running, securing, and supporting the App, balanced against your rights.

International transfers. Our cloud provider, Google Firebase, may process and store data on servers in the United States and other countries. Where data leaves the EEA or UK, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

To use any of these rights, email us at inandha97@gmail.com.

8. Your rights under the CCPA and CPRA (California)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose, as described throughout this Policy.
• Access a copy of the personal information we hold about you.
• Delete your personal information (see Section 6).
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information.
• Not be treated differently for using your privacy rights.

We do not sell your personal information, and we have not sold it in the past 12 months. As described in Section 2.8, the App sends basic ad-measurement events to Meta; these events are not linked to identifiers such as your name, email, or advertising ID. To the extent this counts as "sharing" under the CPRA, you can contact us at the email below and we will help you exercise your opt-out rights. We do not knowingly sell or share the personal information of anyone under 16.

The categories of personal information we may collect are identifiers, meaning account ID, email, and name, commerce information, meaning subscription status, and internet or network activity information, meaning the basic app events used for ad measurement, collected only as described above. To use your California rights, email us at inandha97@gmail.com. You may use an authorized agent to make a request for you.

9. Children's privacy

So Alarmed is not directed to children under 13, or the equivalent minimum age in your country, such as 16 in parts of the EEA. We do not knowingly collect personal information from children. If you believe a child has given us personal information, email us at inandha97@gmail.com and we will delete it.

10. Apple App Store privacy details

For clarity, here is how the policy maps to Apple's App Privacy labels:

• Data linked to you, only if you sign in: Contact Info (name and email) and Identifiers (account ID), used for App Functionality, meaning account backup and sync. Not used for tracking.
• Data not linked to you: Purchases (subscription status and purchase events) and Product Interaction (basic app events such as installs, app opens, and trial starts), used for App Functionality, Analytics, and measuring our own advertising. Not used for tracking.
• Data used to track you: none. We never collect the advertising identifier and never request Apple's tracking permission.
• Data not collected: location, contacts, browsing or search history, health, sensitive information, diagnostics, and the advertising identifier. Motion data is used live and never collected or stored.
• The optional uninstall protection (Screen Time) and our anti-abuse checks (App Check with App Attest) do not collect any data linked to you and are not used for tracking.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page, and for important changes we will give notice inside the App where it makes sense. If you keep using the App after an update, that means you accept the updated Policy.

12. Contact us

If you have any questions, concerns, or requests about this Privacy Policy or your personal data, please contact:

Nandha Kumar Ilangovan
Developer of So Alarmed
Email: inandha97@gmail.com

We will reply to genuine requests within a reasonable time and within any period the law requires.