Wako Privacy Policy
Last updated: August 25, 2026
Contact: contact@wakoalarm.app
This Privacy Policy describes how Wako (“we”, “us”, “our”) collects, uses, and shares information when you use the Wako mobile application and related services at wakoalarm.app (collectively, the “Services”).
By using the Services, you agree to this Privacy Policy.
Information we collect
Information you provide
- Account information: When you sign in with Apple or Google, we receive your email address (when provided by the sign-in provider) and authentication identifiers through Supabase Auth.
- Alarm and mission data: Alarm schedules, mission types, labels, streaks, wake-up history, earned badges, hunt-object preferences, and app settings. This data is stored on your device and, when you are signed in, synced to our cloud backup.
- Support communications: Messages you send to contact@wakoalarm.app.
Mission verification (camera missions)
Some missions require a photo to confirm completion (for example, Object Hunt or Sky Photo). When you submit a photo:
- The app sends a downscaled JPEG (maximum 512px on the longest edge) to our secure server (
verify-missionEdge Function hosted on Supabase). - The image is analyzed in real time by Google Gemini to return a yes/no match.
- We do not store the photo image as part of your profile or cloud backup.
- We store verification metadata in our database: match result, mission type, session identifier, timestamp, and Gemini token usage counts. This metadata is deleted when you delete your account.
Subscriptions (RevenueCat)
In-app purchases and subscriptions are processed by the Apple App Store or Google Play. We do not receive your full payment card details.
We use RevenueCat to manage subscriptions and unlock premium features. The RevenueCat SDK is configured when the app starts (including before you create an account). RevenueCat may receive:
- An anonymous app user ID, later linked to your Supabase user ID when you sign in
- Store purchase receipts, product identifiers, subscription status, trial/expiry dates, and entitlement state
- Device and store identifiers needed to restore purchases (for example App Store / Play billing identifiers)
We do not send your email address or alarm/mission data to RevenueCat. RevenueCat processes this information under its own privacy policy.
Deleting your Wako account does not cancel a store subscription. Cancel in Apple or Google subscription settings. Store and RevenueCat records of past purchases may be retained by those providers according to their policies.
Push notifications (OneSignal)
We use OneSignal to send optional push messages (for example product updates or trial reminders). The OneSignal SDK is initialized when the app starts. OneSignal may receive:
- Your device push token and a OneSignal player/subscription ID
- Device and OS information needed to deliver notifications
- Your Supabase user ID when you are signed in (
external_id) - Tags we set: app language (
app_locale) and whether you currently have premium (premium)
We do not send alarm schedules, mission photos, or email addresses to OneSignal. We do not use OneSignal for third-party advertising or cross-app tracking.
When you log out, we call OneSignal logout on the device. When you delete your account, we also request deletion of the OneSignal user linked to your Supabase ID. OneSignal processes this information under its own privacy policy.
Other features that may share limited data
- On-device pose missions: Push-up, squat, and jumping-jack missions use Google ML Kit Pose Detection on your device. Video and pose data from these missions do not leave your phone.
- Share: If you share a streak or other content, the system share sheet sends only what you choose to the app you pick. We do not receive that share unless you send it to us (for example by email).
- App Store reviews: If you tap Leave a Review, Apple’s in-app review or App Store listing opens. That interaction is between you and Apple.
Information collected automatically
- Device and app data: Device type, operating system version, and information needed to run alarms, sync data, and maintain the app.
- Crash and diagnostic logs: If enabled, limited diagnostic data to fix bugs (typically retained up to 90 days). We do not currently use a third-party crash analytics SDK (such as Firebase Crashlytics or Sentry).
We do not collect precise GPS location and we do not use advertising identifiers for ads. A location permission string may appear because a third-party library references location APIs; Wako does not use your location for alarms or missions.
How we use information
We use the information we collect to:
- Provide and maintain alarms, wake-up missions, streaks, and cloud backup
- Verify mission completion via Google Gemini
- Process subscriptions and restore purchases through Apple/Google and RevenueCat
- Send optional push notifications through OneSignal
- Respond to customer support
- Improve reliability, security, and performance
We do not use mission photos to build advertising profiles or train our own machine-learning models.
How we share information
We do not sell your personal information.
We share data only with service providers that help us operate the Services:
| Provider | Purpose | Privacy policy |
|---|---|---|
| Supabase | Authentication, cloud backup, Edge Functions (including mission verification and OneSignal account deletion) | supabase.com/privacy |
| Google Gemini API | Real-time mission photo verification | Gemini API terms |
| Google Sign-In | Optional account sign-in | Google Privacy Policy |
| Sign in with Apple | Optional account sign-in | Apple Privacy Policy |
| RevenueCat | Subscription status, entitlements, restore purchases | revenuecat.com/privacy |
| OneSignal | Push notification delivery and targeting tags | onesignal.com/privacy_policy |
| Apple App Store / Google Play | In-app purchases and billing | Apple / Google store policies |
| Google ML Kit | On-device pose detection (data stays on device) | Google Privacy Policy |
These providers process data under their own terms and our contractual requirements. We do not sell personal information and we do not share data with these providers for their independent advertising.
Data retention and deletion
| Data type | Retention |
|---|---|
| Account and cloud backup | While your account is active; deleted when you delete your account |
| Mission verification metadata | While your account is active; deleted with your account |
| Mission photo images | Not retained on our servers after verification |
| Local device data | Until you delete your account or remove the app |
| OneSignal profile | Device logout on sign-out; remote user deleted on account deletion (OneSignal may retain limited records per its policy) |
| RevenueCat customer / entitlements | Linked to your store account and Supabase ID while the subscription exists; retained by RevenueCat/Apple/Google per their policies after account deletion |
| Payment records | Retained by Apple or Google per their policies |
| Backups | Removed from active systems on deletion; backup copies may take up to 90 days to purge |
Account deletion
You may delete your account at any time:
- In the app: Settings → Profile → Delete Account
- By email: Send contact@wakoalarm.app from your account email with the subject “Delete my Wako account”
Upon confirmation, we delete your authentication account, cloud backup, verification metadata, and OneSignal profile. The app also wipes local alarms, streaks, and settings on your device.
Deleting your account does not cancel an App Store or Google Play subscription. Cancel separately in your device subscription settings.
See also: Delete Account (suggested URL: https://wakoalarm.app/delete-account)
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing.
Contact contact@wakoalarm.app. We respond within 30 days.
If you are in the European Economic Area or United Kingdom, you may also lodge a complaint with your local data protection authority.
Children
Wako is not directed at children under 13 (or the minimum age required in your region). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.
International transfers
We and our service providers may process data in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version at wakoalarm.app/privacy-policy with a new “Last updated” date. Material changes may be communicated in the app or by email.
Contact
Email: contact@wakoalarm.app
Website: wakoalarm.app
Suggested public URL: https://wakoalarm.app/privacy-policy