Privacy Policy

1. Introduction

This Privacy Policy explains how the Awaken mobile application (the "App") handles information. It applies to your use of the App on iOS and Android.

Awaken is designed to be privacy-preserving by architecture, not merely by promise. The App has no user accounts and no backend database. We do not operate servers that receive or store your personal information. Almost everything the App does happens on your device.

The one exception is AI verification of photo and spoken missions, which necessarily involves transmitting the capture for analysis. Section 5 explains exactly what happens in that case.

Please also read our Terms & Conditions.

2. Who We Are

For the purposes of the EU and UK General Data Protection Regulation ("GDPR"), NexAtlas Labs is the data controller in respect of the limited processing described in this policy.

3. Information We Collect

3.1 Information stored on your device only

The following is created by you and stored locally on your device. It is not transmitted to us and we cannot access it:

• Alarm settings — times, labels, repeat days, the mission assigned to each alarm, and the selected alarm sound.
• App preferences — theme, language, and onboarding answers (such as your typical wake time and sleep habits).
• Progress data — streaks, completed missions, and related statistics.
• Imported audio — any audio file you choose as a custom alarm sound is copied into the App's private storage on your device.

This information is removed when you uninstall the App.

3.2 Information processed transiently for AI verification

When you complete a photo or spoken mission, the photograph or audio recording is transmitted for AI analysis. See Section 5 for full detail.

3.3 Technical diagnostics

Our AI provider (Google) may process technical information inherent to handling a network request — such as IP address, request timestamp, and device or SDK version — for security, abuse prevention, and service operation. This is processed by Google under its own privacy terms and is not provided to us in an identifiable form.

4. What We Do Not Collect

To be explicit, the App does not collect, transmit to us, or store on our systems:

• your name, email address, phone number, or postal address;
• account credentials of any kind (there are no accounts);
• contacts, calendar entries, messages, or call logs;
• precise or approximate location data;
• advertising identifiers, or any identifier used for cross-app tracking;
• health or fitness data from Apple Health, Google Fit, or any wearable device;
• browsing history or activity in other applications;
• payment card numbers or financial account details.

The App contains no third-party advertising SDKs and no analytics SDKs that profile you.

5. Mission Photos & Voice Recordings

This is the most privacy-sensitive part of the App, so we describe it precisely.

5.1 What happens, step by step

1. You complete a photo mission (for example, photographing your made bed) or a spoken mission (for example, reciting a verse aloud). Capture only ever begins from a deliberate action by you.
2. The photograph or audio recording is transmitted over an encrypted connection to Google's Gemini AI service, accessed via Firebase AI.
3. Google's model analyses the capture solely to determine whether it satisfies the mission criteria, and returns a pass/fail result with a confidence score.
4. Your device receives the result. If the mission passed, the alarm stops.
5. The capture is then discarded. Audio recordings are deleted from your device's temporary storage immediately after verification. Photographs are held only in volatile memory for the duration of the attempt and are never written to persistent storage by the App.

5.2 Google's handling of the capture

Processing by Google is governed by the Google Cloud / Firebase terms and the applicable Google Privacy Policy. Google acts as our processor for this operation. Under the Gemini API terms applicable to paid Google Cloud and Firebase AI usage, prompt and response data is not used to train Google's general-purpose models.

We encourage you to review Google's Privacy Policy and Firebase's privacy documentation.

5.3 Avoiding AI processing entirely

If you prefer that no capture ever leaves your device, assign your alarms one of the fully on-device missions:

• Shake Phone — verified by the accelerometer, on device.
• Math Puzzle — verified by arithmetic, on device.

These require no internet connection and transmit nothing.

5.4 Third parties in your captures

Please avoid capturing other people, sensitive documents, or private surroundings when completing a mission. You are responsible for the content you capture, as set out in our Terms.

6. How We Use Information

We do not use any information for advertising, profiling, automated decision-making with legal effect, or resale.

7. Legal Bases for Processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b)) — for processing a mission capture to verify completion, which is the core service you have asked the App to perform.
• Consent (Art. 6(1)(a)) — for access to your camera and microphone, which you grant through your device's permission prompts and may withdraw at any time in device settings.
• Legitimate interests (Art. 6(1)(f)) — for the security and abuse-prevention measures applied by our AI provider when handling a request.

Where a photograph or voice recording could be considered to contain biometric or otherwise special category data, we rely on your explicit consent (Art. 9(2)(a)), given by your deliberate choice to select and complete such a mission. You may withdraw that consent at any time by switching to an on-device mission.

We note that the App does not perform biometric identification: the AI is asked only whether an image or recording satisfies a described criterion, never to identify a person.

8. Sharing & Disclosure

We do not sell, rent, or trade your information. We share it only as follows:

We may disclose information where required by law, court order, or valid governmental request, or to establish or defend legal claims. Because we do not hold your data, our practical ability to comply with such a request is extremely limited — there is generally nothing for us to produce.

If NexAtlas Labs is involved in a merger, acquisition, or asset sale, we will provide notice before any information becomes subject to a different privacy policy.

9. Data Retention

Uninstalling the App removes all locally stored data. This cannot be undone, and because we hold no backup, data removed this way is not recoverable.

10. Device Permissions

Each permission is requested only for the stated purpose, and may be revoked at any time in your device settings.

The camera and microphone are activated only for the duration of an active mission attempt. The App does not record in the background.

11. Subscriptions & Payments

Awaken offers a free trial followed by an auto-renewing paid subscription. All payments are processed by Apple or Google — never by us.

We do not receive, see, or store your payment card number, billing address, or financial account details. The app stores provide us only with aggregate, non-identifying information about purchases (for example, the number of active subscriptions).

Payment data is handled under Apple's Privacy Policy or Google's Privacy Policy respectively.

12. Security

We apply measures appropriate to the limited data involved:

• Mission captures are transmitted over encrypted TLS connections only.
• Locally stored data resides in app-private storage, protected by your device's operating system sandbox and, where enabled, its device encryption.
• Audio recordings are deleted immediately after verification rather than accumulating on the device.
• Storing nothing on our side eliminates the risk of a server-side breach exposing your data.

No method of transmission or storage is completely secure. We encourage you to protect your device with a passcode or biometric lock, since local data is only as secure as the device holding it.

13. International Data Transfers

Mission captures sent for AI verification may be processed on Google infrastructure located outside your country of residence, including in the United States.

Where such a transfer involves personal data of individuals in the EEA or UK, it is made under appropriate safeguards, including the European Commission's Standard Contractual Clauses as incorporated into Google's data processing terms.

Because captures are transient and are not retained after verification, the transfer is momentary and no cross-border data store is created.

14. Your Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent.

If you wish to make a formal request or have a question about your rights, contact support@nexatlaslabs.com. We will respond within 30 days.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

15. Children's Privacy

Awaken is not directed at children under 13, and we do not knowingly collect personal information from them. The App has no accounts, no social features, no messaging, and no advertising.

If you are a parent or guardian and believe a child under 13 has used the App in a way that concerns you, please contact us. Note that because all data is stored locally, uninstalling the App removes it immediately.

16. Regional Disclosures

16.1 California (CCPA / CPRA)

We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding twelve months. We do not use personal information for cross-context behavioural advertising.

California residents have rights to know, delete, correct, and opt out. As explained in Section 14, we hold no personal information about you, so the practical exercise of these rights takes place on your device.

16.2 European Economic Area & United Kingdom

Legal bases are set out in Section 7, international transfers in Section 13, and your rights in Section 14. We have not appointed an EU or UK representative, as our processing does not meet the threshold requiring one under Art. 27 GDPR.

16.3 Apple App Store & Google Play disclosures

The privacy labels we publish on the App Store and the Data Safety section we publish on Google Play are consistent with this policy. In summary: data is not collected for tracking, is not linked to your identity, and is not sold. Camera and microphone data is used solely for app functionality and is not retained.

17. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page.

If we make material changes — particularly any change that would introduce collection or retention of data we do not currently collect — we will provide prominent notice within the App before the change takes effect, and obtain your consent where required by law.

We encourage you to review this page periodically.

18. Contact

For any question, concern, or request regarding privacy: