This Privacy Policy explains how WonderWake Limited, a company incorporated in Hong Kong, operating as Wonderwake ("Wonderwake," "we," "us," or "our"), collects, uses, discloses, and protects information when you use the Wonderwake mobile application, website, and related services (collectively, the "Services").

Wonderwake is designed to keep sensitive information close to you. HealthKit, sleep, motion, calendar, reminder, HomeKit, music-library, and Journal content are not used for advertising. We do not sell your personal data for money. We do use limited product analytics, purchase information, and optional advertising measurement as described below.

Questions or privacy requests can be sent to dev@somnify.org.

Translations: Localized versions of this Policy are provided for convenience. If a translation conflicts with the English version, the English version controls to the extent permitted by applicable law. This does not limit rights that cannot lawfully be limited.

1. A Plain-Language Summary

  • No account is required to use the core Wonderwake app.
  • We do not sell your personal data for money.
  • Sensitive feature data is not used for advertising. We do not use HealthKit records, sleep measurements, motion readings, precise location, calendar or reminder content, Journal entries, HomeKit data, music-library content, alarm schedules, or personalized onboarding answers to target or measure advertising.
  • Advertising measurement is optional. If you allow tracking through Apple's App Tracking Transparency prompt, advertising partners may receive the device's advertising identifier together with limited commercial events, such as an app activation, trial start, or subscription purchase, to help us understand which ads work.
  • You can decline tracking. Declining does not disable Wonderwake's core alarm functionality. You can change the setting later in iOS under Settings > Privacy & Security > Tracking.
  • Journal is private by design. Journal entries are stored locally and, when available, synchronized through the private CloudKit database associated with your Apple Account. Journal content is not sent to our analytics or advertising providers.

2. Information We Process

2.1 Information processed for optional app features

We process the following information only when you enable or use the relevant feature:

  • HealthKit and sleep information: depending on the version and your permissions, sleep times, duration and stages, date of birth, biological sex, heart rate, steps, active energy, walking or cycling distance, workouts and workout routes. We use these records for sleep and activity insights and bedtime recommendations on your device. Health records and derived sleep insights are not sent to our analytics or advertising providers.
  • Motion information: accelerometer and motion-activity information used on your device to help estimate sleep and wake times. Raw motion readings are not sent to our analytics or advertising providers.
  • Location and weather information: a current or saved location used to request local weather through Apple WeatherKit and to display weather-related features. Location coordinates are not sent to our analytics or advertising providers.
  • Calendar and reminder information: upcoming events and reminders used on your device to create the Morning Brief. Event and reminder titles, notes, and content are not sent to our analytics or advertising providers.
  • HomeKit information: the scenes and accessories you choose for a wake-up routine. HomeKit information is handled through Apple's HomeKit framework and is not used for analytics or advertising.
  • Music-library information: downloaded tracks you choose to use as alarm audio. We do not upload your music-library content to our servers.
  • Journal information: dates, moods, selected activities, and dream text you choose to save. Journal information is stored locally and may synchronize through your private Apple CloudKit database.

We may record that a permission or feature is enabled, without collecting the underlying HealthKit, motion, location, calendar, reminder, HomeKit, music, or Journal content.

Maps and weather use Apple services. Quiet Hours stores Screen Time selections on your device without recording readable app or website names. Journal may include images generated through Apple's Image Playground, subject to the Apple service and permissions you choose.

2.2 Product and usage analytics

We collect limited information about how the app performs and how its features are used. This may include:

  • app version, device model, operating-system version, language, and App Store region;
  • an app-generated customer or analytics identifier;
  • app usage, feature interactions and onboarding progress;
  • alarm times, settings and actions, including optional feature status;
  • selected onboarding answers and the resulting wake-up profile, but not free-form answers;
  • diagnostic information, errors, and information needed to investigate failures; and
  • network metadata, such as an IP address, that a service provider may process when receiving an event.

We use this information to operate the Services, understand feature use, diagnose problems, improve reliability, evaluate onboarding and paywalls, prevent abuse, and plan product improvements. Analytics identifiers are pseudonymous, not anonymous: they may distinguish an app installation or device even when they do not contain your name or email address.

2.3 Purchases and subscriptions

Apple processes payments. We and our subscription service providers may receive product identifiers, transaction identifiers, app-account or customer identifiers, price, currency, trial or subscription status, purchase and renewal events, paywall or placement information, and entitlement status. We use this information to provide paid access, restore purchases, prevent duplicate reporting, support customers, measure conversion, and keep financial and compliance records.

We do not receive your full payment-card number from Apple.

2.4 Advertising measurement and App Tracking Transparency

Wonderwake uses advertising measurement to understand which campaigns lead to app activations, trials, and subscriptions. Limited advertising data may include App Tracking Transparency status, an advertising identifier when Apple authorizes access, app-instance or integration identifiers, app activation, product identifier, trial or subscription event, transaction status, price, and currency.

We do not include your name, email address, HealthKit records, sleep measurements, motion readings, precise location, calendar or reminder content, Journal entries, HomeKit data, music-library content, alarm schedule, mood, or personalized onboarding answers in advertising measurement events.

If you grant Apple's tracking permission, the advertising identifier may be linked by an advertising partner with information from other apps or websites for advertising measurement. This is "tracking" under Apple's rules and may be called "sharing," "targeted advertising," or "cross-context behavioral advertising" under some privacy laws, even though we do not sell your data for money. If you decline, the advertising identifier is unavailable to Wonderwake for this purpose. Apple or our partners may still provide aggregated or privacy-preserving attribution that does not use the advertising identifier.

2.5 Feedback and support

When you contact us, we process your email, message and attachments to respond. When you open an in-app contact feature, we also collect diagnostic information to investigate issues and improve reliability, including app and device details, language, alarm settings and recent alarm logs. We store a protected identifier derived from your network address. These diagnostics do not contain raw HealthKit records or Journal entries.

2.6 Website information

Website hosting processes network and request data to serve and protect the site. Optional Google Analytics loads only after you accept analytics cookies. It measures page visits and basic interactions without advertising personalization. Use Cookie settings to decline or withdraw consent. Your choice lasts up to 180 days. Language and consent preferences use local storage. Global Privacy Control and Do Not Track disable analytics. Short links separately record IP address, browser, country, destination and time for click counts and abuse detection.

2.7 Android early-access list

When you join the Android early-access list, we collect the email address you provide, your selected website language, signup and confirmation timestamps, and the consent version shown with the form. To limit automated abuse, we temporarily store a protected network identifier derived from your IP address; we do not store the raw IP address in the waitlist database.

We process this information with your consent only to confirm the signup and send one Android early-access invitation. We do not add this list to a newsletter. Our hosting and email providers process the information as needed to operate the list and deliver those messages. Unconfirmed records are deleted after seven days. Confirmed addresses are deleted no later than 30 days after the early-access invitation is sent. You can withdraw before then by emailing dev@somnify.org.

3. How We Use Information

We use information for the following purposes:

  • provide, personalize, maintain, and secure the Services;
  • run alarms, sleep insights, Morning Brief, weather, Journal, HomeKit, and related features you choose;
  • manage subscriptions, purchases, trials, entitlements, refunds handled by Apple, and customer support;
  • measure reliability, diagnose errors, prevent abuse, and improve the Services;
  • understand product use, test features, and personalize the app;
  • measure advertising only as described in Section 2.4;
  • communicate with you when you contact us; and
  • comply with legal obligations and establish, exercise, or defend legal claims.

4. Legal Bases Where Required

Where the law requires a legal basis, we rely on one or more of the following:

  • Your consent: for App Tracking Transparency, HealthKit, motion, location, calendar, reminders, HomeKit, music-library access, notifications, and other optional permissions. You can withdraw consent through iOS settings, although withdrawal does not make earlier lawful processing unlawful.
  • Performance of a contract: to provide requested app functionality, purchases, subscriptions, paid access, support, and private Journal synchronization.
  • Legitimate interests, where permitted: to keep the Services reliable and secure, understand limited product usage, diagnose problems, prevent fraud, and improve the product. We balance these interests against your rights and expectations.
  • Legal obligations and claims: to keep records required by law and to establish, exercise, or defend legal rights.

We rely on consent, not legitimate interests, for access to Apple's advertising identifier and for tracking that requires permission.

5. When We Disclose Information

We disclose information only as described in this Policy:

  • Apple: for App Store distribution and payments, StoreKit, App Tracking Transparency, HealthKit, CloudKit, WeatherKit, HomeKit, notifications, AlarmKit, and other platform services.
  • PostHog: for product analytics, feature flags, and pseudonymous app-use measurement.
  • Google Firebase and Google Ads measurement: for app analytics, app-instance identifiers, purchase and conversion measurement, and standard transaction reporting.
  • Adapty: for subscription status, paywall and purchase analytics, entitlement support, integration identifiers, and tracking authorization status.
  • Meta: for limited app activation, trial, subscription, product, price, and currency events, and the advertising identifier only when access is authorized.
  • WishKit: when you choose to submit or view feature requests and related feedback.
  • Hosting, email, professional, and security providers: when reasonably necessary to run the website, respond to support, protect the Services, obtain professional advice, or comply with law.
  • Legal and safety disclosures: when we reasonably believe disclosure is required by law, legal process, or necessary to protect rights, safety, security, or prevent fraud.
  • Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to applicable law and appropriate confidentiality protections.

Service providers process information under their own privacy terms and, where applicable, contracts requiring them to protect information and process it for the services they provide to us. Their policies include:

6. Advertising Disclosures and Opt-Out

We do not sell personal data for money. As explained in Section 2.4, optional disclosure of an advertising identifier and conversion events for advertising measurement may be treated as a "sale," "sharing," or targeted advertising under some laws even when no money changes hands. You may opt out of future identifier-based tracking by denying or revoking App Tracking Transparency permission in iOS settings. You may also email dev@somnify.org with a request to opt out of applicable sale, sharing, or targeted-advertising processing.

7. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, preserving paid access, resolving disputes, meeting legal obligations, maintaining security, and enforcing agreements. Retention depends on the category of information:

  • on-device settings and feature data generally remain until you delete them, reset the app, or uninstall the app;
  • Journal entries remain in local storage and your private CloudKit database until you delete them or manage Wonderwake's data through iCloud;
  • analytics, diagnostic, and advertising events are retained according to our configured business needs and provider settings, then deleted or de-identified when no longer needed;
  • purchase and transaction records may be retained as needed to preserve entitlements and satisfy tax, accounting, fraud-prevention, and legal requirements; and
  • support messages are retained as needed to resolve the request and maintain reasonable business records.

Apple and other providers may retain information under their own policies. Deleting the app does not automatically delete information already held by Apple, your private iCloud database, an email provider, or our service providers.

8. Your Choices and Rights

8.1 Device and app controls

  • Manage tracking in Settings > Privacy & Security > Tracking.
  • Manage Health access in the Apple Health app or iOS Settings.
  • Manage motion, location, calendar, reminders, HomeKit, music, and notification permissions in iOS Settings.
  • Delete Journal entries in the app and manage Wonderwake's stored data through iCloud settings.
  • Manage or cancel subscriptions through your Apple Account subscription settings.
  • Block or delete website cookies and local storage through your browser.

8.2 Privacy requests

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or information about categories of data and recipients. You may also have the right to opt out of sale, sharing, targeted advertising, or certain profiling, and to appeal a denied request.

Send requests to dev@somnify.org. Because Wonderwake does not require an account, we may ask for an app-generated identifier or limited verification information so we can locate the correct records. We will use verification information only for the request and will respond within the period required by applicable law. Authorized agents may submit requests where local law permits. We will not discriminate against you for exercising a privacy right.

Residents of the European Economic Area or United Kingdom may also lodge a complaint with their local data-protection authority. California residents may exercise the rights available to them under California law where that law applies to Wonderwake.

9. International Data Transfers

We and our providers may process information in the United States and other countries that may have different data-protection laws. Where required, we use legally recognized transfer mechanisms, such as adequacy decisions, standard contractual clauses, or another lawful safeguard. Contact us to request more information about applicable safeguards.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect information in light of its nature and the risks of processing. These measures include relying on iOS permission controls, on-device processing for sensitive features, private CloudKit storage for Journal, access controls, and encrypted network connections where supported. No storage or transmission method is completely secure, and we cannot guarantee absolute security.

11. Children

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly sell or share the personal data of children under 16 for targeted advertising. If local law requires consent from a parent or guardian for a younger user, that consent must be obtained before the child provides personal data. If you believe a child has provided personal data contrary to this section, contact us and we will investigate and take appropriate action.

12. Automated Processing

Wonderwake may use onboarding selections and app activity to provide a wake-up profile, recommendations, personalized features, or purchase offers. These automated product decisions do not produce legal or similarly significant effects.

13. Changes to This Policy

We may update this Policy to reflect changes to the Services, providers, or law. We will post the updated Policy with a new effective date and, where required, provide additional notice or request consent before using personal data for a materially different purpose.

14. Contact and Controller

Controller: WonderWake Limited (Hong Kong, BRN 81158864), operating as Wonderwake
Registered office: RM 701, UNIT 108, 7/F, TWR B NEW MANDARIN PLAZA, 14 SCIENCE MUSEUM RD, TSIM SHA TSUI, HONG KONG
Email: dev@somnify.org