1. Information we collect
Account Information: When you create an account, we collect your email address and display name. Usage and Sleep Data: We process alarm settings, wake streak data, mood check-ins, sleep journal entries, sleep quality information, and app activity needed to provide your selected features. Safety and Accountability Data: If you use partner or safety features, we process relationship roles, alerts, acknowledgements, incident status and history, and notification delivery status. If you actively enable live location for a safety incident, we process coordinates, accuracy, and capture times for the duration of that incident. Device and Permission Data: We may process device, operating-system, browser, notification-subscription, and permission status information needed for compatibility and delivery. Microphone or location access requires a browser or device permission prompt.
2. How we use your information
We use your information to: a) Provide alarms, sleep tools, streaks, and optional leaderboards b) Apply your preferences and accessibility choices c) Deliver notifications and show their status or history d) Send safety or accountability alerts to recipients you have authorized e) Display your profile on public leaderboards only if you opt in f) Improve reliability, compatibility, and app performance g) Generate optional AI-powered sleep insights from the sleep and mood data described below
3. AI-powered features
Alarmia uses deterministic calculations first and may use a configured AI provider for optional morning briefs and sleep insights. Only the bounded sleep, wake, and mood fields needed for the requested insight are submitted. Outputs are schema-validated, non-diagnostic, explainable, and cannot independently create alarms, contact another person, change a relationship, or trigger a safety action. Provider processing and retention depend on the production provider configuration and applicable agreements; Alarmia does not promise zero retention unless that configuration has been verified. You can dismiss generated content and disable optional AI features.
4. Data storage
Alarm configurations and app preferences may be stored locally in your browser. Account, leaderboard, partner, notification, and safety-incident records are stored in our cloud infrastructure when those features are used. Live-location updates are associated with the relevant safety incident and are available only to authorized incident participants under our access controls. You can clear local site data independently from requesting deletion of server-side account data.
5. Data sharing
We do not sell your personal data. Your display name, streak data, and badges may be visible on a leaderboard if you opt in. Authorized accountability partners may receive alerts and view incident details or live-location updates when you activate those features. Delivery providers process the minimum notification or email data needed to send enabled messages. We may use anonymized, aggregated information to understand service performance.
6. Your rights
You have the right to: a) Access your personal data b) Correct inaccurate data c) Delete your account and data d) Export your data e) Opt out of leaderboard visibility f) Withdraw consent at any time
7. Cookies & local storage
Alarmia uses local storage for alarms, sound and app preferences, onboarding state, and accessibility choices such as text size, reduced motion, and high contrast. These accessibility choices stay in that browser and apply immediately; clearing Alarmia site data resets them. We use essential authentication storage to keep signed-in sessions working. We do not use third-party advertising or tracking cookies.
8. Children's privacy
Alarmia is not intended for children under 13. We do not knowingly collect personal information from children under 13.
9. Trusted-person invitations and consent
Alarmia may process an exact email address or an opt-in private handle to resolve an invitation without exposing a searchable directory. Invitations, accept or decline decisions, capability grants, revocations, blocks, and privacy-safe audit events are retained as needed for security and disputes. Basic wake coordination is separate from care summaries, detailed care records, emergency alerts, shift alerts, roommate ringing, and remote wake; each sensitive expansion requires fresh consent. Precise location is shared only for a specific incident when the sender enables it. Existing relationships may be limited until sensitive access is reconfirmed.
10. Browser-agent tools (WebMCP)
When enabled for an eligible account and supported browser, Alarmia exposes limited same-origin WebMCP tools for redacted summaries, opening review screens, and preparing drafts. Tool metadata and privacy-safe invocation receipts may be recorded for reliability and abuse prevention. Agents cannot accept relationships, send or resolve safety incidents, reveal precise location or care data, ring devices, change permissions, or delete data. Drafts require human review and confirmation.
11. Wake challenges and device sensors
Camera, microphone, motion, and QR access is optional and requested only after you start a matching wake challenge. Ordinary photo captures are not uploaded by the photo challenge. If you choose object verification, a compressed captured image is submitted for the bounded verification request. Voice recognition may be provided by your browser or operating system and may be subject to that provider's processing terms. Motion samples are evaluated on the device and are not stored as a movement history. You can choose another local wake mission when a permission or sensor is unavailable.
12. Account and sign-in security
We process linked sign-in providers, multi-factor enrollment status, security-event history, temporary abuse-protection decisions, and limited device/session metadata to protect accounts and provide session controls. CAPTCHA providers may process technical request and browser information to distinguish legitimate use from automated abuse. Recovery codes are stored only as keyed hashes, and plaintext codes are shown once. Account deletion has a seven-day cancellation period; limited security or workspace audit records may be retained where required for fraud prevention, legal obligations, or disputes.
13. Contact
For privacy inquiries, contact us at privacy@alarmia.app.