Privacy Policy

This policy explains what Weky ("we", "us", "our") does with your information. It covers the Weky iPhone app and this website. We've written it in plain language rather than legal boilerplate, because you should be able to finish it.

1. Changes to this policy

We may update this policy as Weky changes. When a change materially affects how your information is handled, we will revise the date above and give notice inside the app before it takes effect. Continuing to use Weky after that means the updated policy applies to you.

2. Information processed only on your device

The following never reaches us. It is processed by your iPhone, used immediately, and then discarded or kept locally. We have no ability to see it:

• Mission photographs. Photo missions — Object Hunt, Sky Photo, Make Your Bed and Barcode Scan — are checked on your phone. The image is analysed in memory, discarded the moment the check completes, never written to your photo library, and never uploaded to any server.
• Push-up and squat counting. Reps are counted on your phone while the camera is open. No video is recorded, stored or transmitted.
• Spoken affirmations. Your spoken phrase is checked on your phone. No recording is created, kept or sent.
• Motion data used by the Shake mission.
• Sleep data from Apple Health, if you connect it. Weky reads it to show your sleep summary and writes it nowhere else.
• Contacts, if you use the referral feature. A contact you select only pre-fills a message that you send yourself. Your contacts are never received, stored or uploaded by us.
• Apps you block, and Weky guard. Both are applied on your device by iOS; we never learn which apps you chose, and neither sends us anything.
• Your alarms, wake history, habit tracker, settings and progress, for as long as you have not created an account (apart from the usage information described in section 3A).

3. Information we store when you create an account

An account is entirely optional — every feature of the alarm works without one. Its only purpose is to keep your progress if you reinstall Weky or move to a new iPhone. If you sign in, we store:

• Account identifiers — an internal user ID, the email address supplied by the sign-in method you chose, your display name, and which method you used.
• Your setup answers — the questions Weky asks when you first open it: age range, gender, sleep and snooze habits, what makes mornings hard for you, how you heard about Weky, and the preferences you picked. These shape Weky's defaults and help us understand who uses the app.
• Progress — streaks, statistics, achievements, and a record of the alarms you completed or missed.
• Your alarm setup — times, names, days, missions (including stacked missions and the wake-up check) and tones, so they can be restored.

If you choose Apple's "Hide My Email" when signing in, we only ever receive the anonymous forwarding address Apple generates for you — never your real address.

3A. Usage and diagnostic information

Whether or not you create an account, we may analyze how the app is used, so we can understand what works, fix problems and enhance app functionality. This can include:

• App activity — for example, the steps you complete when you first open Weky and the answers you give there, when the plans screen is shown and which plan you choose, and whether a wake-up mission was completed or missed.
• Device and app details — device model, operating-system version, app version and language.
• Identifiers — a random identifier created for your installation and, if you have an account or a subscription, the ID linked to it. This is not an advertising identifier.
• How you found Weky — if you installed Weky after seeing one of our App Store ads, information about which campaign led to the download.
• Diagnostics from on-device features — features such as push-up counting may report technical and performance information. The camera images themselves never leave your phone.

This information is processed for us by service providers under written agreements. It is used only to analyze and enhance the app and to understand which of our marketing works. It is never sold, never used to show you ads, and never used to track you across other companies' apps or websites.

4. Sensitive information

Some of what you tell Weky during setup — your sleep patterns, how rested you feel, your age range and gender — may count as sensitive personal information under certain laws. We treat it accordingly:

• It is given voluntarily by you, and Weky works if you skip it.
• It is used only to tailor the app to you and to understand our users in aggregate.
• It is never used to infer characteristics about you, never used for advertising, and never sold or shared.
• You can ask us to erase it on its own, without losing your streaks or achievements.

Health data read from Apple Health is never transmitted off your device at all.

5. Information we do not collect

• We do not collect your location, at any precision.
• We use no advertising identifiers and show no advertising.
• We do not use your information for advertising, and we do not build advertising profiles. The usage information we analyze is described in section 3A.
• We do not track you across other apps or websites, and there is nothing to opt out of.
• We never receive your photos, audio or video — not for verification, not for review, not for anything.
• We do not use your information to train machine-learning models.
• We never see your payment card, billing address or Apple Account details.

6. How we use your information

• To run the app and your alarms, and to keep your account working.
• To restore your streaks, achievements and alarm setup when you reinstall or change phone.
• To tailor Weky's defaults — suggested wake time, strictness, and the morning list — to the answers you gave.
• To understand, in aggregate, who uses Weky and which features matter, so we can improve it.
• To respond when you contact us for support.
• To keep the service secure and prevent abuse.
• To meet legal, tax and accounting obligations.

7. Legal bases (EEA and UK users)

• Performance of a contract — operating the app, your account and your subscription.
• Consent — camera, microphone, motion, Apple Health, Contacts, app blocking and notifications are each requested separately, and can be withdrawn at any time in iOS Settings. Your setup answers are also provided voluntarily. Website analytics cookies are used only if you accept the banner on this site, and you can change your mind at any time with “Cookie settings” in the page footer.
• Legitimate interests — keeping the service secure, preventing abuse, and analyzing how the app is used to improve it, balanced against your rights and freedoms. You can object to this at any time (see section 13).
• Legal obligation — retaining records where tax or accounting law requires it.

8. Sharing and disclosure

We do not sell personal information, and we do not share it for advertising. Information is disclosed only in these limited circumstances:

• Service providers acting on our instructions. We use a small number of established providers — for cloud infrastructure and databases, for account sign-in, for managing subscriptions, and for analyzing app usage and performance — who process data solely on our behalf under written data-processing agreements, and who are not permitted to use it for their own purposes. We publish categories rather than a vendor list; you may request the specifics at any time by emailing us.
• A subscription-management provider. To know whether your plan is active, a subscription-management provider receives your App Store purchase receipt and an app user ID (your account ID if you are signed in, otherwise an anonymous one), along with the technical details any online service sees, such as your IP address and device type. It never receives your payment card, your photos, your sleep data or your alarms.
• Apple. All purchases are processed by Apple as the seller of record. Apple, not Weky, handles payment and holds the transaction record.
• Legal requirements. Where we are legally compelled to disclose information, or where disclosure is necessary to protect our rights, users, or the public.
• A change of ownership. If Weky is ever acquired or merged, information may transfer as part of that transaction. You would be notified beforehand and this policy would continue to apply until replaced.

No advertisers or data brokers receive your information. Usage information from the app is handled as described in section 3A, and website visits, if you accept them, as described in section 16.

9. International transfers

Your information may be transferred to, and stored on, servers outside the country you live in — our infrastructure providers operate in several regions, including the United States. Where information is transferred out of the European Economic Area, that transfer is covered by the European Commission's Standard Contractual Clauses; where it is transferred out of the United Kingdom, by the UK International Data Transfer Addendum to those clauses. Our providers apply supplementary technical safeguards on top, including encryption in transit and at rest. You may request further detail by emailing us.

10. How long we keep things

• Account and progress data — kept while your account exists. Deleting your account removes it immediately, not on a schedule.
• Data on your device — kept until you delete it in the app or uninstall Weky.
• Mission photographs, audio and motion — never retained at all; discarded the moment a mission is verified.
• App usage information — kept only as long as needed to analyze and improve the app, then deleted or reduced to aggregate figures that no longer identify you.
• Website analytics — if you accept them, usage data is held by our analytics provider for no longer than 14 months, and analytics cookies expire within 2 years.
• Support correspondence — up to 24 months, so we can follow up on an issue, then deleted.
• Transaction records — held by Apple under Apple's own policies, and by us only where tax law requires, typically for the statutory retention period in our jurisdiction.

11. Security

Your sign-in details are stored securely on your iPhone, protected by the device's hardware encryption. Data is encrypted in transit and at rest. Access rules mean your records can only ever be read or written by your own account, and further safeguards block requests that don't come from the real app. No system is perfectly secure, which is exactly why we store as little as possible in the first place.

12. Your choices and controls

• Permissions — every one is optional and revocable in iOS Settings. Declining one disables only the feature that needs it.
• Your account — delete it any time in Settings → your account → Delete account and data. This removes your account, its cloud data and the alarms, history and progress on your phone straight away, and signs you out. It does not cancel your subscription.
• Part of your data — you can ask us to erase a single category, such as your setup answers, without losing your streaks or achievements.
• A copy of your data — email us and we'll send it in a portable, machine-readable format.
• Notifications — controllable in iOS Settings, though the alarm depends on them.

Requests go to [email protected] from the address linked to your account. We reply within 30 days, never charge for a request, and never treat anyone differently for making one. EEA and UK users may also raise a concern with their national data protection authority.

13. Your legal rights

Which rights you actually hold depends on where you live. Rather than list everything and imply it all applies to everyone, here is what genuinely applies to whom.

If you are in the European Economic Area or the United Kingdom, the GDPR and UK GDPR give you the right to:

• Access — confirmation of whether we process your data, and a copy of it.
• Rectification — have inaccurate data corrected and incomplete data completed.
• Erasure — have your data deleted where one of the grounds in Article 17 applies. Deleting your account in the app does this immediately.
• Restriction — have processing limited in the circumstances set out in Article 18, for example while you contest the accuracy of something.
• Portability — receive the data you provided in a structured, machine-readable format, and have it transmitted to another provider where technically feasible. This covers data we process on the basis of your consent or our contract with you.
• Object — object at any time to processing carried out on the basis of our legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your interests.
• Withdraw consent — for anything you consented to, meaning the device permissions and your setup answers. Withdrawal does not affect processing that already took place lawfully.
• Complain — to the data protection authority in your country. You do not have to contact us first, though we would like the chance to put things right.

Weky carries out no automated decision-making that produces legal or similarly significant effects about you, so the Article 22 right to contest such a decision does not arise here.

If you live in a US state with a consumer privacy law — California, Virginia, Colorado, Connecticut, Utah, Texas, Nevada and a growing number of others — your state generally gives you the right to know what is collected, to obtain a copy, to correct it, to delete it, to limit the use of sensitive information, and not to be discriminated against for asking. The exact set varies by state, and we apply whichever applies to you.

• Opt out of sale or sharing. This right exists, but there is nothing here to exercise it against: we do not sell personal information and do not share it for cross-context behavioural advertising. That is why you will not find a "Do Not Sell or Share My Personal Information" link on this site — one is not required of us, and offering a switch that does nothing would be misleading.
• Appeal. If your state provides an appeal process for a refused request — Virginia, Colorado, Connecticut and Texas among them — you may appeal by replying to our response, and we will answer within the period your state requires.

If you live somewhere without such a law, none of the above is owed to you by statute. We extend the same controls to everyone anyway, as a matter of policy rather than obligation.

The honest limits

• Erasure is not absolute. Where the law requires us to keep something — tax and accounting records, for instance — we keep it for the required period and no longer.
• We cannot delete records that are not ours. Apple holds your purchase history under its own policies; requests about it go to Apple.
• We cannot delete data that never reached us. Alarms, history and progress held only on your iPhone are removed by deleting them in the app or uninstalling it.
• We may need to confirm your identity before acting, usually by asking you to write from the email address linked to your account. This protects you from someone else making a request in your name.

To exercise anything above, email [email protected]. We respond within 30 days, never charge a fee, and never treat anyone differently for having asked.

14. If you live in California or another US state

California, Virginia, Colorado, Connecticut, Utah, Texas, Nevada and other states give residents rights to know what is collected, to obtain a copy, to correct it, to delete it, and to opt out of its sale or sharing. We extend those controls to everyone, wherever they live — see section 12.

On the points those laws single out specifically:

• We have not sold personal information for money or other valuable consideration — not in the past twelve months, and not at any point in our history. This includes the sale of covered information under Nevada law.
• We do not share personal information for cross-context behavioural advertising.
• Sensitive personal information is used only to deliver the features you asked for, never to infer characteristics about you. You may ask us to limit its use.
• We do not discriminate against anyone who exercises a privacy right.
• The categories collected, and why, are set out in sections 2 to 4. You may use an authorised agent to make a request; we may ask for proof of their authority.

15. Children

Weky is not directed to children under 13, or under the minimum age of digital consent where you live — 16 in parts of the European Economic Area. We do not knowingly collect information from anyone below that age. If you are above 13 but below the age of consent in your country, you should use Weky only with the involvement of a parent or guardian. If you believe a child has provided us with information, contact us and we will delete it promptly.

16. Website analytics, cookies and tracking signals

The app. The Weky app shows no advertising and does not track you across other companies' apps or websites. The usage information it collects is described in section 3A.

This website. If you accept the banner shown on your first visit, we use an analytics service to count visits and see which pages are useful. Nothing is loaded from that service, and no analytics cookie is set, unless you accept.

• What it collects. Pages viewed, approximate location (country or city level), device and browser type, the site that referred you, and a randomly generated identifier stored in first-party analytics cookies. IP addresses are not stored. We do not collect your name or email through analytics.
• What we do not do. We have turned off the service's advertising and cross-device features, we do not use analytics for advertising, and we do not combine website analytics with anything from the app or your account.
• Why, and the legal basis. To understand how people find and use the site, so we can improve it. We rely on your consent, which you can give or refuse without losing access to anything.
• Changing your mind. Use “Cookie settings” in the footer of any page to accept or decline again. Declining deletes the analytics cookies.
• Browser signals. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a refusal: no banner is shown and analytics is not loaded.
• Transfers. Our analytics provider may process this data in the United States and other countries; see section 9.

Fonts and other content. The fonts on this site are served from our own server. The site and the app link to Apple's App Store and to our own pages only, and we do not embed social widgets or advertising pixels anywhere.

17. The newsletter

If you enter your email address into the signup form on our blog, we store that address, the date you signed up and the page you signed up from, for one purpose only: sending you our newsletter — new articles and writing about sleep and morning habits. We rely on your consent, which you give by submitting the form and can withdraw at any time.

• The newsletter list is entirely separate from any Weky account. Subscribing does not create an account, and having an account does not subscribe you.
• We do not sell, rent or share the list, and we do not use it to advertise on other platforms.
• Every email carries a one-click unsubscribe link. You can also unsubscribe by writing to [email protected].
• We keep your address until you unsubscribe, and delete it promptly afterwards.

18. Contact

Questions, requests, or complaints about this policy: [email protected]. To delete your account, see the account deletion page.