Privacy Policy
Larky is an alarm clock. It needs no account and no personal data to work — every alarm feature runs without signing in and without an internet connection.
If you turn on cloud sync, we store only what is needed for your wake-up streak, achievements and sleep history to survive a change of phone. We do not sell data, show ads, or use any analytics or tracking tools.
Photos taken in the photo mission never leave your phone — they are checked locally, by a model that runs offline.
What data we collect
Data that stays on your phone only
It never reaches any server and disappears when you uninstall the app:
- alarms (times, days, names, mission settings, chosen sounds),
- photos used as alarm backgrounds and photos taken in the photo mission,
- barcodes and QR codes saved for the "Scan a code" mission,
- alarm session history (how you dismissed the alarm, mission times),
- app settings.
Data stored in the cloud (only with sync enabled)
- Account identifier — a random technical identifier (UUID) created automatically. The account is anonymous: it contains no name, e-mail address or phone number.
- Device time zone — needed so the server can determine the date of your wake-up correctly (otherwise your streak would break when travelling).
- Wake-ups — the date and time you successfully dismissed an alarm and which alarm it was. This is what the streak and statistics are calculated from.
- Achievements — how many missions of each type you played, your best reaction time, and unlocked badges with their unlock dates.
- Sleep history — if you use the "Going to sleep" mode: when you went to bed and got up, your planned bedtime, and how long you slept.
- Mission templates you publish — the name and mission configuration, plus your votes on other people's templates. Publishing is voluntary, and we strip references to your photos and codes before sending.
Data from your Google account (only if you link it)
Linking a Google account is optional and serves one purpose: recovering your data after a change of phone. We then receive your e-mail address, the name shown in your Google profile, and the address of your profile picture. We have no access to your mail, contacts, files or any other Google service.
The name from your Google account is never published. We do not show it to other users.
PRO plan purchases (only if you buy or open the purchase screens)
Payments are handled by Google Play — only Google sees your card and payment details, we don't. To check whether you have an active PRO plan we use a service called RevenueCat. It receives:
- a random customer identifier created by the app — with no name or e-mail address, and not linked to your cloud account or Google account,
- purchase information from Google Play: the purchase identifier and token, the plan bought, purchase, renewal and expiry dates, and the subscription status (e.g. free trial, cancelled),
- technical data sent with each connection, including the app and system version, language, store country and IP address.
The app connects to RevenueCat only when you open the purchase screens yourself (the PRO screen, "Restore purchases"), or when the Play Store on your phone confirms that this Google account owns a Larky purchase — then, after a reinstall or on a new phone, the app restores your plan on its own. That check itself happens in the Play Store on your phone and sends nothing to us or to RevenueCat. If you don't buy anything and don't open the purchase screens, the app does not connect to RevenueCat.
What we do NOT collect
Location, contacts, the list of installed apps, audio recordings, photos, advertising identifiers or payment card details. We use no analytics, no crash reporting and no advertising.
Why we process this data, and on what legal basis
We process cloud data to deliver the features you ask for: syncing your streak, achievements and sleep history across devices and recovering them after a change of phone. The legal basis is performance of a contract (Article 6(1)(b) GDPR) — without this data the feature simply does not work.
Publishing a mission template to the community is based on your consent (Article 6(1)(a) GDPR), given by deliberately publishing the template. You can withdraw it by deleting the template in the app.
We process purchase data to perform the PRO plan sales contract (performance of a contract, Article 6(1)(b) GDPR): to check whether you have access to PRO features and to handle the free trial, renewals, plan changes and purchase restoration.
App permissions
- Alarms and reminders, exact alarms — so the alarm rings at the right time.
- Notifications — the alarm itself, the sleep countdown, routine reminders.
- Display over other apps, full-screen intent — so the ringing screen appears on a locked phone.
- Camera — only in the "Scan a code" and photo missions. The image is analysed on your device and is never uploaded.
- Motion sensors — the "Shake", "Level" and "Steps" missions.
- Google Play payments — buying the PRO plan.
Who we share data with
- Supabase — our database and authentication provider. Data is stored on servers in the European Union and transmitted over an encrypted connection (HTTPS) only.
- RevenueCat, Inc. (USA) — handles PRO plan purchases. Data may be processed outside the European Economic Area under the data processing agreement concluded with RevenueCat.
- Google — if you use Google sign-in, Google confirms your identity; payments for the PRO plan are handled by Google Play. In both cases under Google's own privacy policy.
We share data with no one else and we do not sell it.
How long we keep data
Cloud data is kept for as long as your account exists. Raw mission events (used to award achievements) are deleted automatically after 90 days — only counters and unlocked badges remain. When you delete your account, all your cloud data disappears immediately and irreversibly.
Purchase data in RevenueCat is kept for as long as it is needed to provide your plan (including lifetime) and for accounting. Deleting your account in the app does not cover it, because it is not linked to the account — ask us at the contact address to delete it. You cancel a subscription in Google Play (Payments & subscriptions).
Your rights
You have the right to access your data, rectify it, erase it, restrict processing, port it and object to processing. You may also lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych).
In practice, you can exercise the most important ones in the app:
- Turn off sync — Settings → Privacy. From that moment nothing leaves your phone.
- Delete your account and all its data — the Account tab, at the bottom, "Danger zone" section. Details: account deletion.
- Delete a published template — the Community templates screen.
You can also write to the contact address above — we reply within 30 days at the latest.
Children
The app is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has provided us with data, write to the contact address and we will delete it.
Changes to this policy
We will announce material changes in the app or in the Google Play listing. The date of the last update is shown at the top.