RiseAlarm AI Privacy Policy

1. Overview

This Privacy Policy describes how Veloptix, Inc. ("Veloptix", "we", "us", or "our") collects, uses, and shares information in connection with the RiseAlarm AI mobile application ("App") and related services (collectively, the "Service").

By downloading or using RiseAlarm AI, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the App.

This policy applies to all users of RiseAlarm AI on iOS and watchOS. It is intended to comply with applicable privacy laws, including the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and Apple's App Store privacy guidelines.

2. Information We Collect

2.1 Information You Provide

• Account information: Name and email address (or authentication token if you sign in with Apple ID). An account is optional — core alarm features work without one.
• Alarm configurations: Alarm times, days of the week, selected wake tasks (steps, QR scan, math), sound preferences, and snooze settings you configure in the App.
• QR codes: QR codes you generate or scan within the App are processed on-device only. We do not store or transmit the content of QR codes to our servers.

2.2 Information Collected Automatically

• Sleep data: If you enable sleep tracking, the App uses your device's accelerometer and, where available, Apple Watch motion data to estimate sleep stages. This data is processed on-device and optionally synced to Apple Health.
• Motion data (step count): When a step-count wake task is active, the App uses the device's motion sensors to count steps in real time. Step data for task completion is not stored long-term.
• Alarm history: Timestamps of when alarms fired and whether wake tasks were completed — used to calculate your Rise Streak and sleep statistics.
• Device information: Device model, operating system version, app version, and unique device identifiers used for crash reporting and performance monitoring.
• Usage analytics: Feature interactions, session duration, and crash logs used to improve the App. This data is aggregated and not linked to your identity.

2.3 Camera Access (QR Code Task)

If you enable the QR Code wake task, the App requests camera access to scan the QR code. Camera access is used only at the moment of scanning — we do not capture, store, or transmit any images. The camera is never accessed in the background.

2.4 Push Notifications & Critical Alerts

RiseAlarm AI uses Apple's push notification infrastructure to deliver alarms. With your explicit permission, we use Critical Alerts to sound alarms even when your device is on Silent or Do Not Disturb. A push token is stored to enable this functionality. This token is not used for marketing.

2.5 Apple Watch Data

If you use the RiseAlarm AI Watch App, alarm state, task status, and sleep data are shared between your iPhone and Apple Watch using WatchConnectivity. This data does not leave your devices except where explicitly synced to Apple Health.

Data Category	Examples	Purpose
Account Data	Name, email	Authentication, account management
Alarm & Settings	Alarm times, task types, sounds	Delivering alarms, Rise Streak
Sleep Data	Sleep stages, duration, quality score	Sleep insights, AI morning briefing, Apple Health
Motion Data	Step count during wake task	Verifying step-count task completion
Camera	Real-time QR scan	QR code wake task — on-device only, not stored
Push Token	Device push notification token	Delivering alarms and Critical Alerts
Device & Usage	OS version, crash logs	Bug fixes, app improvement

3. How We Use Your Data

We use the information we collect to:

• Deliver alarms at your scheduled times, including Critical Alerts that bypass Silent mode and Do Not Disturb.
• Verify completion of your selected wake-up tasks (steps, QR scan, math challenges).
• Track your Rise Streak and generate your sleep history and statistics.
• Generate AI morning insights — personalized daily briefings based on your sleep data.
• Sync your sleep data to Apple Health when you authorize it.
• Display your alarm schedule and sleep data in Home Screen widgets and the Apple Watch app.
• Send transactional notifications (alarm confirmations, streak milestones). We do not send marketing push notifications without your explicit opt-in.
• Analyze aggregated, anonymized usage trends to improve the App.
• Detect, investigate, and prevent fraudulent activity and security issues.
• Comply with legal obligations.

4. Data Sharing

We do not sell your personal data. We may share data only in the following limited circumstances:

4.1 Service Providers

We use trusted third-party service providers to help operate the App. These providers process data only on our behalf and according to our instructions:

• Firebase (Google): Cloud database, authentication, and analytics infrastructure.
• Google Crashlytics: Crash reporting and performance monitoring.
• Apple: App delivery, in-app purchases, Sign in with Apple, HealthKit integration, push notification delivery.

4.2 Legal Requirements

We may disclose information if required to do so by law or in good-faith belief that such action is necessary to comply with applicable law, a court order, or governmental regulation; or to protect the rights, property, or safety of Veloptix, our users, or the public.

4.3 Business Transfers

If Veloptix is involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties only when you explicitly request or consent to such sharing.

5. Sensitive Data & Permissions

5.1 Sleep & Health Data (HealthKit)

With your explicit permission, RiseAlarm AI may read from and write to Apple Health (HealthKit):

• Writes to Health: Sleep analysis records (sleep stages, duration).
• Reads from Health: Resting heart rate and sleep records (to enhance sleep quality scoring).

You can manage HealthKit permissions at any time in the iPhone Health app → Sharing → Apps → RiseAlarm AI.

5.2 Motion & Fitness (Step Counter Task)

The App uses Apple's Core Motion framework to count steps when you select the Motion wake task. Motion access is requested only when you enable this task type. Step counts are verified on-device in real time and are not stored in our servers after task completion.

You can revoke motion permissions at any time in Settings → Privacy & Security → Motion & Fitness → RiseAlarm AI.

5.3 Camera Access (QR Code Task)

Camera access is used exclusively to scan QR codes during an active alarm. No images are captured, stored, or transmitted. The camera session ends immediately after a valid QR scan is detected.

You can revoke camera permissions at any time in Settings → Privacy & Security → Camera → RiseAlarm AI. Revoking access disables the QR Code wake task.

5.4 Notifications & Critical Alerts

RiseAlarm AI requires notification permission to deliver alarms. Critical Alerts — which bypass Silent mode and Do Not Disturb — require a separate, explicit permission grant. You may disable Critical Alerts at any time in Settings → Notifications → RiseAlarm AI → Critical Alerts.

We use push tokens solely to deliver alarm notifications and system alerts. They are never used for marketing or analytics.

5.5 Apple Watch Integration

Alarm schedules, task status, and sleep summaries are shared between your iPhone and Apple Watch via Apple's WatchConnectivity framework. This communication occurs directly between your paired devices. Watch data is not transmitted to our servers independently.

6. Data Storage & Security

Your data is stored securely using Google Firebase infrastructure hosted in the United States. Firebase complies with industry-standard security certifications including ISO 27001 and SOC 2.

We implement the following security measures:

• All data is encrypted in transit using TLS 1.2 or higher.
• Data at rest is encrypted using AES-256.
• Access to user data is restricted to authorized personnel only, on a need-to-know basis.
• Authentication tokens are stored securely in the iOS Keychain.
• Alarm schedules and sleep data processed on-device are stored in the iOS secure sandbox.
• Regular security reviews and vulnerability assessments.

While we take strong precautions, no method of transmission or storage is 100% secure. If you discover a security vulnerability, please contact us at aleem.rz@gmail.com.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you the Service:

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Alarm history & Rise Streak: Retained while your account is active. Deleted within 30 days of account deletion.
• Sleep records: Retained while your account is active. You may delete individual sleep records from within the App at any time.
• QR code scan data: Not stored. Processed on-device in real time only.
• Motion & step data: Not stored server-side. Task completion is recorded (pass/fail) but raw step data is discarded after alarm dismissal.
• Crash logs and analytics: Retained for up to 12 months in aggregated or anonymized form.
• Legal compliance records: May be retained longer where required by applicable law.

You may request deletion of specific data or your entire account at any time — see Section 8.

8. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

8.1 Access & Portability

You may request a copy of all personal data we hold about you by contacting us at aleem.rz@gmail.com. Your sleep history can be exported from Profile → Settings → Export Data within the App.

8.2 Correction

You may update or correct your account information at any time from your profile settings within the App.

8.3 Deletion

You may delete your account and all associated data:

• In-app: Profile → Settings → Account → Delete Account.
• By email: Send a deletion request to aleem.rz@gmail.com from the email address associated with your account.

Upon deletion, your personal data will be permanently removed from our systems within 30 days, except where retention is required by law.

8.4 Revoking Permissions

You can revoke any of the following device permissions at any time in iOS Settings without deleting your account:

• Camera: Settings → Privacy & Security → Camera → RiseAlarm AI
• Motion & Fitness: Settings → Privacy & Security → Motion & Fitness → RiseAlarm AI
• Notifications / Critical Alerts: Settings → Notifications → RiseAlarm AI
• Apple Health: Health App → Sharing → Apps → RiseAlarm AI

8.5 Opt-Out of Analytics

You may opt out of usage analytics from within the App at Profile → Settings → Privacy → Share Analytics.

8.6 California Residents (CCPA)

California residents have the right to know what personal information we collect, to request deletion, to opt out of sale (we do not sell personal data), and to non-discrimination for exercising these rights. Contact us at aleem.rz@gmail.com.

8.7 European Residents (GDPR)

If you are located in the European Economic Area (EEA), you have the right to access, rectify, erase, restrict processing of, and port your personal data, as well as the right to object to processing and to lodge a complaint with a supervisory authority. Our legal bases for processing include performance of a contract, legitimate interests, and your consent where required.

9. Children's Privacy

RiseAlarm AI is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages.

If you believe a child has provided us with personal information without parental consent, please contact us at aleem.rz@gmail.com and we will delete such information promptly.

10. Third-Party Services

RiseAlarm AI integrates with the following third-party services. Each operates under its own privacy policy:

• Google Firebase — database, authentication, analytics: firebase.google.com/support/privacy
• Google Crashlytics — crash reporting: firebase.google.com/support/privacy
• Apple HealthKit — health & sleep data platform: apple.com/legal/privacy
• Apple In-App Purchases — subscription management: apple.com/legal/privacy
• Apple Push Notification Service (APNs) — alarm delivery and Critical Alerts: apple.com/legal/privacy
• Apple WatchConnectivity — iPhone–Apple Watch communication: apple.com/legal/privacy

The App does not contain third-party advertising SDKs. The App may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Update the "Last Updated" date at the top of this page.
• Notify you via in-app notification or email for material changes.
• Where required by law, obtain your consent before applying significant changes to how we use your personal data.

Your continued use of RiseAlarm AI after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

12. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or wish to report a privacy concern, please contact us: