Waky Privacy Policy

한국어 · English · 日本語 · 简体中文 · 繁體中文 · Español · Filipino · Nederlands · Dansk · Deutsch · Русский · العربية · Italiano · Bahasa Indonesia · Português · Polski · Français · Tiếng Việt

Effective date: July 9, 2026 · Last updated: October 6, 2026

Zaco Labs ("the Company") values your privacy and complies with applicable laws, including the Personal Information Protection Act of Korea. This Privacy Policy explains how your personal information is collected, used, stored, and destroyed within the Waky service ("the Service") provided by the Company. This policy applies to both the iOS and Android apps.

1. Personal Information We Collect

The Company provides the Service without an account sign-up process, and the app does not ask you to enter information that directly identifies you, such as your name or phone number. We collect the following to provide the Service:

• Anonymous device identifier (userKey): an identifier the app creates by one-way transformation of device and installation information (a device identifier on Android, an app purchase transaction identifier on iOS). It does not identify you by name, contact details, or the like.
• Device and app information: operating system type and version, device model, app version, app language, country (the region setting of your device, not location information), and the dates and times of first and most recent use
• When you use paid purchases: the purchase receipt (token), product identifier, payment/transaction identifier, and subscription expiry date and time (see Section 4)
• Advertising identifier (behavioral information): IDFA on iOS and the Advertising ID (ADID) on Android (see Section 3)
• Usage statistics and app crash and performance diagnostics: feature usage records, device model, OS version, app version, and the records captured when an error occurs (see Section 11)
• When you contact us: the email address you send from and the content of your inquiry, together with the anonymous identifier, app version, OS version, and device model that are automatically included in the inquiry email

The following information is stored only on your device and is not transmitted to the Company's servers.

• Alarm settings, habits and the record of completing them, wake-up records, and statistics
• Alarm sound files you record
• Camera footage during missions: analyzed only on the device to recognize objects and confirm movements, and never stored or transmitted.

2. Purposes of Collection and Use

• Managing Service use and providing app settings via the anonymous identifier
• Verifying paid-service payments and checking subscription status
• Providing personalized advertising, measuring ad performance, and preventing ad fraud
• Improving the Service, performing statistics and analysis, and fixing app errors
• Responding to customer inquiries

3. Collection and Use of Advertising Identifiers (Behavioral Information)

To provide personalized advertising and improve the Service, the Company uses a third-party advertising platform, and an advertising identifier may be collected in this process. Ads are not shown to subscribers.

1. Behavioral information collected
   • iOS: IDFA (Identifier for Advertisers)
   • Android: Advertising ID (ADID, Google Advertising ID)
2. Purposes of collection and use
   • Providing interest-based personalized (targeted) advertising
   • Analyzing ad impression and click performance and preventing ad fraud (invalid traffic)
3. Collection method and third-party service
   • Collected and transmitted automatically through the mobile advertising SDK included in the app.
   • Service: Google AdMob (Google LLC). Google's data processing is subject to the Google Privacy Policy.
4. Your right to opt out and how to do so
   You can refuse the collection of identifiers for personalized advertising in the following ways. Even if you opt out, non-personalized (general) ads may still be shown.
   • iOS: Decline the tracking request shown when you first launch the app, or go to Settings > Privacy & Security > Tracking and turn off "Allow Apps to Request to Track" or turn off tracking for the specific app.
   • Android: Go to Settings > Google > Ads and select "Delete advertising ID" or "Opt out of Ads Personalization".
   • Users in regions where consent is required for advertising, such as the European Economic Area (EEA) and the United Kingdom, can make a choice on the consent screen shown when the app is first launched, and can change it at any time from Settings > Ad Privacy Choices in the app.

4. Collection and Processing of In-App Purchase Information

To provide paid services (subscriptions) in the app, the Company processes the following information.

1. Items collected
   • In-app purchase history: purchased product information, payment/transaction identifier, subscription expiry date and time, and whether auto-renewal is on
   • Purchase receipt (token) and product identifier for payment verification
   • User identifier: the anonymous device identifier (userKey)

   Note: Actual payment means information, such as credit card numbers and bank account numbers, is processed directly by Apple (App Store) and Google (Google Play). The Company does not directly collect or store such information.

2. Purposes of collection and use
   • Checking subscription status and providing subscription benefits
   • Confirming purchase history, checking for duplicate payments, and handling refunds and customer inquiries (CS)
   • Preventing payment fraud and managing Service usage records
3. Retention and use period
   • In accordance with applicable laws such as the Act on the Consumer Protection in Electronic Commerce, records on payment and the supply of goods are retained for 5 years.

5. Retention and Use Period

The Company retains personal information while you use the Service, and destroys it without delay once the purpose of collection and use has been achieved or you request deletion. The anonymous device identifier and the device and app information stored on the Company's servers are destroyed once one year has passed since you last used the Service. However, this information is not destroyed while your subscription remains active, even if you have not used the Service. Deleting the app alone does not let the Company know, so if you want the information remaining on our servers deleted, please request it as described in Section 9. However, where retention is required under applicable laws, information is retained for the applicable period as follows:

• Records on payment and the supply of goods: 5 years (Act on the Consumer Protection in Electronic Commerce)
• Records on consumer complaints or dispute handling: 3 years (Act on the Consumer Protection in Electronic Commerce)

Information stored only on the device (Section 1) is deleted from the device when you delete the app.

6. Provision to Third Parties

The Company does not provide your personal information to third parties beyond the scope specified in this policy, except where required under the provisions of law or where an investigative agency so requests for investigative purposes in accordance with the procedures and methods prescribed by law.

7. Entrustment of Personal Information Processing

The Company entrusts the following personal information processing tasks for the smooth provision of the Service:

• Vercel Inc.: server operation (server location: Seoul, Republic of Korea)
• Supabase Inc.: database operation (server location: Seoul, Republic of Korea)
• Google LLC: payment verification (Google Play), personalized advertising (Google AdMob), usage statistics analysis (Google Firebase Analytics), and app crash diagnostics and performance measurement (Google Firebase Crashlytics, Firebase Performance Monitoring)
• Apple Inc.: payment verification (App Store)

8. Transfer of Personal Information Abroad

The Company transfers personal information abroad as follows for usage statistics analysis, app crash diagnostics, and advertising.

• Recipient: Google LLC (contact: Google privacy inquiries)
• Destination countries: the United States and other countries where Google operates data centers
• Items transferred: advertising identifier, usage statistics, app crash and performance diagnostics, device model, OS version, and app version
• Timing and method of transfer: sent over the network from time to time through the SDKs included in the app while you use it
• Purposes of use and retention period: the purposes in Sections 3 and 11, for the period under Google's data retention policy
• How to refuse and its effect: you can refuse the transfer of the advertising identifier and usage statistics through the settings in Sections 3 and 11. App crash diagnostics are needed to provide the app reliably, so they are transmitted while you use the app.

The Google MediaPipe library used for object recognition in the Android app may send usage metrics to Google to improve its features; these metrics do not include camera footage.

9. Your Rights and How to Exercise Them

You may request access to, correction of, deletion of, or suspension of the processing of your personal information at any time. When you send an email from Settings > Contact in the app, an anonymous identifier that lets us confirm who you are is included, and the Company will take action without delay in accordance with applicable laws.

10. Destruction of Personal Information

Information in electronic file form is permanently deleted using a method that prevents recovery or reproduction, and information printed on paper is shredded or incinerated.

11. Collection of Usage Statistics via Analytics Tools

To improve Service quality, the Company uses Google Firebase Analytics to collect usage statistics. The information collected concerns usage behavior, such as screen navigation, feature use, app/device version, language setting, and approximate region. It does not include information that directly identifies you, such as your name or contact details, or any recordings or camera footage. You can turn usage-statistics collection on or off at any time from Settings > Usage Statistics in the app.

The Company also uses Google Firebase Crashlytics and Firebase Performance Monitoring to fix unexpected shutdowns of the app and improve speed. These collect the device model, OS version, app version, and the records captured when an error occurs; they do not include anything you enter or record. These diagnostics are collected regardless of the usage-statistics setting.

Google's data processing is subject to the Google Privacy Policy and the Firebase Privacy and Security policy.

12. App Permissions

The app uses device permissions for the features below. Even if you do not allow an optional permission, you can use the Service apart from that feature.

• Notifications (required): used to sound alarms and habit alerts.
• Exact alarms, display over other apps, and exemption from battery optimization (Android): used so that alarms ring at the set time and the alarm screen appears over the lock screen.
• Microphone (optional): used when you record an alarm sound. Recordings are stored only on the device.
• Camera (optional): used when you do object recognition and movement confirmation missions. Footage is analyzed only on the device and is never stored or transmitted.
• Allow app tracking (iOS, optional): used for personalized advertising.

You can change or withdraw permissions at any time in your device's Settings.

13. Measures to Ensure Security

The Company implements administrative and technical protective measures, including access-rights management, encryption of transmission sections, and access control, for the safe processing of personal information.

14. Privacy Officer

The Company designates a Privacy Officer as follows to take overall responsibility for personal information processing and to handle user complaints and remedy damages.

• Role: Zaco Labs Privacy Officer
• Email: zaco.labs@gmail.com

15. Changes to This Privacy Policy

This Privacy Policy may be revised in accordance with changes in laws and Service policies. Any changes will be announced within the Service or on this page.