Privacy Policy

1. Introduction

Welcome to WakeArena ("we," "our," or "us"). We build high-accountability alarm clock software designed to help people wake up on time using cognitive challenges and structured incentives. We value your privacy and believe in clear, plain-language disclosures about how your data is handled.

This Privacy Policy explains what information we collect when you use the WakeArena Android mobile application ("App") and visit our website at https://wakearena-mu.vercel.app/ ("Website"), how that information is used, where it is stored, and your rights regarding your data.

2. Information Collected in the Mobile App

A. Account & Authentication Information

When you create an account in the App, we collect authentication data depending on your chosen sign-in method:

• Google Sign-In: We receive your Google User ID, email address, display name, and profile avatar URL (if provided) via secure OAuth 2.0 protocols. We never receive or store your Google account password.
• Email & Password: When you register via email, your password is salted and cryptographically hashed by our cloud authentication provider (Supabase Auth). We never see or store plain-text passwords.

B. App Usage, Gameplay & Profile Data

To provide alarm scheduling, wake-up streaks, and gamification features, the App stores:

• User Profile: Your permanent unique nickname, customizable display name, in-app coin balance, wake-up streaks, best streak, and total escape counts.
• Alarm Preferences: Set alarm times, active state, and custom audio labels.
• Cognitive Challenge Telemetry: Completion status, round outcomes, and elapsed solving duration across our 5 wake-up games (Visual Memory, Colour Paint, Sequence Memory, Ascending Order, Copycat) and our Colour Tap recovery game.
• Virtual Economy Records: Speed reward coin credits, rage-quit penalties (-50 coins, +4 escapes, streak reset), and TickPass balances.

C. Device & Crash Diagnostics

• Google Firebase Crashlytics: We use Firebase Crashlytics to monitor application stability and debug crashes. Crash reports capture non-identifiable technical telemetry including device model, Android OS version, free RAM/storage state, and exception stack traces.
• Advertising Identifiers: We utilize Google AdMob to deliver optional rewarded video ads in the App (+10 coins per view). AdMob may process standard advertising identifiers (such as the Google Advertising ID / GAID) in accordance with Google's advertising privacy standards.
• Location Data: WakeArena does NOT collect, request, or track precise or coarse GPS location data.

3. Local On-Device Storage & Offline Architecture

WakeArena is built with a resilient local-first architecture to ensure alarms and puzzles trigger reliably even when you have no cellular signal or Wi-Fi connection:

• Local SQLite Room Database: Alarm schedules, sound settings, and the local pending_sync_queue are stored in a private, sandboxed SQLite database on your physical device.
• Offline Escape Queue: If an escape or rage-quit occurs while disconnected from the internet, the event is safely recorded in the local pending_sync_queue table and reconciled with the cloud backend by our OfflineSyncManager as soon as internet connectivity returns.
• Encrypted Preferences: Sensitive session tokens are protected using Android's hardware-backed EncryptedSharedPreferences (AES-256 GCM).

4. How We Use Information

We process collected data exclusively for the following operational purposes:

• To schedule and fire exact-time alarms using Android's hardware Real-Time Clock (RTC).
• To run cognitive challenges, track solving speed, and award verified coins according to our speed reward tiers.
• To display global leaderboard standings (Coins, Streaks, Escapes) using your chosen public nickname and display name.
• To deliver optional rewarded video ads (capped at 10 ads per day with a mandatory 5-second cooldown between ad views).
• To analyze crash diagnostics via Firebase Crashlytics and resolve device-specific compatibility issues.

We do not sell, rent, trade, or monetize your personal data to data brokers or third-party marketing networks.

5. Third-Party Service Providers

We integrate a minimal set of trusted third-party cloud services to operate the App:

• Supabase: Cloud database, OAuth user authentication, and serverless edge functions (including the monthly 1st-of-month UTC TickPass allocation).
• Google AdMob: Serves optional rewarded video advertisements in the mobile application.
• Google Firebase Crashlytics: Collects anonymized crash logs and stack traces for app diagnostic reporting.

6. Android Device Permissions

WakeArena requests only permissions strictly necessary to ensure life-critical alarm reliability:

• SCHEDULE_EXACT_ALARM & USE_EXACT_ALARM: Allows the app to schedule alarms with AlarmManager.setAlarmClock() to trigger at the exact second.
• RECEIVE_BOOT_COMPLETED: Reschedules your active alarms automatically if your device restarts overnight.
• WAKE_LOCK: Ensures the CPU and display remain active while your alarm is sounding.
• USE_FULL_SCREEN_INTENT: Displays the alarm challenge interface over your secure lock screen.
• MODIFY_AUDIO_SETTINGS: Adjusts alarm audio stream volume and drops volume to 75% when you tap "Start Task".
• INTERNET & ACCESS_NETWORK_STATE: Authenticates users, reconciles offline escape logs, updates leaderboards, and fetches optional rewarded ads.

7. Data Deletion & Support Contact

You have the absolute right to delete your account and all associated profile, streak, and transaction data at any time:

• In-App Deletion: Open WakeArena > Settings > Profile > Delete Account. Your cloud profile and database records are immediately purged.
• Email Request: You may also request complete data deletion by emailing us at wakeforce.support@gmail.com with your registered email address or permanent nickname.

For full details on gameplay rules, see our Game & Timer Guide. For coin economy and TickPass rules, see our Economy Guide.