Privacy Policy
fitwake is an alarm app published by Naina Consulting, 229 rue Saint-Honoré, 75001 Paris, France, SIRET 949 656 599 00022 ("we"), who is the data controller. It ends when a camera has counted your exercise reps. This policy explains what the app handles, what it stores, and what it sends anywhere else. The short version is that the app has no account; nothing about your body, your camera, or your sleep ever leaves your phone. Three things do leave it, all under a random identifier: your subscription status, which is checked with a payment provider and is described in full in section 04; a short list of onboarding and subscription-screen events, described in full in section 05; and — if you open the ladder — how many mornings in a row you have had, together with any display name you choose, which is described in full in section 06 and is the one thing here that other people can see.
Camera and motion data
When an alarm rings, fitwake opens the front camera to count your reps. Frames are analysed in memory on your device using Apple's on-device Vision framework. No frame, image, video, or body-position record is written to disk, sent over the network, or made available to us or to any third party. The camera stops the moment the mission ends or you cancel it.
One thing is written to disk, and only so that you can share it if you want to. While a mission runs, the app records a short video clip of each move into its own cache on your phone and cuts the last couple of seconds of each into one loop with your results drawn over it. That file is made on your device and is never uploaded to us or to anyone else. It leaves your phone only if you choose to send it somewhere, using the ordinary iOS share sheet, and where it goes then is governed by whatever app you send it to. The clips are deleted at the start of the next mission, and iOS may clear them sooner. If you never open the share screen, nothing is ever sent anywhere.
Apart from that file, the only things that outlive the mission are numbers: how many reps were counted, and whether the alarm was completed.
What the app stores on your device
Your alarms, their settings, your mission choices, and your wake-up history are stored in the app's own storage on your iPhone. There is no account and no sync, so this data exists in one place only. Deleting the app deletes all of it permanently; we cannot restore it, because we never had a copy. The one exception is the ladder: if you have opened it, a copy of your streak sits on our server until it is deleted, and section 06 explains how to delete it yourself and what happens if you simply remove the app.
Permissions the app asks for
Required to count reps. Missions cannot run without it.
Required to deliver alarms. The app sends nothing else.
Optional. Used only on device to match the home screen to your local sunrise. Never transmitted.
Optional. Used to detect the phone being moved mid-mission on the strictest settings.
Purchases
Payment is handled entirely by Apple through the App Store. We never see your name, payment card, or billing address, and Apple never gives them to us. Apple's handling of the transaction is governed by Apple's own privacy policy.
Working out whether your subscription is active is done for us by RevenueCat, Inc. (San Francisco, USA), who act as our processor. When the app checks your subscription it sends RevenueCat a random identifier the app generates for your install, your purchase and trial history from Apple's receipt, and basic technical facts about the request: app version, operating system version, country, and the IP address the request arrives from. That identifier is not your name, your email, or your Apple ID, and it is not tied to anything that identifies you. It is deleted when you delete the app, at which point the record cannot be connected to any person.
We use this for one purpose: to know whether to unlock the paid features. We do not use it for advertising and we do not sell or share it. Since 29 September 2026 RevenueCat also forwards these subscription events to PostHog, under the same random identifier, so that the two can be read together — see section 05 for what that means and why. Because RevenueCat is in the United States, this transfer relies on the European Commission's Standard Contractual Clauses. RevenueCat's own privacy policy governs their handling of it, and you can ask us to delete the record at any time using the address in section 10.
How we know whether the app works
The app reports sixteen things, and only these sixteen. Four are about the app itself, and come from the analytics library rather than from us: that it was installed, that it was opened, that it came to the front, and that it was updated. Six are about setting it up and paying for it: that an onboarding screen was shown, that one of four questions was answered and which answer was chosen, that the setup was completed, whether you granted or refused a permission, that the subscription screen was shown, and whether you bought, restored or dismissed it. Five are about the mornings: that a mission started, that a move inside it finished, that the mission was completed, that a mission was started and walked away from, and that an alarm rang and nobody got up. The last one is that an alarm was created.
Those last six are new as of 29 September 2026, and they replace a promise this page used to make. Until that date this section said that nothing reported a wake-up, a rep count or a mission result. That is no longer true. Here is exactly what they carry. For each move: which exercise it asked for, how many reps you did, how many seconds it took, and how many attempts the camera did not count. For the mission as a whole: which difficulty and how many ways out you had set, the total reps, how long it took, whether you typed your way out instead of moving, how many backup alarms had to ring before you got up, and the hour of the day — the hour alone, never the minute, and never the time your alarm is set for. Creating an alarm reports its difficulty, its ways out, how many days a week it repeats, and how many alarms you now have; it does not report the time you set it for.
No image, no video and no body position ever leaves the phone. What the camera produces is a count of reps and a count of attempts that did not qualify; the frames those numbers come from are never stored and never sent. Your streak, your history and the times your alarms are set for stay on this phone. Of the setup questions, only four report what you chose: how many alarms you already set, how long you have been trying to fix your mornings, which ways out you picked, and where you heard about us. Every question about your body or your sleep reports nothing at all — your name, the times you get up, how often you snooze and how much exercise you can take are recorded on this phone and never sent.
These reports go to PostHog, Inc. (San Francisco, USA), who act as our processor. Each one carries a random identifier the app generates for your install, the name of the event and when it happened, and basic technical facts: app version and build, iOS version, device model, screen size, language, timezone, and whether you were on wi-fi or cellular. PostHog is configured to discard the IP address the request arrives from, so no location is worked out from it and none is stored. That identifier is not your name, your email, or your Apple ID. We do not create a profile against it, we never tell PostHog who you are because we do not know, and the record cannot be connected to any person. It is deleted when you delete the app.
We use this for three purposes: to see where people give up, so the app can be made less annoying; to find out whether the camera counts real people correctly in real bedrooms, which is what the count of attempts that did not qualify is for; and to know whether the alarm is actually getting people up, which is what the missed mornings are for. We do not use it for advertising and we do not sell or share it. Since 29 September 2026 we do combine it with the subscription record in section 04: the app gives PostHog and RevenueCat the same random identifier, and RevenueCat forwards what it knows about subscriptions into PostHog. This page previously said the two were never combined, and that has changed. It is what lets us ask whether the people who give up during setup are the same people who never subscribe. Both halves remain what they were — a random per-install identifier, no profile, no name, no email, no Apple ID, nothing that can be connected to a person, and all of it deleted when you delete the app. We do not combine either with anything else. The app does not use any advertising identifier and does not ask to track you. Because PostHog is in the United States, this transfer relies on the European Commission's Standard Contractual Clauses. PostHog's own privacy policy governs their handling of it, and you can ask us to delete the record using the address in section 10.
The ladder
The ladder is a public leaderboard, and it is the only part of fitwake that other people can see. It is opt-in in the sense that nothing is sent until you open it: if you never visit the ladder screen, nothing in this section ever happens.
When you do open it, the app sends four things to our own server: the random per-install identifier described in section 05, how many mornings in a row you have completed, the date that run started, and whether you have asked to be hidden. If you set a display name, that is sent too and is stored alongside the rest. Everyone who opens the ladder is counted in the total it shows. We do not use any of it for advertising, and we do not sell or share it.
What other people see is your position, your streak, and your display name — or, if you have not set one, a handle the board generates from your identifier, like “Anonymous_0481”. Choose your display name accordingly: it is the one field in fitwake where you can publish something about yourself, and anything you type there is visible to everyone. You can change it or clear it at any time from Settings, and clearing it puts you back to the generated handle.
You can take yourself off the board without deleting anything, using Settings → On the board → Hidden. Your streak keeps running privately and you stop appearing to anyone else; sending the preference with each update is how we know, so it also means we keep your record while you are hidden.
To delete the record itself, use Settings → Delete my board record. That removes your standing, your name and your place immediately and permanently, and it is the only way to make the deletion happen at the moment you ask for it. This matters because the identifier lives in the app: if you simply delete fitwake, the app can no longer tell us anything, and your record is instead cleared automatically after thirty days without a report. Reinstalling the app produces a new identifier and a fresh start, with no way for us to connect it to the old one. Our server is hosted in the European Union.
The TestFlight waitlist
If you enter an email address on this website, we store that address for one purpose: to send you a TestFlight invitation. It is not added to a mailing list, not used for marketing, and not shared. It is deleted when the app is released publicly, or immediately on request to fitwake@naina.digital. During the beta, Apple's TestFlight also collects crash and usage data under Apple's terms; that is Apple's collection, not ours.
Children
fitwake is not directed at children under 13, and we do not knowingly collect personal information from them. The app asks no user for their name, address or age, so we hold nothing that identifies a child. If you believe a child has submitted an email address to the waitlist, or you want the subscription record for a child's install deleted, write to us and we will remove it.
Your rights
Under the GDPR, the UK GDPR and the CCPA you have the right to access, correct, export and delete personal data held about you, and to object to its processing. In practice there are only four things we can hold: a waitlist email address, the subscription record described in section 04, the usage record described in section 05, and the ladder record described in section 06. You can exercise every one of those rights over all four with a single message to fitwake@naina.digital, and we will respond within 30 days. For the ladder, you do not have to write to us at all: Settings → Delete my board record does it immediately, and that is the fastest route. For the subscription, usage and ladder records, quoting the email address you used to write to us is not enough to find them — all three are stored under a random identifier, so we will ask you for something that ties them to your install. We do not sell or share personal information, and we have never done so.
Changes and contact
If this policy changes in a way that affects what the app collects, the app will show you the change before it takes effect. A new date at the top of a page you never visit is not notice. Questions go to fitwake@naina.digital.