Privacy Policy
UpRoar is an alarm clock that makes you prove you're awake. To do that it needs to know when you were supposed to get up and whether you did. This page says exactly what that means in terms of your data — what we hold, what never leaves your phone, and who else can see any of it.
The short version. We have no analytics SDK, no crash reporting service, no advertising network and no third-party trackers of any kind. We do not collect your location. Your microphone and camera are used entirely on your device and we never receive audio or images. What we do hold is your account, your alarm settings, and the record of which mornings you cleared.
Who we are
UpRoar is operated by the team behind uproarme.com. For anything in this policy, including a deletion request, write to [email protected].
What we store on our server
All of it lives in a single database we run ourselves. Nothing here is sold or shared.
- Your account. Your name, your email address, and your password — the password only ever as a salted hash, never in a form we or anyone else can read back. We also store a login token for each device you sign in on.
- Why you set the alarm. The line you write for yourself, which the app shows you while the alarm is ringing, plus your chosen difficulty.
- Your alarms. Times, repeat days, which tasks are in your chain, and the stake amount and destination if you set one.
- Your mornings. When an alarm was due, whether you cleared the chain, how long it took, which tasks you completed, how many times you snoozed, and whether you passed the follow-up wake-up check. This is the record that stakes and streaks are settled against, so it has to be on the server rather than only on your phone.
- Stakes. Amounts committed, amounts forfeited, and the resulting ledger.
- Squad. Which squad you're in, and the posts, nudges and reactions in that squad's feed.
- Streaks and referrals. Your current and best streak, shields, and — if you invite someone — the email address you sent the invite to.
What never leaves your phone
Three of the wake tasks use hardware that people are rightly careful about. None of them send anything to us.
- Microphone. The speak-aloud task is handled by Android's own speech recogniser. We ask it to work offline wherever your device has an offline model, and the app only ever receives back the recognised text so it can check whether you said the line. We never receive, transmit or store audio. One caveat we would rather state than hide: if your device has no offline model, Android's recogniser may fall back to Google's online service, in which case the audio is handled by Google under their privacy policy, not ours. The task is optional — leave it out of your chain if you would rather it never happen.
- Camera. The scan task decodes the code using a barcode model bundled inside the app, running on your device with no network access. Camera frames are analysed in memory and discarded. No photograph is taken, stored or uploaded.
- Motion and step count. Read from your phone's own pedometer to confirm you walked before the camera unlocks. Only the outcome — that the task was cleared — is ever sent.
Who can see your mornings
A squad exists so that other people can see whether you got up; that is the whole mechanism, and you should join one knowing it. Members of your squad can see your display name, whether your alarm is armed, whether you cleared or slept through, and your streak.
They cannot see your email address, your stake amounts, your wallet, or the line you wrote about why you set the alarm. If you would rather nobody saw any of it, don't join a squad — every other part of the app works without one.
What we don't do
- We don't sell or rent your data, and we never will.
- We don't run advertising, and there are no ad or attribution SDKs in the app.
- We don't collect your location, contacts, call logs, messages, or the list of other apps you have installed.
- We don't use analytics or crash-reporting services, so no behavioural data is sent to a third party.
- We don't email you marketing you didn't ask for.
Who else touches your data
As few parties as we can manage. Our server runs on rented infrastructure in Germany, and traffic passes through Cloudflare, who terminate TLS and filter abuse. Android's speech recogniser is Google's, in the narrow case described above. If we ever add a payment processor for stakes, it will be named here before it goes live.
Keeping it safe
Traffic between the app and our server is encrypted in transit. Passwords are stored as salted PBKDF2 hashes. Login tokens can be revoked by signing out. No system is perfect, and we would rather say so than claim otherwise.
How long we keep it
Account details and your wake history are kept while your account exists, because streaks and settlement depend on the history. Delete your account and we remove your account record, alarms, wake history, streaks and squad posts. Ledger entries for stakes that were already settled are kept where we are required to retain a financial record, and are detached from your account.
Your rights
Wherever you are, you can ask us for a copy of your data, ask us to correct it, or ask us to delete it. If you're in the UK or EU, that's your right under the UK GDPR and GDPR respectively, along with the right to object to processing and to complain to your data protection authority. Email [email protected] and we'll action it within 30 days. We won't ask you why.
Children
UpRoar isn't intended for children under 13, and the stakes feature is limited to users 18 and over. If you believe a child has given us personal data, write to us and we'll delete it.
Changes
If this policy changes in a way that affects what we collect or who sees it, we'll change the date at the top and say so in the app rather than quietly editing this page.