01Who we are
AlarmFriends is built and operated by Samouraï Coop, a cooperative established in France. For the purposes of the EU General Data Protection Regulation (GDPR), Samouraï Coop is the data controller for the data described here.
Questions, requests, complaints: support@samourai.coop.
02Signing in
AlarmFriends supports two ways to sign in: Sign in with Apple and Sign in with Google. There is no password to create and we never see your Apple or Google credentials — the provider verifies you and hands us a signed token.
From that token, and from what your provider chooses to share, we store:
- Account ID
- A UUID we generate. It is the key everything else hangs off.
- Provider ID
- The stable identifier Apple or Google gives us for you, so we recognise you on the next sign-in.
- Email address
- Used to identify your account and to reach you about it. If you use Apple's "Hide My Email", we only ever receive the private relay address — we never learn your real one.
- Nickname
- Seeded from the display name your provider supplies, or your device name. You can change it at any time; it is what friends see.
- Avatar URL
- Only if your provider supplies a profile picture URL.
Because an email address is attached, your account is identifiable, not anonymous. We say this explicitly because an earlier version of this policy claimed otherwise, and that was wrong.
03What the app stores
- Alarms
- Times, labels, repeat days, sound choice and enabled state.
- Friends
- Invite codes you generate or redeem, and the friend connections that result.
- Voice messages
- The audio you record for a friend, held only long enough to deliver it — see section 05.
- Reactions & streaks
- The reactions you send and the wake streaks they feed.
- Safety records
- Users you have blocked, and any content report you file — kept so blocks keep working and so we can act on reports.
- Subscription state
- Whether your account currently has Premium, and when a promotional grant expires.
Alarms ring locally on your device using the platform's alarm and notification facilities. We do not need or use push tokens to make your alarm go off.
04Diagnostics and crash reports
We use Sentry, on an instance we host ourselves, to collect crash reports and error diagnostics: the error and its stack trace, your device model and OS version, the app version, and a short trail of alarm-lifecycle events (scheduled → fired → dismissed) that lets us investigate "my alarm didn't ring" reports.
These reports carry your account ID and your nickname. That is deliberate: without it we cannot connect a report you email us to the crash we recorded. It also means crash data is linked to your account — it is not anonymous, and the previous version of this policy was wrong to say it was.
What crash reports do not carry: your email address, your recordings, your alarm labels, or your friends. The SDK's "send default personal information" setting is off, so no IP address or user agent is attached by default. Diagnostics are only sent from release builds, and a sample of performance traces is collected to spot slowness.
Clearing this context happens on sign-out. Deleting your account does not retroactively purge crash reports already recorded; ask us and we will remove them.
05How long we keep things
Voice messages are the sensitive part, so they are the most aggressively deleted.
- Audio file
- Deleted from storage as soon as it is delivered to your friend's device. An undelivered recording expires after 10 minutes and is swept away.
- Delivery record
- The small row noting who sent what and when is deleted 24 hours after delivery. If the recipient reacted, that row is kept — with no audio attached — so the reaction still has something to point at.
- Invite codes
- Expire 7 days after they are created.
- Account data
- Kept while your account exists. Deleted when you delete the account — see section 08.
- Safety records
- Blocks and reports are kept while the accounts involved exist, so a block cannot be reset by re-adding someone.
06What we never collect
- No location data, of any precision.
- No contacts or address book. Friends are added by invite link only — the app never reads who you know.
- No advertising identifiers, no ad networks, no cross-app or cross-site tracking.
- No browsing history.
- No microphone access outside a recording you deliberately start.
- No sale of personal data, and no sharing it for anyone else's advertising. Ever.
07Why we are allowed to process this (GDPR)
- Performing our contract with you — your account, alarms, friends and voice messages. Without this data there is no service.
- Legitimate interest — crash diagnostics to keep alarms reliable, and abuse prevention so blocks and reports work. We keep both minimal.
- Legal obligation — retaining what we must in order to act on reports of illegal content, and to respond to lawful requests.
You can object to processing based on legitimate interest at any time; write to us and we will weigh it.
08Deleting your account
In the app: Profile → Settings → Delete account. This runs immediately while you wait, and it removes:
- Every audio file you own — both what you sent and what you received, across both storage buckets.
- Your account row, and by cascade your alarms, friendships, invite codes, reactions, blocks and notifications.
- Your sign-in record, so the Apple or Google link is severed.
If any part of the storage cleanup fails, the deletion is aborted rather than half-completed — your account survives and you can retry. We would rather fail loudly than tell you your recordings are gone when they are not.
Residual copies may persist briefly in our provider's encrypted database backups until those backups roll over. They are not accessible to the app and are not used for anything.
Deleting your account does not cancel a Premium subscription — cancel that in your App Store or Google Play settings.
09Where your data lives, and who processes it
Data is stored in the European Union. Traffic is encrypted in transit, and database access is constrained by row-level security policies so one account cannot read another's rows.
- Supabase
- Authentication, database and file storage. EU region. Privacy policy
- RevenueCat
- Subscription state. Receives purchase events keyed to your account ID. We never see your card details — Apple and Google handle payment. Privacy policy
- Sentry
- Crash reporting, on an instance we host ourselves. See section 04. Privacy policy
- Apple & Google
- Sign-in, app distribution and payment. Their own privacy policies govern what they hold.
10Your rights
Under the GDPR you have the right to access your data, to have inaccurate data corrected, to have it deleted, to restrict or object to processing, and to receive it in a portable format.
Deletion is available immediately in the app (section 08). For everything else, write to support@samourai.coop and we will respond within one month.
If you think we have handled your data badly, you may complain to your national supervisory authority. In France that is the CNIL.
11Children
AlarmFriends is not intended for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, write to us and we will delete it.
Because the app delivers recorded audio from other people, we also enforce the content rules in section 07 of the Terms with no exceptions.
12Changes to this policy
We will change the date at the top when this policy changes, and tell you in the app when a change materially affects you.
13Contact
Samouraï Coop — France
support@samourai.coop
samourai.world