Privacy Policy

Effective Date: July 12, 2026

1. Introduction & Data Controller

Tuxedo Cat Apps ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, and share information about you when you use the Alarm Rotation mobile application (the "App").

For the purposes of the General Data Protection Regulation (GDPR) and the Brazilian General Data Protection Law (LGPD), Tuxedo Cat Apps is the Data Controller responsible for your personal data. By using the App, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect data to provide, secure, and improve our services. We strictly adhere to data minimization principles.

• Locally Stored Data: The App saves your alarm times, custom song selections, downloaded AI audio briefings (MP3s), and appearance preferences locally on your device. We do not transmit or store this configuration data on our servers.
• Location Data: If you enable the weather feature for your AI alarm briefing, we collect your approximate or precise location coordinates shortly before your scheduled alarm time, during the automated process of generating your personalized AI audio briefing.
• Subscription & Billing Data: If you purchase the AI Briefing subscription, we collect anonymous purchase tokens from the Google Play Store to verify your active subscription status.
• Automatically Collected Data: The App and its third-party services may collect diagnostic data, including your IP address, device name, OS version, and crash logs.
• Diagnostic & Debug Logs: To help us troubleshoot, the App transmits debug logs to our servers only when you manually initiate a bug report or error submission. These logs include device information, App state, and any information you provide.
• Diagnostic Identifier: You are assigned an anonymous, randomly generated Diagnostic ID via Firebase Authentication. This ID is anonymous by default. We use it to verify your authorization to access our cloud services and to associate logs with your specific installation if you manually provide the ID to us during a support interaction to help us resolve technical issues or fulfill data deletion requests.

3. Data Retention & Deletion

We believe in data minimization. Our cloud backend is stateless: when your alarm triggers, data is processed in real-time and not stored permanently.

Retention Period: Diagnostic logs and bug reports are stored on our secure servers for a maximum of 7 days to allow our developers to investigate reported issues. After this period, logs are automatically and permanently purged.

Your Right to Deletion: You may request the permanent deletion of your cloud-synced data at any time by navigating to Settings > Privacy > Request Data Deletion within the App. This triggers an automated request to immediately remove all associated diagnostic and cloud-synced records.

4. How We Use Your Data & Our Legal Basis

Under GDPR and LGPD, we must have a valid legal basis for processing your data. We process your data for the following purposes:

• To deliver the AI Audio Briefing (Performance of a Contract) We process your chosen news topics, news sources, and AI voice preferences via our cloud backend to generate your custom morning script and audio file.
• To provide Weather Updates (Consent): We process your location coordinates solely to fetch local weather data. You provide explicit consent via Android's device-level location permissions, which you can revoke at any time in your phone's settings.
• To Troubleshoot & Improve Stability (Legitimate Interest): We process debug logs and bug reports to identify technical failures and improve the App’s performance. This data is used strictly for internal development and quality assurance..
• To verify Subscriptions (Performance of a Contract / Legal Obligation): We process your Google Play purchase tokens to authenticate your premium access and prevent fraud.
• To display Advertisements (Consent / Legitimate Interest): We use device identifiers to serve ads. Where legally required (such as in the EU and Brazil), we rely on your explicit consent to serve personalized ads.

5. Third-Party Services and Data Sharing

We do not sell your personal data. However, to operate the Version 2.0 AI architecture, your data is securely processed by the following third-party infrastructure providers:

• Google Cloud & Firebase: Acts as our secure backend. We use Firebase Authentication to manage your anonymous Diagnostic ID and Firebase Firestore to securely receive bug reports. This infrastructure ensures that your diagnostic data is isolated and can be identified for deletion if you provide your Diagnostic ID.
• Google Generative AI (Gemini) & Cloud Text-to-Speech: Processes text scripts into audio files (MP3).
• Open-Meteo: Receives your approximate latitude and longitude coordinates to provide current weather conditions and daily forecasts.
• Weatherai.io: Receives your approximate latitude and longitude coordinates to provide active weather alerts and emergency warnings.
• Google Play Developer API: Processes subscription tokens for billing verification.
• Google AdMob: Uses cookies and mobile advertising identifiers (such as Android’s Advertising ID) to serve ads. You can manage personalized advertising at Google's Privacy & Terms.

6. International Data Transfers

By using the App, your data may be transferred to and processed in the United States or other countries. We ensure compliance with GDPR and LGPD via recognized legal safeguards, such as Standard Contractual Clauses (SCCs).

7. Your Privacy Rights (GDPR & LGPD)

If you are a resident of the European Economic Area (EEA) or Brazil, you have fundamental rights regarding your personal data:

• The Right to Access & Portability: You have the right to request a copy of the personal data we hold about you.
• The Right to Rectification: You have the right to request that we correct any inaccurate information.
• The Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal data. (Note: Most of your personal configuration is stored only on your device. However, for any data stored on our servers—such as debug logs associated with your device identifier—you may exercise your right to erasure by contacting us at the email below).
• The Right to Withdraw Consent: You can withdraw your consent for location tracking or personalized advertising at any time via your Android device OS settings.
• The Right to Complain: You have the right to lodge a complaint with your local Data Protection Authority (such as the ANPD in Brazil or your local EU supervisory authority).
• Note on Data Identification: Because we do not collect names, phone numbers, or email addresses, we can only identify server-side data (such as diagnostic debug logs) if you provide us with your unique Diagnostic ID. You can find and copy this ID within the App's 'Info' screen or the 'Report a Bug' window.

To exercise any of these rights, please contact us at the email provided below. We will respond within the legally mandated timeframes (usually within 15 days for LGPD and 30 days for GDPR).

8. Data Security

We prioritize your privacy and security. We have designed our application with the following protections:

• Local Storage: Personal alarm settings and local preferences are stored directly on your device. Their security is tied to your device’s inherent protections, such as your lock screen PIN, password, or biometrics.
• Data Continuity: We utilize the Android Auto Backup service to ensure your alarm preferences are preserved when you upgrade or reinstall your device. This data is handled securely by the Android operating system, remains within your private cloud or device storage, and is never accessed, collected, or shared by the developer.
• Encrypted Transmission: All communications between your device and our Firebase servers are encrypted in transit using secure HTTPS protocols.

9. Children's Privacy

The App does not address anyone under the age of 13 (or under 16 in certain EU jurisdictions). We do not knowingly collect personally identifiable information from children. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to take necessary actions.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us & Privacy Inquiries

If you have any questions about this Privacy Policy, or if you wish to exercise your data rights under GDPR or LGPD, please contact us at: privacy@alarmrotation.com.

← Return to Home