Privacy Policy

1. Scope and controller

This Privacy Policy describes how Komei Kinjo (“we,” “us,” or “our”) processes information in the PenFit Alarm iPhone app, on wakebomb.com, and in related support and device-transfer services (the “Service”). PenFit Alarm was previously named WakeBomb; the website and support email continue to use the wakebomb.com domain.

The controller is Komei Kinjo, Ogibashi, Koto City, Tokyo, Japan. For privacy questions or requests, email support@wakebomb.com. Additional provider information appears in our Legal Notice.

You do not need to create a PenFit account, provide your name or email address, or sign in to use the alarm. Apple's purchase services use your Apple Account separately.

2. Information processed on your device

Alarms, missions, and wake-up history

The app stores your alarm times, repeat days or one-time setting, selected sounds, exercise goals, Focus Mode and penalty settings, active wake-up state, and app preferences locally. The wake-up log can include scheduled wake time, alarm response time, mission completion time, exercise repetitions or hold seconds, success or failure, and available failure reasons. Streaks and Unlock Point balances, earning events, exchanges, and mission uses are also stored locally.

If you enter a reflection after an unsuccessful wake-up, the selected reason, action, and any text you write are stored on your device. Onboarding choices are used on-device to prepare your alarm and preferences. Alarm schedules and active wake-up sessions are not uploaded to our backend.

Camera and motion

Camera missions analyze live frames and body-position information on your iPhone using on-device pose and object-detection models, including MediaPipe. These exercise camera frames are not recorded, saved, or uploaded by PenFit Alarm. We do not use them to identify you or train a cloud AI model. Walking uses the motion and step information needed to count mission progress on your device.

Microphone and audio files

The microphone is used when you choose to record a sound. Recordings, imported audio files, their names and duration, and converted playback copies are stored in the app's local sound library. Importing a file into My Sounds is not an upload to us. You can delete custom sounds in the app. A file chosen from a cloud-backed file provider may first be downloaded by that provider under its own terms.

Photos and share images

The system photo picker gives the app the image you choose, not unrestricted access to your photo library. The selected image is used locally to compose a wake-up log image with your chosen background and text color. PenFit Alarm does not upload the photo or generated image to our servers.

When you confirm a destination in the system share sheet, the result image and accompanying result text are passed to that destination. This may disclose your photo, wake-up time, streak, exercise details, and other information visible in the preview. Saving or sharing a copy places it outside our control; the selected app or service and your own device or cloud-backup settings then apply.

Focus Mode and Hard Mode

Apple's Screen Time frameworks provide system-generated tokens for selected apps, categories, or websites. These tokens, blocking windows, and protection settings are stored on your device and shared with PenFit's on-device extensions where needed. We do not send the selections or your browsing history to our servers. System-provided app names or icons may be displayed on your device to explain what is blocked.

Alarms, reminders, and diagnostics

AlarmKit schedules system alarms locally. Optional notifications, such as the alarm-volume reminder and Penalty Alarm notice, are scheduled locally through iOS. The current app does not register notification tokens with our backend or use a server to deliver wake-up alarms.

The app can keep bounded local diagnostic records about alarm events, timing, and errors to troubleshoot wake-up behavior. It does not automatically upload these records to our server. If you send us logs or screenshots for support, they become part of that support conversation. iOS may separately provide developer crash or diagnostic information according to your Apple analytics settings.

3. Optional encrypted Device Transfer

Device Transfer is initiated by you in Settings. The app encrypts supported data on the source iPhone before uploading it to our Cloudflare-hosted service. The package can contain wake-up history and exercise summaries, failure details and reflections, the Unlock Point ledger and available mission uses, and supported preferences such as your accent color and guide figure.

The package does not contain alarm schedules, active wake-up sessions, Focus Mode selections, camera footage, photos, imported sounds, or microphone recordings. Pro access is restored separately through Apple's purchase services.

We process the encrypted package, a random installation identifier and hashed authentication credential, a derived lookup identifier, package size and format, checksum, transfer identifiers, and creation, expiry, redemption, and completion timestamps. These are used to authenticate devices, deliver the transfer, verify integrity, prevent duplicate redemption, and clean up expired data.

The transfer code and decryption key are not sent to our server. The server stores ciphertext rather than readable history. Anyone with the code may be able to retrieve and decrypt the package before it expires or is consumed. Treat the code like a password; do not post it or include it in support messages.

Device Transfer is optional and is not continuous cloud backup or synchronization. Without a usable device, backup, or transfer, we may be unable to recover data that existed only on your iPhone.

4. Purchases and Pro access

Apple processes payments. RevenueCat helps us verify purchases, restore entitlements, determine introductory-offer eligibility, and manage Pro access. It processes an automatically generated app user identifier, transaction and product identifiers, purchase and subscription status and history, offer and expiry information, and related app, platform, device, and network information. The app does not ask you to supply a name or email to RevenueCat.

We also use purchase information for subscription reporting and to understand purchase performance, including RevenueCat's dashboard reports. This is not advertising tracking. We do not receive your full payment-card details. Restoring purchases can associate entitlements across installations through the purchasing Apple Account.

5. Support, website, and security

If you contact support, we receive your email address, message, and any attachments or diagnostic information you choose to send. Avoid sending unnecessary sensitive information, payment credentials, or transfer codes.

Hosting and security providers process technical request information such as IP address, request time, browser or app information, requested route, and errors to deliver and protect the website and transfer service. The transfer backend uses rotating, keyed hashes derived from network addresses and short-lived counters to limit abuse; it does not store raw IP addresses in its application database. Infrastructure providers may separately process request and security logs.

The website does not embed advertising or third-party analytics scripts. Hosting or security controls may use necessary technical storage when applicable. Opening external links subjects that visit to the destination's own policy.

6. Purposes and legal bases

We process information to provide requested features, verify and restore purchases, deliver encrypted transfers, respond to support requests, maintain and secure the Service, troubleshoot issues, prevent fraud or abuse, understand subscription performance, and meet legal obligations.

Where the GDPR or UK GDPR applies, the legal basis depends on the activity: performance of our contract for requested features and purchases; consent where required for optional data access or processing; legitimate interests in proportionate security, support, reliability, and purchase reporting; and compliance with legal obligations. We consider your rights when relying on legitimate interests. Device permission is a technical authorization and does not replace any separate consent required by law.

We do not sell personal data, use it for targeted advertising, or combine it with other companies' app or website data for advertising tracking. We do not make decisions with legal or similarly significant effects about you based solely on automated processing.

7. Service providers and other disclosures

Providers used as needed for the Service include:

• Apple — App Store payments, purchase restoration, iOS permissions, AlarmKit, Screen Time, system sharing, and any Apple-managed backup or diagnostics you enable. Apple Privacy Policy.
• RevenueCat — purchase verification, entitlement and subscription management, offer eligibility, and purchase reporting. RevenueCat Privacy Policy.
• Cloudflare — website and transfer-service hosting, encrypted transfer storage, request security, and support email routing. Cloudflare Privacy Policy.
• Google — receipt and handling of messages sent to our support inbox. Google Privacy Policy.

We require service providers acting on our behalf to protect personal data consistently with this policy and applicable law, and to use it only for the services they provide to us. Apple and other providers may also act independently for their own services under their own policies.

Information may also be disclosed at your direction, to comply with a legal obligation, to protect rights or safety, or as part of a lawful business transfer subject to appropriate safeguards and notice where required. We do not operate a public social feed for your wake-up results.

8. Retention and deletion

• On-device data: retained while needed for your alarms, history, and preferences. You can remove alarms and custom sounds using the app's controls. Deleting the app removes its ordinary local app data; offloading the app does not. Some Keychain credentials may remain on the device, and device backups, shared images, and copies saved in Photos or Files are managed separately through iOS or the relevant provider.
• Transfer packages: expire 7 days after creation and cannot be redeemed after expiry. A successful restore deletes the server package when its completion acknowledgement reaches the server. If that acknowledgement fails, the encrypted copy remains until expiry and cleanup. Expired packages are removed by the daily maintenance process, so physical deletion may occur after the expiry time rather than at that exact moment.
• Installation credentials: server records inactive for 90 days are removed at the next scheduled maintenance run.
• Abuse counters: transfer-service database counters older than 2 days are removed by scheduled maintenance. Infrastructure security-log retention is governed by the relevant service and configuration.
• Purchases: retained as needed to verify entitlements, restore purchases, maintain transaction records, address disputes, and satisfy legal requirements. Apple and RevenueCat apply their own retention obligations.
• Support and operational records: retained only as long as reasonably necessary for the request, security, troubleshooting, dispute resolution, or applicable legal obligations.

To request deletion of information we hold, contact support@wakebomb.com. We may need a non-secret identifier or other proportionate information to locate and verify your request. We cannot read or remotely delete data stored only on your device, and we cannot delete copies already sent to another service on your behalf. Deleting data or the app does not cancel an App Store subscription.

9. Your permissions and rights

You can review or revoke camera, microphone, Motion & Fitness, notification, AlarmKit, and Screen Time permissions in the relevant iOS settings. The app's Settings also provides a shortcut to its system settings. Denying permission may prevent the corresponding feature from working; it does not grant us access through another route. Use Apple's subscription settings to manage or cancel Pro.

Depending on your location and applicable law, you may request access, a copy or portability, correction, deletion, restriction of processing, or cessation of use or disclosure; object to processing based on legitimate interests; withdraw consent without affecting processing that was lawful before withdrawal; and complain to your local data-protection authority. In Japan, requests may include disclosure of the purpose of use and applicable third-party disclosure records.

Email our privacy contact to exercise these rights. We respond within the period required by applicable law and explain any lawful limitation. We do not require your transfer code, decryption key, Apple password, or full payment-card number to handle a request.

10. International processing and security

We are based in Japan. Our providers may process information in Japan, the United States, and other countries where they or their subprocessors operate. Those countries may have different data-protection laws. Where applicable law requires a cross-border transfer safeguard, we use an applicable adequacy framework or contractual and other safeguards appropriate to that transfer. Contact us for information about the safeguards relevant to your data.

Measures include encrypted transport, on-device encryption of transfer packages, device-bound Keychain credentials, hashed server credentials, restricted provider access, expiry, and abuse controls. No system can guarantee absolute security. Protect your device and transfer code, and keep your operating system updated.

11. Children

The Service is not directed to children under 13. Where a higher age or parental authorization is required by local law, that requirement applies. We do not knowingly collect children's personal information in violation of applicable law. Contact us if you believe this has occurred so that we can investigate and take appropriate action.

12. Changes and contact

We may update this policy as the Service or applicable requirements change. We will update the date on this page and provide additional notice or request consent where required. A policy change alone does not authorize a new use that legally requires your consent.

Privacy inquiries: support@wakebomb.com
Controller: Komei Kinjo, Ogibashi, Koto City, Tokyo, Japan.