Privacy Policy

Effective date: July 15, 2026
App: Launch (the “App”)
Provider: Jack Hall, doing business as “Launch” (“we,” “us,” “our”)
Contact: launchalarmclock@gmail.com

This Privacy Policy describes how Launch collects, uses, shares, and protects your personal data when you use the App, and the rights you have over that data.

1. Summary

We collect the account you sign in with. Your alarms, missions, and saved scene photos are stored locally on your device so the App can function.
Most mission processing (barcode scanning, Scene photo matching, step counting) happens on your device. Only the “Mirror selfie” and “Touch grass” photo missions send an image off your device for verification.
We do not sell your personal data and we do not use it for third-party advertising.
You can delete your account and all associated data at any time within the App, and you can request a copy of your data by email.

2. Definitions

Personal data — information that identifies or relates to an identifiable person.
Service provider / processor — a company that processes data on our behalf under contract.
You — the person using the App.

3. Data we collect

Information you provide

Account information. When you sign in with Apple or Google, we receive and store your email address and a provider account identifier, and your name if you choose to share it. Authentication is handled by Supabase.
Alarm and mission content. The alarms and missions you create — wake times, alarm names, repeat days, the mission type used to dismiss each alarm, any saved barcode values, any reference photos you save for a Scene mission, snooze settings, and the apps you select to block. This content currently remains on your device; it is not synced to our database.
Support communications. If you email us, we receive your message and contact details.

Information collected automatically

Mission (dismissal) events. When an alarm fires we record whether the mission was completed, the mission type, a match/confidence score where applicable, and a timestamp, to power your streaks and statistics.
Device and diagnostic data. Basic technical information such as device model, operating-system version, app version, and error or diagnostic logs used to operate, secure, and debug the App.

Information from device features (only with your permission)

Camera and photos. Missions may use the camera. Barcode scans are read entirely on your device. Scene missions compare your photo to your saved reference image entirely on your device using Apple’s Vision framework; the image is not uploaded. The Mirror selfie and Touch grass missions send a downscaled copy of your photo to Anthropic’s API to confirm completion (see Section 6). Launch does not add that photo to your account or retain a copy after the verification request.
Motion and fitness. The Steps mission reads your step count from the device’s motion sensor (Apple Core Motion) to detect completion, on your device.
Screen Time / Family Controls. If you enable app blocking or “Prevent App Deletion,” the App uses Apple’s Family Controls and Managed Settings frameworks. Apple represents your selected apps as opaque tokens; we do not receive the identities of the apps you block, and this information stays on your device under Apple’s control.
Notifications. If you allow notifications, we schedule local alarm notifications on your device.

4. How we use your data

We use your data to:

provide the App’s core function — scheduling alarms and enforcing dismissal missions;
calculate and display your stats and streaks;
verify photo-based missions;
provide customer support and respond to your requests;
maintain security, prevent fraud and abuse, and debug problems; and
comply with legal obligations.

5. Legal bases for processing (EEA/UK)

Where the GDPR applies, we process personal data on these bases: performance of a contract (to provide the App you request), legitimate interests (to secure, maintain, and improve the App), consent (for device permissions such as camera, motion, and notifications, which you can withdraw in iOS Settings), and compliance with legal obligations.

6. How we share your data

We share data only with service providers that process it on our behalf, and only as needed:

Supabase — authentication, database, storage, and the serverless function that verifies photo missions.
Apple — Sign in with Apple; Family Controls / Screen Time frameworks.
Google — Google Sign-In.
Anthropic — used by our photo-verification function to confirm the Mirror selfie and Touch grass missions. The downscaled image is sent only to return a pass/fail result and is not used by Launch for any other purpose.

We may also disclose data if required by law, to enforce our terms, or to protect the rights, safety, and security of our users, the public, or us. If we are involved in a merger or acquisition, data may be transferred as part of that transaction, subject to this Policy.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

7. Data retention

We keep account information for as long as your account exists. Local alarm, mission, block-profile, barcode, and saved-scene data remain on your device and are removed when you sign out or delete your account. They are excluded from device backups. Launch does not retain copies of Mirror selfie and Touch grass photos after the verification request. Under Anthropic’s standard API retention terms, API inputs and outputs are deleted within 30 days unless retention is required for policy enforcement or law. Diagnostic logs are kept locally for a limited period for security and debugging.

8. Your rights and choices

Depending on where you live (including under the EEA/UK GDPR and the California CCPA/CPRA), you may have the right to:

access the personal data we hold about you;
receive a copy of it in a portable, machine-readable format;
correct inaccurate data;
delete your account and associated data;
object to or restrict certain processing; and
withdraw consent for device permissions at any time in iOS Settings.

How to exercise these rights

Delete your account at any time in the App: Settings → Support and legal → Delete account. This permanently removes your account, alarms, and mission history.
For access, a copy, or portability of your data, email launchalarmclock@gmail.com. We will verify your request and respond within the time required by law — generally within 30 days under the GDPR or 45 days under the CCPA.

We will not discriminate against you for exercising these rights. If you are in the EEA/UK, you also have the right to lodge a complaint with your local data protection authority.

9. Security

We use industry-standard safeguards including encryption in transit, account-scoped access controls, and iOS Data Protection for locally stored alarms and mission data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International data transfers

Your data may be processed in countries other than where you live, including the United States. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) for these transfers.

11. Children

The App is not directed to children under 13 (or the minimum age of digital consent in your country, such as 16 in parts of the EEA), and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

12. Links to other services

The App may link to third-party sites or services (for example, our support email or social pages). We are not responsible for their privacy practices; review their policies separately.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the effective date and, where appropriate, notifying you in the App. Continued use of the App after an update means you accept the revised Policy.

14. Contact us

Questions or requests regarding this Policy or your data: launchalarmclock@gmail.com.