Privacy Policy
Effective date: May 10, 2026 | Last updated: May 10, 2026
1. Introduction
SnoozeWar ("we," "us," or "our") operates the SnoozeWar mobile application (available on iOS and Android) and the websites snoozewar.com and snoozewar.app (collectively, the "Service"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Service.
By downloading, installing, or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, please do not use the Service.
We are committed to protecting the privacy of all users, including children. Our Service is not directed at children under the age of 13 (or 16 in the European Economic Area).
2. Data Controller
SnoozeWar is the data controller responsible for your personal data. For any privacy-related inquiries, you can contact us at:
- Email: privacy@snoozewar.com
- Website: snoozewar.com
3. Information We Collect
3.1 Information You Provide Directly
- Account Information: When you create an account, we collect your name and email address.
- Profile Data: Your preferred wake time, alarm settings, mission preferences, morning routine configuration, and display name.
- Chronotype Assessment Responses: Your answers to the chronotype questionnaire used to determine your biological clock type (lion, bear, wolf, or dolphin).
- Support Communications: Information you provide when contacting our support team.
- Referral Data: When you use the referral program, we process the referral codes shared between users.
3.2 Information Collected Automatically
- Usage Data: Alarm dismissal times, mission completion data (type, duration, success/failure), snooze frequency and timing, streak history, Life Score calculations and component scores, morning routine completion status.
- Device Information: Device model, operating system and version, unique device identifiers (Apple IDFV on iOS, Android ID or equivalent on Android), screen resolution, language settings, and timezone.
- App Performance Data: Crash reports, app launch times, feature usage frequency, and error logs.
- Notification Interaction Data: Whether push notifications were delivered, opened, or dismissed.
3.3 Health and Wellness Data
SnoozeWar collects data related to your sleep timing and chronotype. Under certain regulations, including the EU General Data Protection Regulation (GDPR) Article 9 and applicable health data protection laws, this may be classified as special category health data. We treat all sleep-related and chronotype data with the highest level of protection:
- We obtain your explicit consent before collecting any health-related data.
- We process chronotype and sleep timing data on your device whenever technically feasible.
- We never sell health-related data to third parties.
- We never share health-related data with advertising networks.
- We never use health-related data for advertising or marketing purposes.
3.4 Information We Do NOT Collect
- We do not collect precise geolocation data (GPS coordinates).
- We do not access your contacts, photos, camera, or microphone unless you explicitly enable a specific mission type (e.g., photo mission) and grant permission.
- We do not collect financial information directly — all payment processing is handled by Apple App Store or Google Play Store.
- We do not track your browsing activity outside of the SnoozeWar app.
4. How We Use Your Information
We use the information we collect for the following purposes:
4.1 To Provide and Operate the Service
- Alarm functionality, mission tracking, and streak management.
- Life Score calculation based on wake consistency, routine completion, streak length, chronotype alignment, and protocol compliance.
- Dare Engine personalization — generating contextually relevant messages based on your usage patterns.
- Chronotype detection and personalized schedule recommendations.
- Credit wallet management and referral program operation.
- Push notification delivery for alarms, streak reminders, and Dare Engine messages.
4.2 To Improve the Service
- Analyzing aggregated, anonymized usage patterns to improve features.
- Identifying and fixing bugs, crashes, and performance issues.
- Understanding which features are most and least used.
4.3 To Communicate With You
- Sending service-related notifications (alarm reminders, streak warnings).
- Responding to your support requests.
- Notifying you of material changes to the Service or this Privacy Policy.
4.4 To Ensure Safety and Compliance
- Preventing fraud, abuse, and violations of our Terms of Service.
- Complying with applicable legal obligations.
5. Legal Basis for Processing (GDPR — EEA/UK Users)
If you are located in the European Economic Area or United Kingdom, we process your personal data under the following legal bases:
- Consent (Article 6(1)(a) and Article 9(2)(a)): For health-related data (chronotype assessment, sleep timing data). You may withdraw consent at any time.
- Performance of Contract (Article 6(1)(b)): For providing the Service you signed up for, including account management, alarm functionality, and subscription/purchase processing.
- Legitimate Interest (Article 6(1)(f)): For improving the Service, ensuring security, and preventing fraud. We balance our interests against your rights and freedoms.
- Legal Obligation (Article 6(1)(c)): When required by applicable law or regulation.
6. Data Sharing and Disclosure
We do not sell your personal data. We do not display advertisements and do not share data with advertising networks.
We may share your data with the following categories of recipients:
- Cloud Infrastructure Providers: For hosting and storing data securely (e.g., MongoDB Atlas, cloud hosting providers). These providers process data on our behalf under strict data processing agreements (DPAs).
- Analytics Services: We use privacy-respecting analytics to understand aggregated usage patterns. We do not share personally identifiable information with analytics providers.
- Crash Reporting Services: To identify and fix technical issues. Crash reports may include device information and app state at the time of the crash.
- Payment Processors: Apple App Store and Google Play Store handle all payment processing. We do not receive or store your credit card information.
- Legal Authorities: When required by law, subpoena, court order, or governmental regulation.
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your data may be transferred. We will notify you of any such change.
7. Data Storage and Security
- Sleep timing and chronotype data is processed on-device first. Server-side storage is used only when required for cross-device sync, streak verification, or referral tracking.
- All data in transit is encrypted using TLS 1.2 or higher.
- All data at rest is encrypted using AES-256 or equivalent industry-standard encryption.
- We implement access controls, audit logging, and regular security reviews.
- We retain your data only for as long as necessary to provide the Service and fulfill the purposes described in this policy.
8. Data Retention
- Active Account: We retain your data for as long as your account is active and the Service is being used.
- Inactive Account: If your account is inactive for 24 months, we may delete or anonymize your data after providing notice.
- Account Deletion: Upon your request, we will delete your personal data within 30 days, except where retention is required by law.
- Aggregated/Anonymized Data: We may retain anonymized, non-personally-identifiable data indefinitely for analytics and improvement purposes.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format (JSON or CSV).
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw consent at any time for consent-based processing (e.g., health data collection). Withdrawal does not affect the lawfulness of processing prior to withdrawal.
- Right to Lodge a Complaint: File a complaint with your local data protection authority.
To exercise any of these rights, contact us at privacy@snoozewar.com. We will respond within 30 days (or sooner where required by applicable law).
10. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: What personal information we collect, use, and disclose.
- Right to Delete: Request deletion of your personal information.
- Right to Opt-Out of Sale: We do not sell personal information. No opt-out is required.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
11. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. When we transfer data outside the EEA/UK, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms.
12. Children's Privacy
The Service is not intended for children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected personal information from a child under the applicable age, we will take steps to delete that information within a reasonable timeframe.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@snoozewar.com.
13. Third-Party Links and Services
The Service may contain links to third-party websites or services (e.g., social media profiles, research paper links). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.
14. Push Notifications
We may send push notifications for alarm functionality, streak reminders, Dare Engine messages, and service updates. You can manage or disable push notifications at any time through your device's settings. Disabling push notifications may affect alarm functionality.
15. Permissions We Request
The SnoozeWar app may request the following device permissions:
- Notifications: Required for alarm alerts and reminders.
- Motion/Accelerometer: Required for the shake mission to detect physical device shaking.
- Camera: Optional — only requested if you enable the photo mission. Photos are processed locally and not uploaded to our servers unless you explicitly choose to share them.
- Barcode Scanner: Optional — only requested if you enable the barcode scan mission.
- Health Data (HealthKit/Health Connect): Optional — only requested if you enable chronotype detection features. Data accessed from HealthKit or Health Connect is used solely within the app for chronotype assessment and is not shared with third parties or used for advertising.
- Alarm/Timer (AlarmKit on iOS 26+): Required for system-level alarm functionality.
All permissions are requested at the point of use (not during onboarding) with clear explanation of why the permission is needed.
16. Cookies and Website Tracking
Our website (snoozewar.com, snoozewar.app) may use essential cookies for site functionality. We do not use advertising cookies or tracking pixels. We do not engage in cross-site tracking.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last updated" date at the top of this page.
- Notify you through the app via an in-app notification.
- For significant changes, request your renewed consent where required by law.
Continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.
18. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data:
- Email: privacy@snoozewar.com
- Website: snoozewar.com
If you are in the EEA/UK and are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority (Data Protection Authority).