1. Who we are
Clocky (“the App”) is an Android alarm clock operated by Glitgrace, Visnagar, Gujarat, India (“Glitgrace”, “we”, “us”). For the data described here Glitgrace is the “controller” / “data fiduciary” / “business”. Privacy contact: support@glitgrace.in.
This policy covers the Clocky Android app and this website (clocky.glitgrace.in). Clocky has no user accounts.
2. Summary
- Your alarms, labels, settings, streaks and Pomodoro data are stored on your device.
- We use Google and Meta services for ads, analytics, crash reports and messaging, which process technical and device identifiers.
- Payments are processed by Google Play; we never see your card details.
- We do not sell personal data for money. Ad providers may use advertising identifiers; you can limit this (see “Your choices”).
- Sensors used in missions are processed on the device and not stored or sent to us.
3. What we collect
Stored only on your device
- Alarms: times, repeat days, labels, sounds, volume, vibration, snooze and mission settings
- Wake-up records, streak data, Pomodoro settings and statistics, theme and preference choices
- Audio files or wallpapers you choose as custom tones or backgrounds (we do not upload them)
Sensor data used for missions
Squat Reps uses the accelerometer, Walk-Off Steps uses the step sensors (activity recognition permission), and Turn On Lights uses the ambient light sensor. This data is processed in real time on your device only. It is not recorded, stored or transmitted. Clocky does not use your camera, microphone or location.
Collected automatically when you use the App
- Identifiers: Firebase app-instance ID, Android advertising ID (when ads are shown and permitted), Firebase Cloud Messaging token
- Device & app data: device model, OS version, app version, language, time zone, approximate location derived from IP address (country/region level)
- Usage data: screens viewed and features used (for example, which mission type is selected), ad and purchase events
- Diagnostics: crash reports and performance traces
- Purchase status: subscription state and purchase token from Google Play (not your card or payment details)
Information you send us
Emails and any attachments you send to support, including your email address and the content of your message.
4. App permissions
| Permission | Why Clocky uses it |
|---|---|
| Notifications | Show alarm, Pomodoro and service notices. |
| Exact alarms / schedule exact alarm | Ring at the precise time you set. |
| Full-screen intent, display over other apps | Show the ringing screen and mission over the lock screen. |
| Wake lock, vibrate, foreground service (media playback) | Keep the alarm sound and vibration running reliably. |
| Receive boot completed | Restore your alarms after the phone restarts. |
| Ignore battery optimisations | Ask permission to keep alarms from being delayed by battery saving. |
| Activity recognition | Count steps for the Walk-Off Steps mission. |
| Read media audio / external storage (older Android) | Let you pick your own audio file as an alarm tone. |
| Internet / network state | Ads, analytics, crash reports, remote configuration, Google Play services. |
Optional permissions can be refused or revoked in Android settings; the related feature may then be unavailable.
5. How we use data and our legal bases
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Provide the App and your alarms, missions and purchases | Performance of a contract |
| Verify subscriptions and prevent fraud or abuse | Contract; legitimate interests |
| Fix crashes, measure performance, understand feature usage, improve the App | Legitimate interests (and consent where required by law) |
| Show ads and measure ad performance; use advertising ID | Consent where required (EEA, UK, Switzerland); otherwise legitimate interests |
| Send push or in-app messages about the App | Legitimate interests; consent where required |
| Answer support and privacy requests | Legitimate interests; legal obligation |
| Comply with law and protect our rights | Legal obligation; legitimate interests |
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Where we rely on consent you can withdraw it at any time without affecting earlier processing.
6. Service providers and third parties
We share data only with providers that help us run the App, under their own terms and privacy policies:
| Provider | Purpose | Policy |
|---|---|---|
| Google Firebase (Analytics, Crashlytics, Performance Monitoring, Remote Config, Cloud Messaging, In-App Messaging) | Analytics, stability, configuration, notifications | policies.google.com/privacy |
| Google AdMob | Advertising in the free version | policies.google.com/technologies/ads |
| Google Play (Billing, In-App Review, In-App Update) | Subscriptions, reviews, updates | policies.google.com/privacy |
| Meta Platforms (Facebook SDK) | App event measurement and ad attribution | facebook.com/privacy/policy |
We may also disclose data to professional advisers, to authorities when legally required, and to a successor in a merger or sale of the business (with notice where required). We require providers to protect data and use it only for the services they provide to us.
7. Advertising and your choices
The free version shows ads served by Google AdMob. Ads may be personalised using your advertising ID. Under some US state laws this may be considered “sharing” for cross-context behavioural advertising or “targeted advertising”. You can:
- Reset or delete your advertising ID, or opt out of ads personalisation: Android Settings → Privacy → Ads (path varies by device).
- Remove ads by subscribing to Clocky Pro.
- In the EEA, UK and Switzerland, manage consent where the App offers a consent choice, and via your Google account ad settings at adssettings.google.com.
- Disable notifications in Android settings.
- Opt out of Meta app event data use in your Facebook “Off-Facebook activity”/ad preferences.
We do not respond differently to browser “Do Not Track” signals because the App does not track you across websites.
8. International transfers
We are based in India, and our providers (including Google and Meta) process data in many countries, including the United States and Singapore. Where law requires, transfers rely on safeguards such as the EU/UK standard contractual clauses, adequacy decisions, the EU-US Data Privacy Framework (for certified providers) or your consent.
9. How long we keep data
| Data | Retention |
|---|---|
| Data on your device | Until you delete it, clear app data or uninstall |
| Firebase Analytics events | Per our Firebase settings, generally 2 to 14 months |
| Crash reports | Up to 90 days (Crashlytics default) |
| Support emails | While we resolve your request and up to 24 months afterwards |
| Purchase / tax records | As required by law (often 6–8 years) |
10. Security
We use reasonable technical and organisational measures, including encrypted connections (HTTPS/TLS) to our service providers and access controls. No system is completely secure; please keep your device updated and locked.
If a breach affects your data, we will notify you and regulators where the law requires.
11. Your rights
Because Clocky has no accounts and most analytics data is not linked to your name, we may need to ask you for information to find data relating to you. We reply within 30 days (or sooner where required) and do not charge a fee except where requests are manifestly excessive. To exercise any right, email support@glitgrace.in.
European Economic Area, United Kingdom and Switzerland
You can ask to access, correct, erase, restrict or receive a copy of your data, object to processing based on legitimate interests, and withdraw consent. You may complain to your local data protection authority (for example, the ICO in the UK or your EU member-state authority).
United States (California, Colorado, Virginia, Connecticut, Texas and other states)
Depending on your state, you may have the right to know/access, delete, correct, obtain a portable copy, opt out of targeted advertising, sale and sharing, and limit use of sensitive data. We do not sell personal information for money and do not knowingly sell or share data of anyone under 16. We do not collect sensitive personal information as defined by the CPRA for inferring characteristics. We will not discriminate against you for exercising rights. You may use an authorised agent; we may verify identity. To opt out of sharing for advertising, use the controls in “Advertising and your choices” or email us. If we deny a request you may appeal by replying to our decision email.
Brazil (LGPD)
You may request confirmation of processing, access, correction, anonymisation or deletion, portability, information about sharing, and revoke consent, and may lodge a complaint with the ANPD.
Canada (PIPEDA, Quebec Law 25)
You may request access to and correction of your personal information and withdraw consent, subject to legal limits; you may complain to the Office of the Privacy Commissioner of Canada or your provincial authority.
Australia (Privacy Act 1988) and New Zealand
You may request access to and correction of your personal information. If you are unhappy with our response you may complain to the OAIC (Australia) or the Privacy Commissioner (New Zealand).
India (Digital Personal Data Protection Act, 2023)
You may request access to a summary of your personal data, its correction and erasure, grievance redressal, and nominate another person to exercise your rights if you die or become incapacitated. Write to support@glitgrace.in; if unresolved you may approach the Data Protection Board of India.
South Africa, Japan, South Korea, Singapore, UAE and elsewhere
We honour comparable rights under POPIA, APPI, PIPA, PDPA and other applicable local laws, including access, correction, deletion and objection.
12. Children
Clocky is not directed at children under 13, and we do not knowingly collect their personal data. In some countries the minimum age for consent to data processing is higher (up to 16 in parts of the EU); where so, you must meet that age or have parental consent. Users under 18 should use paid features only with a parent or guardian’s permission. If you believe a child has provided data, contact us and we will delete it.
13. This website
This website does not use cookies, advertising or analytics trackers, and loads no third-party fonts or scripts. It is hosted on GitHub Pages, which may log IP addresses and request data for security and operation (GitHub Privacy Statement). If you use the contact form, your email app opens a draft to us; we receive only what you send.
14. Changes to this policy
We may update this policy as the App or the law changes. We will change the “Last updated” date and, for material changes, give notice in the App or on this site. Please review it periodically.
15. Contact us
Glitgrace, Visnagar, Gujarat, India
Email: support@glitgrace.in (subject: “Privacy request – Clocky”)