Privacy Policy

How WakeAt handles data

Effective September 17, 2026.

1. Data controller

Paolo Racca, an individual in Italy — wakeat@proton.me. WakeAt is currently a personal, non-commercial project.

2. Scope

This policy applies to the WakeAt Android app, the official landing page and messages voluntarily sent to the contact address. It does not govern independent third-party sites or services, which are covered by their own notices.

3. Local app data

WakeAt stores in the Android sandbox onboarding status, language, theme, selected sound, destinations and coordinates, radiuses, timers and deadline, trip state and latest fix, three quick destinations, five recent destinations, up to ten named routes, local diagnostics and up to twenty reports.

Each report includes the destination name, times, duration, outcome and trigger, fix counts and intervals, time in high accuracy, initial/final battery and temperature, estimated drain and technical device context. It contains no coordinates or route. Notes are free text: they may contain any information you choose to enter and should be reviewed before sharing. Android backup and transfer of app data to a new device are disabled.

4. Location and active trips

With permission, WakeAt uses approximate or precise location to centre the map. Only after the user explicitly starts a trip does it use fixes, accuracy and timing to calculate distance, average speed, energy-aware cadence, the geographic threshold and the GPS-loss timer estimate locally. Monitoring continues through a foreground service and persistent notification even with the screen off or the app not visible, and ends when the user taps Stop or acknowledges the alarm.

WakeAt sends no GPS fixes, route or history to its own servers and does not request the Android ACCESS_BACKGROUND_LOCATION permission. Location permission is optional, but the proximity alarm cannot work without it. You can refuse or revoke it in Android settings.

5. Maps and OpenFreeMap

MapLibre loads styles, fonts and tiles over HTTPS from OpenFreeMap, operated by Hyperknot Software Kft.; OpenFreeMap may use Cloudflare as its CDN. Requests necessarily reveal the displayed geographic area and network data, including the IP address. We do not send these services an account or trip history.

OpenFreeMap states that ordinary logs are anonymised without IP addresses and that temporary IP logging may be enabled for no more than 30 days during abuse or security incidents. Read the OpenFreeMap privacy policy, its terms and the Cloudflare privacy policy.

6. Search, Photon and the device Geocoder

As you type in search, WakeAt sends the query text over HTTPS to the public Photon instance at photon.komoot.io, operated by komoot GmbH. That text may reveal a place of interest. If the initial results are sparse, it may send up to two variants of the same search, for example by reversing place and locality or specifying that the place is a station. The result limit and a language preference supported by the provider are also sent; Italian uses Photon’s default local-language mode. The service additionally receives the IP address and ordinary HTTP technical data needed to respond. WakeAt does not save a query history and does not send Photon your GPS position, saved coordinates, an account or trip history. Results derive from OpenStreetMap data.

komoot may process queries and technical data under its own policy. Photon’s public page states no service-specific retention period, and WakeAt does not control provider logs. If Photon fails or returns few results, WakeAt may also query the Geocoder available on the device and merge its suggestions. Reverse geocoding of selected points uses the same Geocoder. Depending on the manufacturer and Android configuration, queries or coordinates may be sent to the installed provider and handled under its policy. You can avoid text search and choose a point on the map. Read the public Photon service terms, komoot’s general privacy policy and the OpenStreetMap terms.

7. Landing page and hosting

The landing page uses no analytics, advertising pixels, fingerprinting, forms or profiling cookies. If you change theme, it stores only that preference in localStorage, which you can remove by clearing site data. The site loads local assets and embeds no remote content.

When hosted on Cloudflare Pages, Cloudflare processes traffic and security data such as IP addresses, system configuration and HTTP requests to deliver and protect the site. WakeAt does not use that data to profile visitors.

8. Email and beta

Contact buttons open your email client; no landing-page form transmits data. If you send a message, we process your email address, content, metadata and chosen attachments to reply, manage beta participation, provide support and protect legal rights. Please do not send unnecessary or sensitive data.

9. Purposes and legal bases

• providing the app, alarm, local diagnostics, website and requested replies: performance of the service or steps requested by the data subject, GDPR Art. 6(1)(b);
• protecting the site and services, preventing abuse, preserving integrity and defending rights: legitimate interests, Art. 6(1)(f);
• meeting legal duties or valid authority requests: Art. 6(1)(c).

Android permissions are revocable technical controls and do not constitute consent to unrelated purposes. If a future feature requires consent, it will be requested separately and can be withdrawn.

10. Recipients, sharing and transfers

Where necessary, data may be handled by OpenFreeMap/Hyperknot Software Kft., Cloudflare, komoot GmbH as operator of the public Photon instance, the device Geocoder provider, the email provider and apps you choose in the Android Sharesheet. When you share a CSV or other content, the selected recipient operates under its own terms.

Some providers may process data outside the European Economic Area using adequacy decisions, standard contractual clauses or other safeguards stated in their policies. WakeAt does not sell personal data, share it for behavioural advertising or perform profiling.

11. Retention and deletion

Local data remains until deletion through the available controls, automatic replacement or uninstallation. There are three quick slots; the app retains at most 20 reports, 5 recent destinations and 10 named routes. A CSV created in private cache may remain until Android or WakeAt clears the cache or the app is uninstalled; shared copies are controlled by the recipient app. Emails are retained for up to 12 months after the latest interaction unless legal duties, disputes or an applicable deletion request require otherwise.

OpenFreeMap states that IP addresses logged for security incidents are deleted within 30 days; other providers apply the periods in their policies.

12. Security

Local data is isolated in the Android sandbox and excluded from backup and device transfer; cleartext traffic is disabled and exports are exposed read-only through the protected FileProvider mechanism. Report metrics contain no coordinates or route, but destination names, technical context and free-text notes may be personal. The production landing page uses a restrictive Content Security Policy. No safeguard is infallible: protect your device, install updates and review exports before sharing.

13. Data subject rights

Where GDPR Articles 15–22 apply, you may request access, rectification, erasure, restriction, portability or object. Where processing relies on consent, you may withdraw it without affecting earlier processing. Email wakeat@proton.me; we normally respond within one month and may request proportionate information to verify identity.

You may also complain to the Italian Data Protection Authority, your local supervisory authority or seek a judicial remedy.

14. Children

WakeAt is not directed specifically at children under 14. A minor should use it with a parent or guardian involved. We do not knowingly collect children’s data for advertising or profiling; contact us if you believe data was submitted improperly.

15. Profiling and automated decisions

WakeAt performs no profiling and makes no automated decisions with legal or similarly significant effects. The dynamic timer processes average speed and distance locally only to estimate a cautious trip fallback. Reliability checks locally assess available permissions and settings and display warnings or blockers before departure; their outcome is not sent to WakeAt.

16. Changes

We will update this policy when features, providers or processing change. Material changes will be announced in the app or on the site before taking effect where reasonably possible. Provider policies remain independent and may change; the date above identifies this version.

References: Regulation (EU) 2016/679, OpenStreetMap/ODbL, WakeAt Terms.