Privacy Policy

Effective: October 2, 2026

This Privacy Policy explains how Carl Franzon ("we", "us") handles information when you use WakePlan (the "App") and this website. Carl Franzon is the controller of any personal data we process. Contact us using the details at the end of this policy.

WakePlan plans on your device. Planning, alarms, and calendar matching run locally, and your WakePlan configuration may also be backed up and synced through Apple's iCloud key-value storage under your Apple account. We do not operate an App backend, we do not create user accounts, and we do not embed crash or analytics SDKs.

Information we process

On your device

The App stores the content you create on your device and uses it only to plan tomorrow's wake time and schedule a local alarm.

iCloud backup and sync

When iCloud is available on your device and account, WakePlan copies supported configuration to Apple's iCloud key-value storage so it can carry over to a new device: contexts, default contexts, calendar rules, week plans, alarm overrides, your Google calendar selection, and default alarm tone and snooze settings. This data is stored and processed by Apple under your Apple account and Apple's terms, not by us, and we cannot access it. Some other preferences, such as notification preferences, may be kept with this storage but are not currently restored as part of backup. When a new device finds an existing backup during onboarding, you can restore it or start fresh on that device, which keeps the device separate from iCloud. In Settings → Backup, a device that started fresh can later reconnect, which replaces any existing iCloud backup with that device's data. WakePlan does not provide a control to erase iCloud data; manage iCloud storage and device backups through your Apple account and iOS settings.

Apple Watch and widgets

A summary of your upcoming plan is sent to the paired Apple Watch app and shared with WakePlan widgets on your device through an app group so they can show it.

Deleting data

Deleting the App removes its local app data from the device. It does not delete copies held independently of the App. iCloud key-value data and iCloud or device backups remain until you manage them through Apple's controls. Google sign-in credentials are kept in a device-only Keychain that may survive deleting the App, and WakePlan offers no separate Keychain management; to remove them, use Disconnect in Settings → Google Calendar before deleting the App (or after reinstalling it).

Local calendars (optional)

If you grant calendar permission in iOS, WakePlan reads calendars you select through Apple's EventKit on the device so it can match upcoming events to your rules. Local calendar access is optional; the App works without it. WakePlan does not create, edit, or delete calendar events through EventKit, and it does not upload calendar contents to our servers.

Google Calendar (optional)

If you choose to connect Google Calendar in Settings, WakePlan authenticates with Google using OAuth 2.0. Google processes sign-in under Google's Privacy Policy. WakePlan requests read-only access to Google Calendar (https://www.googleapis.com/auth/calendar.readonly). WakePlan does not request permission to create, edit, or delete Google calendar events.

When connected, WakePlan:

• Lists your Google calendars so you can choose which calendars to monitor in Settings → Google Calendar. You control access with per-calendar on/off toggles. Calendars you turn off are not read.
• Reads events from monitored calendars only — event title, start and end time, whether the event is all-day, and location — for upcoming days. WakePlan uses this information on your device to match your calendar rules (for example, matching an event title or calendar name to a wake-up context) and to plan tomorrow's alarm.

Calendar data fetched from Google is processed on your device and is not uploaded to our servers. We do not operate a backend that stores Google Calendar data. A cache of fetched Google events is kept locally on your device only; it is not stored in iCloud key-value storage. A cached copy is usable for up to 24 hours when loading; after that it is not loaded, and the next successful save replaces the record. Expiry is not physical deletion, and WakePlan may still hold already-loaded events in memory until the next refresh. OAuth access and refresh tokens are stored in your device's iOS Keychain (device-only, not synced), and Keychain items can survive deleting the App. Deleting the App does not revoke WakePlan's Google authorization. Disconnecting in Settings → Google Calendar removes the credentials stored by WakePlan; revoking WakePlan's access is a separate control in your Google Account's third-party access settings.

Google Calendar is optional. If you do not connect Google, WakePlan can still read calendars you allow through Apple's EventKit on the device.

Notifications (optional)

If you grant notification permission, WakePlan may schedule a local "tomorrow is ready" notification on the device. There is no remote push and no notification content sent to us.

Purchases

Subscriptions and in-app purchases are processed by Apple through StoreKit / In-App Purchase. We receive entitlement status (whether you have an active purchase) so we can unlock paid features. We do not receive your payment card number, billing address, or Apple ID password.

Support

If you email us, we receive the address and message you send, and any information you include, so we can reply. We do not create an App account from that email.

This website

This site is a static page hosted by our hosting provider. The host may automatically log technical data such as IP address, browser user-agent, and request time to operate and secure the site. We do not run advertising pixels or a separate analytics SDK on this site.

How we collect it

• Directly from you, when you type settings or send support email.
• From your device, when you grant calendar or notification permission.
• From Apple, when you buy or restore a purchase.
• From Google's Calendar API, only if you connect Google Calendar and only for calendars you enable.
• Automatically, as hosting logs, when you visit this website.

How we use it, and legal bases

If you are in the European Economic Area, the UK, or a similar jurisdiction, we rely on these legal bases:

• Contract — to provide the App you downloaded, unlock purchases you made, and answer support about your use of the App.
• Legitimate interests — to keep this site secure and prevent abuse. You may object; see Your rights.
• Consent — where a system permission (calendar, notifications, Google Calendar) requires it. You can withdraw consent in device Settings or by disconnecting the service in the App. Withdrawal does not affect processing already carried out.
• Legal obligation — if we must keep or disclose information to comply with law.

Sharing

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

We share information only:

• With Apple, for purchases and App Store distribution.
• With Google, only if you connect Google Calendar — WakePlan sends OAuth-authenticated requests to Google's Calendar API to fetch calendar data you requested. We do not send your WakePlan settings or other App data to Google.
• With our website host, as technical logs needed to serve this site.
• If required by law, or to protect our legal rights.

Any third party that receives user data from us must provide protection that is the same or equal to this policy and to Apple's App Store Review Guidelines.

Tracking

We do not track you across other companies' apps or websites, we do not use the advertising identifier for ads, and we do not use data brokers.

Retention

• On-device App data — until you delete it in the App or delete the App.
• iCloud key-value backup — retained by Apple under your Apple account until you manage it through Apple's controls.
• Google event cache — usable for up to 24 hours when loading; it remains on the device until replaced or the App's data is deleted.
• Google OAuth tokens — until you disconnect Google Calendar in the App; Keychain items may survive deleting the App.
• Purchase records — Apple retains billing records; we keep only what we need to honour your entitlement.
• Support email — until the request is resolved, then for a short period in ordinary email retention (or sooner if you ask us to delete it and we have no legal duty to keep it).
• Website logs — according to our host's default log rotation, typically days to weeks.

Your rights and choices

• Delete local app data by deleting the App or using in-App controls where provided. To remove Google credentials, use Disconnect in the App. iCloud data and device backups are retained independently and are managed through Apple's controls.
• Manage or cancel subscriptions in Settings > Apple ID > Subscriptions.
• Revoke calendar or notification permission in iOS Settings, or disconnect Google Calendar in the App.
• Email us to request access, correction, deletion, restriction, or a copy of personal data we hold (typically support email), or to object to processing based on legitimate interests. We will respond within one month where that timeline applies.
• If we asked for consent, you may withdraw it at any time.
• You may lodge a complaint with your data protection authority (in the EU/EEA, the authority in your country; in Sweden, Integritetsskyddsmyndigheten (IMY)).

We do not make solely automated decisions that produce legal or similarly significant effects about you.

Children's privacy

The App is not directed at children under 13, and we do not knowingly collect personal information from children. If we learn that we have, we will delete it.

International processing

Apple, Google (if you connect Google Calendar), and our website host may process information in countries other than yours, including the United States. We do not rely on "you agree by using the App" as the mechanism for those transfers. Transfers are those inherent in using Apple's App Store / StoreKit, an optional Google connection you turn on, and a hosted website, with whatever safeguards those providers apply.

Security

We use reasonable technical and organisational measures to protect information. No method of transmission or storage is 100% secure.

Changes

We may update this policy. We will change the "Effective" date above. If a change is material, we will take additional reasonable steps to inform you (for example an in-App note or an email if we have one).

Contact us

Questions or privacy requests: email our support address.

Carl Franzon
Postal address available on request via the support email above.