Privacy & your information

Privacy Policy

Effective date: October 6, 2026

This policy explains how Wake Window, operated by Wake Window, handles information when you use our app, website, and support services. The app is for adult parents and caregivers. Children do not create accounts or use it independently.

For privacy questions, use our support form or email support@wakewindowapp.com. You can also request account deletion.

Information we collect and why

• Account information: your email, account identifier, profile name, and Apple or Google sign-in identifier when you choose that method. Providers may share your name and email, including an Apple private relay address. We use these to sign you in, maintain your account, and communicate about the service.
• Child and caregiver information: names, birth dates, optional child photos, and caregiver details you enter. These support age-appropriate suggestions, wake-window estimates, and separate plans for each child. Provide only information you are authorized to share; you can use a nickname for a child.
• Plans and preferences: activity preferences, favorites, saved activities and toys, day plans, wake-up times, nap logs, and reminder settings. These personalize suggestions, save your plans, and enable reminders you choose.
• Location: a location entered in your profile, or coordinates you choose to send for nearby event searches. We use it to find events in the selected area. You can decline device location permission and use features that do not need it.
• Purchases: store transaction or purchase identifiers, product, verification results, and subscription status and dates. These verify Premium access and prevent purchase reuse. Apple or Google handles payments; we do not receive your card number.
• Support and Beta signup: the email and message you submit, a reference number, and app version or platform details supplied with feedback. These let us respond and investigate problems. “Join the Beta” emails are used for Beta invitations, not added to a marketing list.
• Technical information: servers process your IP address and request metadata to deliver responses, protect accounts, and limit abuse. Diagnostic reports, when enabled, contain details such as app version, platform, error type, and code location. The backend removes request contents, account details, and local-variable values from external error reports.

Permissions and withdrawing consent

Photos, location, and notifications are optional. Photo access lets you choose a child profile picture; a picture you submit is stored as that profile photo. Location supports nearby searches. Notification permission supports reminders. You can change permissions in your device settings and disable reminders in the app. Declining an optional permission affects the related feature, not unrelated features.

You can edit profiles, remove child information or photos, and change preferences. Revoking a device permission stops future access through that permission; it does not erase previously submitted information. To request removal or withdraw permission for further use, contact support or delete your account.

Providers and disclosures

Amazon Web Services hosts the backend and stored information. Twilio SendGrid delivers sign-in codes and service emails. Apple and Google process information required for their sign-in and purchase services when you use them. Sentry may process the limited diagnostic reports described above when error reporting is enabled. Providers receive information needed for their functions; we require providers acting for us to protect it consistently with this policy and applicable privacy requirements.

We may disclose information when legally required, in response to a valid legal request, or when necessary to protect users and the service against fraud or security threats. Providers may process information outside your country, where data-protection rules can differ.

Event and product links open independent providers’ websites, where their policies apply. Opening a retailer link does not give it access to your child profile through our service.

Website cookies

The website uses essential cookies for form security and staff login sessions. Public information pages do not require an app account. The public website serves its fonts from our server and does not load advertising or analytics scripts. Blocking essential cookies can prevent forms and staff sign-in from working.

Retention and deletion

Account information, child profiles, and saved plans remain while your account is active unless you remove them earlier. In the app, open Account → Delete account and confirm. If you cannot access it, use our deletion request form. We verify ownership before acting on web requests; submitting the form does not immediately delete an account. An Apple-linked account may require you to sign in with Apple again to confirm ownership and revoke authorization.

Deletion removes active account data, owned child profiles and associated photos, saved plans, wake-up and nap logs, favorites, preferences, and support requests associated with the account email.

Limited purchase records remain to prevent reuse: a hashed purchase identifier, store, product, status, and verification and expiry dates. They are no longer linked to the deleted account. Apple and Google retain payment records under their own policies. Account deletion and uninstalling do not cancel a store subscription. Cancel separately through your store account.

Beta signup emails are separate from app accounts. Ask support to remove your invitation-list email, including after account deletion. Support messages not associated with a deleted account remain for handling and following up on the request; you can request their removal through support. Records needed to meet a legal obligation or resolve a dispute may be retained for that purpose.

Historical copies may remain in operational backups after active data is deleted, until the backups are rotated or deleted. Backup deletion is separate from active account deletion. Contact support for the current backup retention schedule or a request concerning a backup copy.

Security and children’s information

We use HTTPS, authentication, access controls, and private storage for child photos. Child photos are accessible through the owning account. No storage or transmission system can guarantee complete security.

Adults should provide child information only when authorized. If a child has created an account or information was submitted without appropriate authority, contact us so we can investigate and remove it where appropriate.

Your rights and policy updates

Depending on where you live, you may have rights to access, correct, obtain a copy of, delete, or restrict use of your information, withdraw consent, and raise concerns with a data-protection authority. Submit requests through support. We may verify your identity. Withdrawing consent does not change processing already carried out lawfully.

Updates will be published here with a new effective date. For changes materially affecting how personal information is handled, we will provide appropriate notice and obtain any permission required before the new use.