Lunifer Privacy Policy

Effective date: July 12, 2026

This Privacy Policy explains how Lunifer ("Lunifer," "we," "us," or "our") collects, uses, stores, and shares information when you use the Lunifer mobile app.

This policy includes the current contact and publisher details provided for Lunifer.

1. Who We Are

Lunifer is provided by Douglas Brown. If you have questions about this Privacy Policy or your information, contact us at luniferAlarm@outlook.com.

2. Information We Collect

Depending on how you use Lunifer, we may collect and process the following categories of information:

• Account information, such as your email address and authentication identifiers when you sign in using email/password, Google, Apple, or Microsoft Sign-In.
• Profile and onboarding information, such as age range, lifestyle, wake days, calendar preference, sleep preference, morning routine duration, and commute preference.
• Sleep and wellness-related information, such as inferred sleep history, sleep duration, sleep recommendations, and sleep-related data from WHOOP or Oura Ring if you choose to connect either service.
• Calendar information, if you grant access, including events read from Apple Calendar (EventKit), Google Calendar, or Outlook (Microsoft Graph), used to support scheduling and alarm features. See "Calendar Integrations and Google User Data" below.
• Location information, if you grant access, limited to your device's live GPS position, used to calculate commute time for commute-related features. Lunifer does not collect or store home or work addresses.
• Motion and device sensor information, if you grant access, used to infer sleep activity. If you grant microphone access, Lunifer measures ambient volume levels on your device to detect whether your room is quiet enough for sleep; audio is never recorded, stored, or transmitted — only derived volume values are used.
• Alarm and preferences data, such as selected sounds, snooze settings, notification settings, override times, and app configuration.
• Technical and usage information, such as timestamps, device-generated event data, and diagnostic-style operational data needed to run the service.

3. Wearable Integrations

Lunifer supports optional integrations with third-party wearable services. In each case, you must actively choose to connect your wearable account, and you can disconnect at any time.

WHOOP
If you choose to connect your WHOOP account, Lunifer requests permission to access WHOOP data authorized by you through the WHOOP OAuth flow. Lunifer currently uses WHOOP data to obtain sleep-related recommendation information. WHOOP access tokens are handled through our backend services and are not intended to be exposed publicly. WHOOP may independently collect usage data related to how their API is accessed in connection with Lunifer; please refer to WHOOP's Privacy Policy for details.

Oura Ring
If you choose to connect your Oura Ring account, Lunifer requests permission to access Oura data authorized by you through the Oura OAuth flow. Lunifer currently uses Oura data to obtain sleep-related recommendation information. Oura access tokens are handled through our backend services and are not intended to be exposed publicly. Oura may independently collect usage data related to how their API is accessed in connection with Lunifer; please refer to Oura's Privacy Policy for details.

3a. Calendar Integrations and Google User Data

Google Calendar
If you choose to connect Google Calendar, Lunifer requests read-only access to your calendar (calendar.events.readonly) through Google's OAuth flow. Lunifer reads your upcoming events solely to calculate and adjust your wake-up alarm — for example, anchoring tomorrow's alarm to your first event and calculating commute time to an event's location. Event data is processed within the app on your device; Lunifer does not edit your calendar, does not store your event data on our servers, and never shares, sells, or uses it for advertising. Lunifer's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke Lunifer's access at any time at myaccount.google.com/permissions.

Outlook / Microsoft 365 Calendar
If you choose to connect Outlook, Lunifer requests read-only calendar access (Calendars.Read) through Microsoft's OAuth flow and uses it the same way as described above for Google Calendar. Access and refresh tokens are stored securely on your device and are deleted when you sign out, disconnect, or delete your account. You can revoke access at any time from your Microsoft account's app permissions.

Apple Calendar
If you choose Apple Calendar, events are read on-device through Apple's EventKit framework, subject to the calendar permission you grant in iOS.

4. How We Use Information

We may use information we collect to:

• Provide, operate, maintain, and improve Lunifer.
• Create and manage your account.
• Generate wake-up recommendations, alarm scheduling features, sleep insights, and related app functionality.
• Sync your data across devices or restore it after sign-in.
• Provide WHOOP-connected or Oura-connected features when you choose to connect either service.
• Provide customer support, investigate bugs, and protect the security and integrity of the app.
• Comply with legal obligations and enforce our terms and policies.

5. Legal Bases for Processing

If you are in a jurisdiction that requires a legal basis for processing personal data, we rely on one or more of the following where applicable: your consent, performance of a contract with you, our legitimate interests in operating and improving the app, and compliance with legal obligations.

6. How We Share Information

We do not sell your personal information. We may share information in the following circumstances:

• With service providers and infrastructure partners that help us operate the app, such as Firebase / Google Cloud and authentication providers.
• With WHOOP, when you choose to connect your WHOOP account through their OAuth flow.
• With Oura, when you choose to connect your Oura Ring account through their OAuth flow.
• With Apple platform services when you use Apple-device permissions and system integrations.
• When required by law, regulation, legal process, or to protect rights, safety, and security.
• In connection with a merger, acquisition, financing, or sale of all or part of our business.

We do not disclose, market, sell, license, or lease wearable data obtained from WHOOP or Oura to any third parties, including advertisers or data brokers.

7. Data Storage and Retention

Data may be stored locally on your device and in cloud services we use to operate Lunifer. We retain information for as long as reasonably necessary to provide the app, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we delete or anonymize your account data within a commercially reasonable time, subject to any legal hold obligations.

8. Your Choices

• You can choose whether to create an account and whether to connect WHOOP or Oura Ring.
• You can deny or revoke app permissions such as location, calendar, and motion access in your device settings.
• You can sign out of the app.
• You can request deletion of your account from within the app if that feature is available, or by contacting us.
• You can disconnect your WHOOP or Oura Ring account at any time through the respective service's own settings or by contacting us.

9. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a portable copy of your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at luniferAlarm@outlook.com.

California Residents (CCPA / CPRA): We do not sell or share your personal information for cross-context behavioral advertising. California residents have the right to know what personal information we collect, to request deletion of that information, to correct inaccurate information, to obtain a portable copy of that information, and to opt out of any future sale or sharing. To submit a request, contact us at luniferAlarm@outlook.com.

EEA / UK Residents (GDPR / UK GDPR): In addition to the rights described above, you may have the right to data portability, the right to withdraw consent at any time where processing is based on consent, and the right to lodge a complaint with a supervisory authority.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. However, no method of transmission over the internet or method of storage is completely secure, and we cannot guarantee absolute security.

11. Children

Lunifer is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can review and take appropriate action.

Please note that connecting WHOOP or Oura Ring requires you to hold an account with those services. Both WHOOP and Oura require their users to be at least 18 years of age. If you are under 18, you may not use the wearable integration features of Lunifer.

12. International Transfers

Your information may be processed and stored in countries other than your own, including the United States, where privacy laws may differ from those in your jurisdiction.

13. Third-Party Services

Lunifer may rely on third-party services, including Firebase, Google Sign-In, Google Calendar, Sign in with Apple, Apple system frameworks, Microsoft Sign-In, Microsoft Graph (Outlook), WHOOP, and Oura Ring. Their handling of information is governed by their own privacy policies and terms. We encourage you to review those policies before connecting any third-party service.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by updating the effective date above, posting the revised policy, or using other appropriate means.

15. Contact

If you have questions about this Privacy Policy, contact:
Douglas Brown
33 Stonehenge Dr.
New Canaan, CT 06840
United States
luniferAlarm@outlook.com