Privacy Policy
Last updated: August 18, 2026
Introduction
Ahem is operated by UNDEFINED S.R.L., a company registered in Romania. We're committed to protecting your privacy and being transparent about how we handle your data.
This policy explains what information we collect, how we use it, and your rights regarding your personal data.
Who We Are
UNDEFINED S.R.L.
- CUI: 44337505
- VAT: RO44337505
- Reg. Com.: J2021002547120
- Address: Strada Avram Iancu 14, Cluj-Napoca, jud. Cluj, 400089, Romania
- Contact: contact@undefined.srl
What Data We Collect
Information You Provide
- Email address (for waitlist signup and account creation)
- Payment information for app subscriptions is processed entirely by Google Play — we never see or store your card details
Information from Your Device (App)
- Calendar data is read with a read-only permission and processed entirely on your device to create alarms. It is stored only in the app's private storage and is never transmitted to us or anyone else — the app has no server and no cloud sync. If we ever add optional sync, it will be opt-in and this policy will be updated first.
- Alarm sounds you pick are copied into the app's private storage so they keep playing if the original file moves.
- The app collects no analytics and no device telemetry. If you email support, whatever you include (e.g. OS version) is used only to help you.
- Like most Android apps, some settings may be included in Android's own encrypted device backup to your Google account, controlled by your device's backup settings — we never have access to it.
- Uninstalling the app deletes all of its data. We hold no copy.
Automatically Collected (Website Only)
- Basic analytics (page views, not personal data)
- IP address (for rate limiting and security, not stored long-term)
How We Use Your Data
- To provide the Ahem service
- To send transactional emails (signup confirmation, important updates)
- To improve the service (aggregated analytics)
- To respond to support requests
What We DON'T Do
- Sell your data to third parties
- Show you advertisements
- Track you across the web
- Share your calendar data with anyone
- Use your data for profiling or automated decision-making
Android App Permissions
The app requests only what alarms need, and everything stays on your device:
- Calendar (read-only): to find upcoming events and create alarms. The app never modifies or deletes events.
- Notifications & full-screen alarms: to ring reliably, wake the screen, and show over the lock screen.
- Exact alarms, boot, battery-optimization exemption: so alarms fire on time and survive reboots and battery savers.
- Audio files: to read an alarm tone you explicitly pick.
- Network: used only by Google Play's billing component for subscriptions — none of our code makes network requests.
Third-Party Services
We use these services to operate Ahem:
| Service | Purpose | Data Processed | Location |
|---|---|---|---|
| Supabase | Database & Auth | Email, account data | EU (Frankfurt) |
| Google Play | App distribution & subscriptions | Payment details, purchase state | Global (Google) |
| Cloudflare | Email Routing | Email address | Global (privacy-focused) |
| Vercel | Website Hosting | IP address, analytics | Global (EU processing) |
Data Retention
- Waitlist emails: Until you unsubscribe or we launch and you don't sign up
- Account data: For the duration of your account plus 30 days after deletion
- Analytics: Aggregated, no personal data retained
- App data (alarms, settings, calendar-derived data): Lives only on your device — deleted when you uninstall the app or clear its data
Your Rights (GDPR)
As an EU resident, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Restriction: Limit how we process your data
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Revoke consent at any time
To exercise these rights, email: contact@undefined.srl
Data Security
- All data transmitted over HTTPS
- Database encrypted at rest
- Access limited to essential personnel
- Regular security reviews
Children's Privacy
Ahem is not intended for users under 16. We do not knowingly collect data from children.
International Transfers
Your data may be processed outside the EU. We ensure appropriate safeguards (Standard Contractual Clauses) are in place.
Changes to This Policy
We'll notify you of significant changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.
Contact
For privacy-related inquiries:
Email: contact@undefined.srl
Address: UNDEFINED S.R.L., Strada Avram Iancu 14, Cluj-Napoca, jud. Cluj, 400089, Romania