Privacy Policy

Wakea wakes you up — and respects your privacy. The camera missions run entirely on your device: no photo and no video is ever stored, uploaded or seen by us. We never sell data; analytics and advertising services are only used with your consent. This page explains what we process and why.

1. Controller

Milena Marketing ltd., Alabin Street 33, 1000 Sofia, Bulgaria (VAT ID BG208676776), represented by managing director Milena Barton. For any privacy question, reach us via our contact form.

2. What data we process

On this website:

  • Server logs — our hosting provider (Render Services, Inc., USA) processes technically necessary data such as IP address, browser type and time of access to deliver and secure the site.
  • Contact form — when you write to us via the contact form, we process your name, e-mail address and the content of your message to answer your request. Delivery happens via the form service FormSubmit; the message is delivered to our e-mail inbox.
  • Analytics and advertising services — only with your consent, see section 4.

In the Wakea app:

  • Account — your e-mail address and sign-in data.
  • Camera missions — the movement detection (squats, push-ups, making the bed) runs exclusively on your device. No photo and no video is stored, uploaded or seen by us. Only the outcome is saved: mission completed, time and repetitions.
  • Alarms & statistics — your wake-up times, chosen missions and check-ins (streak, milestones), synced via our cloud database (Google Firebase).
  • Family — if you link accounts, family members only see whether and when a check-in happened — never any images.
  • Subscription — the purchase of Wakea Plus is handled via the App Store and our subscription provider (RevenueCat); we never receive payment details such as credit card numbers.
  • Device & usage — basic technical data and crash reports that keep the app stable.

3. Purposes and legal bases

We process data to provide the service — sync alarms, keep statistics, protect your account, manage subscriptions, answer requests (Art. 6(1)(b) GDPR), with your consent where required (Art. 6(1)(a) GDPR), and based on our legitimate interest in a secure, working product (Art. 6(1)(f) GDPR). For analytics and advertising we only use data with your consent (see section 4); it is never sold.

4. Cookies, analytics & advertising

We use analytics and marketing services to improve our website and measure the impact of our advertising:

  • Google Analytics 4 and Google Ads (Google Ireland Ltd., Ireland)
  • Meta Ads / Meta Pixel (Meta Platforms Ireland Ltd., Ireland)
  • TikTok Pixel / TikTok Ads (TikTok Technology Ltd., Ireland)

These services set cookies and similar technologies and process pseudonymised usage data (e.g. pages visited, device and browser information, advertising IDs, approximate location) to measure reach, build audiences and attribute conversions. Data may be transferred to the parent companies in the USA; the basis are EU standard contractual clauses and the EU-U.S. Data Privacy Framework.

All of these services are only used if you consent via the cookie banner (Art. 6(1)(a) GDPR). Without consent they remain fully disabled. You can withdraw or adjust your consent at any time with effect for the future — via the website's cookie settings.

5. Recipients and third-country transfers

We only share data with service providers that help us run the product (hosting, cloud database and sync, subscription management, form delivery and — with consent — the analytics and advertising partners named in section 4) and that are contractually bound to confidentiality. Camera images are never among them — they never leave your device. Where data is transferred to countries outside the EU/EEA (e.g. USA), this happens on the basis of appropriate safeguards such as EU standard contractual clauses or the EU-U.S. Data Privacy Framework.

6. Retention

We only store personal data for as long as necessary for the purposes named above. Account data, alarms and statistics are deleted when you delete your account; contact-form requests are deleted once they are conclusively answered and no statutory retention duties apply.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw any given consent at any time with effect for the future. You can also complain to a data protection authority — in Bulgaria that is the Commission for Personal Data Protection (CPDP, cpdp.bg).

Simply use our contact form.