Privacy Policy
Beyond Alarm has no accounts, no sign-up and no login. Your alarms, settings, streaks and profile stay on your phone. The camera is used only to detect your movement on the device — no photo or video is ever recorded, stored or uploaded. Uninstall the app and everything is gone.
1. What we do not collect
We want to be precise about this, because "we value your privacy" is meaningless. Beyond Alarm does not ask for, and cannot obtain:
- Your name, email address, phone number or date of birth.
- Your contacts, messages, call logs or files.
- Your location.
- Any account credentials — there is no account to create.
2. Data that stays on your device
The following is stored locally on your phone and is never transmitted to us or anyone else:
- Your alarms, schedules, missions, sounds and wallpapers — including any name or label you give an alarm.
- App settings, including your display name and chosen avatar if you set one.
- Your streaks and mission history.
This data is removed when you uninstall the app. We have no copy of it and no way to retrieve it.
3. Camera
Beyond Alarm uses the camera for three missions: the exercise missions (push-ups, squats, jumping jacks), the household item hunt, and barcode scanning.
The camera feed is processed entirely on your device, using Google's ML Kit running locally. It is used to detect body position, recognise an object, or read a barcode, and then discarded frame by frame.
No image or video is saved to storage, sent over the network, or shared with us or any third party. The camera is only active while a camera mission is on screen.
4. Physical activity
The "Walk it off" mission reads your device's step counter to confirm you have taken the required number of steps. This is read on-device, used to complete the mission, and not transmitted anywhere.
5. Special permissions, and why
Display over other apps
Used to show the Phone Block and Morning Lockout screens over other apps. It is optional and only used for the duration you set.
Device administrator
Optional, and off by default. If you switch on "Prevent app uninstall", the app registers as a device administrator so it cannot be deleted on impulse to escape a mission. It requests only the force-lock policy. It never wipes your device, resets your password, locks you out, or accesses any of your content. You can turn it off at any time from the app's settings.
Accessibility service ("the guard")
Optional, and off by default. When you switch it on, Beyond Alarm uses Android's accessibility service to see which app is currently in the foreground — nothing else. It uses that for three things, and only when you have set them up: closing the system power menu while an alarm is ringing (so the phone can't be switched off to escape the alarm), holding the lockout screen in place, and — for app blocking — sending you back to the home screen when you open an app you chose to block.
It reads no text, no passwords and no screen content. Nothing it sees is stored, transmitted or shared, and it acts only on the rules you set — it never decides anything on its own. You can turn it off at any time, in the app or in Android's accessibility settings.
Alarms, notifications and full-screen intent
Required for an alarm to actually ring and appear over your lock screen.
6. Purchases
Beyond Pro is sold through Google Play Billing, either as a subscription or as a one-time lifetime purchase. We never see or handle your card or payment details — Google processes the payment, and Google alone manages renewals, cancellations, failed payments and refunds.
To know whether your subscription is active, we use RevenueCat, which receives a randomly generated, pseudonymous identifier and your purchase receipt from Google Play. It is not linked to your name, email or phone number, because we do not have them.
7. The free trial
Beyond Alarm runs no trial of its own and stores no device identifier of any kind. The free trial of Beyond Pro is offered and enforced entirely by Google Play, against your Google account rather than your phone.
That means we keep no record of who has trialled, hold no list of devices, and cannot tell a trialling subscriber from a paying one — the app simply sees an active subscription. Cancel in Google Play before the trial ends and nothing is charged.
An earlier version of this app ran its own trial and stored a one-way hash of an Android device identifier to prevent repeat claims. That feature and that stored data were removed on 1 August 2026. Nothing replaced it on our side.
8. Advertising
The free tier of Beyond Alarm shows ads, served by Google AdMob. To display ads and measure their performance, AdMob uses your device's Advertising ID. You can reset or delete that ID at any time in your Android settings under Privacy → Ads.
Ads appear only on the alarm-related screens — while an alarm is ringing, while it is snoozed, and during a wake-up mission. They are never shown elsewhere in the app. Anyone with an active Beyond Pro subscription never sees an ad, and that includes the whole of a Google Play free trial.
AdMob is a Google service; its use of the Advertising ID is governed by Google's Privacy Policy. We ourselves do not receive, store, or link your Advertising ID to anything.
9. Children
Beyond Alarm is not directed at children under 13, and we do not knowingly collect any information from them.
10. Deleting your data
Nothing you create in Beyond Alarm leaves your phone, so there is almost nothing for us to hold.
Everything stored on your device
Uninstall the app. Your alarms, labels, settings, profile, streaks and mission history are deleted with it. We never had a copy, and there is nothing to request.
Your purchase record
If you have bought Beyond Pro, a record of that purchase exists in two places we do not control: Google Play, which processed the payment, and RevenueCat, which tells the app whether the subscription is still active (see section 6). Neither holds your name, email address or phone number, because we never collect them — RevenueCat sees a randomly generated identifier and a Google Play receipt.
We keep no device identifier and no trial ledger of any kind; the one described in earlier versions of this policy was deleted on 1 August 2026.
To have the RevenueCat record deleted, email nionnavi@gmail.com with the subject Delete my purchase record and we will delete it and confirm by reply, normally within 7 days and always within 30. Note that deleting it does not cancel or refund a subscription — that is done in Google Play — and the app may stop recognising an active subscription until you press Restore purchases.
Export and correction
We hold no name, email address, phone number or account, so there is nothing to export or correct.
11. Changes to this policy
If this policy changes materially — in particular if we begin collecting anything we do not collect today — we will update this page and change the date at the top before the relevant version ships.
12. Contact
Questions about this policy, or a request under section 10:
nionnavi@gmail.com