Privacy Policy

01Who we are

GUFO is an alarm clock app for iPhone and Android, made and published by Gagan Sardaar, an independent developer ("we", "us"). This policy explains what GUFO does with information about you, in the app and on this website (gufo.boo). It applies to GUFO 1.1.89 and later versions until it is updated. A summary is also in the app under Settings › Privacy policy.

For privacy questions or requests, email gagansardaar.info@gmail.com. We reply within 30 days. Under data-protection laws such as the GDPR, we are responsible (the "controller") for the small amount of data GUFO sends from your phone, described in section 4.

02What GUFO handles, and why

GUFO has no accounts and no servers of its own. Almost everything it uses is created and kept on your phone, in GUFO's private app storage, and never reaches us. This is the complete list:

GUFO does not collect your contacts, photos, files, precise location, advertising identifier, browsing history, health data or payment information, and it does not ask for them.

03How GUFO gets this data

• From you: what you type or record, and the answers you pick.
• From your phone, with your permission: calendar events, and the microphone while you record. The permissions are listed in section 5; you can refuse or withdraw any of them.
• From your phone, without a permission prompt: battery level, time zone, connected audio devices and phone model, read on the phone for the reasons above.
• From online services: the weather forecast (Open-Meteo) and whether an update is available (App Store or Google Play).

GUFO contains no analytics, advertising, tracking or crash-reporting code, so nothing about how you use the app is recorded or sent.

04When data leaves your phone

Alarms work without a connection. Data leaves your phone only in these cases:

• Weather (optional). If you set a city, GUFO sends its name to Open-Meteo's geocoding service to find its coordinates, then sends those coordinates to Open-Meteo's forecast service. Nothing else is sent: no name and no identifier. Leave the city empty and no weather requests are made. Open-Meteo says it may keep IP addresses for technical reasons without linking them to anyone, and deletes its log files after 90 days (open-meteo.com/en/terms).
• Update checks. On iPhone, GUFO asks Apple's App Store lookup service whether a newer version exists, sending only GUFO's app identifier. On Android, it asks Google Play through the Play Store app on your phone.
• Sharing a recording. A recording leaves your phone only if you tap Share. It goes through your phone's own share sheet to the app or person you choose; GUFO does not see where it goes. If you answered Under 18 in setup, a parent or guardian allows sharing first (section 11).
• Voices. Messages are spoken by your phone's own text-to-speech, using only voices that work on the phone. Online voices, such as Google's network voices on Android, are not offered, so the words are never sent anywhere to be spoken. On iPhone, voices always run on the device.
• Links you open. Some buttons open a web page in your browser, such as a store page or Google's calendar sync settings. Those pages are handled by your browser and by that website.
• Backups. If you use iCloud Backup or Android backup, your phone's backup can include GUFO's data, under Apple's or Google's terms.

As with any internet request, these services see your device's IP address. We do not sell, rent or share personal data with anyone for their own purposes, and no third party receives data from GUFO except as listed above. We use only services whose own policies protect this data at least as well as this policy does: each uses a request only to answer it.

05Phone permissions

Every permission is optional and can be changed at any time in your phone's Settings. GUFO explains why it asks before the system prompt, and it keeps working without the permission; only the related feature stops.

06No tracking, ads or selling

• GUFO shows no ads and contains no advertising code.
• GUFO does not track you across apps or websites and never reads your advertising identifier, so it does not use Apple's App Tracking Transparency prompt.
• We do not sell or "share" personal information as those words are used in California law (CCPA/CPRA), and we do not use it for profiling or automated decisions.
• GUFO does not send your data to artificial-intelligence services, and we do not use it to train AI models.

07How your data is protected

• GUFO's data stays in its private app storage, which the system keeps separate from other apps and protects with your phone's encryption and lock screen.
• Every request GUFO makes over the internet uses encrypted HTTPS.
• There is no GUFO server or account holding your data, so we have nothing of yours that could be exposed in a breach.
• Recordings leave the app only through the system share sheet, when you choose.

08Keeping and deleting your data

GUFO keeps your data on your phone only for as long as you keep it there. We keep no copy anywhere.

• Delete one item: remove a message or recording in Records, or an alarm by swiping it away.
• Delete everything: Settings › Clear all app data erases every alarm, recording, message, streak and setting, and resets permissions.
• Remove the app: deleting GUFO removes all its data from the phone. On Android you can also use Settings › Apps › GUFO › Storage › Clear storage.
• Backups: copies inside iCloud or Google backups are deleted by those services under their own rules.

The weather forecast saved on your phone is replaced each time it updates, and Open-Meteo deletes its request logs after 90 days. GUFO has no accounts, so there is no account to delete.

09Your choices and withdrawing consent

You can change your mind at any time, and the rest of GUFO keeps working:

• Turn a permission off in your phone's Settings, for example Calendar or Microphone.
• Turn Calendar Sync off, or untick calendars, on GUFO's Calendar page.
• Clear your city in Settings › Name & city to stop all weather requests.
• Change your age group, gender or mornings in Settings › Presets.
• Delete recordings, messages or all app data as described in section 8.

10Your privacy rights

Depending on where you live, laws such as the EU and UK GDPR, California's CCPA/CPRA and India's Digital Personal Data Protection Act give you rights over your personal data: to access it, correct it, delete it, receive a copy, object to or restrict its use, withdraw consent, and not be treated differently for using these rights.

Because GUFO keeps your data on your phone, you can see, change and delete it yourself in the app. We hold no personal data about you on any server. You can still email us with any request or question, and we will answer within 30 days. You also have the right to complain to your local data-protection authority.

Legal bases (GDPR). Data on your phone is processed to provide the app you use. The weather request is made because you asked for weather in your messages (performing the service you requested), and the update check relies on our legitimate interest in keeping the app working and secure. Access to your calendar and microphone relies on your consent, which you give and withdraw with the system permission.

11Children

GUFO is made for people aged 13 and over and is not designed for younger children. On Google Play its audience is 13–15, 16–17 and 18 and over, and in some countries 13–17 year olds count as children, so GUFO gives everyone the same protections, whatever their age:

• No ads, no accounts, and no analytics, tracking or crash-reporting code.
• No advertising ID or other device identifier is read or sent.
• Nothing about you is sent to us, and nothing goes to anyone else except the requests in section 4.
• The age group picked in setup stays on the phone and only chooses presets. It starts at "Under 18" (meaning 13–17).
• Messages are spoken only with voices that work on the phone.
• If you answered Under 18 or skipped the age question, sharing a recording first shows a reminder to share only with people you know, and a parent or guardian gives the go-ahead by typing their year of birth (once is enough).

We do not knowingly collect personal information from children under 13. A parent or guardian can turn recording sharing off in Settings › Share recordings, delete everything with Clear all app data or by removing the app, and email us with any question. GUFO is not part of the App Store Kids category or Google Play's Designed for Families programme.

12Store privacy labels

The privacy labels in the stores describe the same practices:

• Google Play Data safety: approximate location is declared for the optional weather lookup, because the city you type becomes coordinates. It is not shared, is processed only to answer the request, is encrypted in transit, and can be avoided by leaving the city empty. No other data is collected.
• Apple App Privacy: Data Not Collected. Under Apple's definitions, data used only to answer a request in real time, like the weather lookup, is not "collected".

13This website

gufo.boo is a static website. It sets no cookies, has no analytics or forms, and loads its fonts and images from itself. The service that hosts it may keep standard server logs, such as IP address, time and page requested, for security and reliability. Email links open your own email app, and nothing is sent unless you send it. The app screens shown on this site were taken on test phones set up with a sample name and city (Maya, Mumbai); they show no real person's data.

14Changes to this policy

If GUFO's handling of data changes, we will update this policy before the change reaches the app, change the date at the top, and publish it at this address (gufo.boo/privacy) and in the app. For important changes we will also say so in the app's release notes.

15Contact

Questions, requests or complaints about privacy (this is also our grievance contact):