Privacy Policy

Personal data (hereinafter mostly referred to simply as "data") is only processed by us to the extent necessary and for the purpose of providing a functional and user-friendly internet presence (Landing Page) and the app "FamWake Family Alarm Clock", including all contents and the services offered.

According to Art. 4 No. 1. of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter referred to simply as "GDPR"), "processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

With the following privacy policy, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of the processing.

1. Contact and Controller

The data controller within the meaning of data protection law is:

Daniel Notthoff
Rudolf-Virchow-Str. 20
58300 Wetter
Phone: +49 162 7589600
Email: daniel.notthoff@gmail.com

2. What data do we collect?

We collect and process the following data when you use the website (landing page) or app "FamWake Family Alarm Clock":

User data (anonymous use & registration): The app can generally be used anonymously and without registration. An anonymous user ID (UUID) is generated and stored to synchronize your alarm times and settings. If you want to use advanced features (e.g. invite family members), you must create an account. We collect your email address and a password you choose (for authentication). Alternatively, you can log in via Google Login; Here we receive your email address stored on Google.
Note about the double opt-in when registering: After registering, you will receive an email with a confirmation link. Your account will only be active after clicking on this link.
App Usage Data (Profiles): If you create family members (profiles) within the app, we process the provided name, the earliest and latest desired wake-up time, the duration of bathroom use, whether the person wants to have breakfast, and the desired time to leave the house. This data is necessary to provide the core function of the app (calculating the optimal wake-up plan).
iOS Waitlist: If you sign up for the iOS waitlist via the form on this website, we collect your first name and email address. Sign-up uses a double opt-in process: you will receive a confirmation email and must click the link to activate your registration. Unconfirmed entries are automatically deleted after 48 hours. Confirmed entries are stored until the iOS launch of FamWake Family Alarm Clock and you have been notified – after which they are deleted. Legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
Server Log Files: Every time you visit the website, our web host (Contabo) automatically collects and stores information in so-called server log files. These are: browser type and browser version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, IP address. These data are not merged with other data sources. This data is collected on the basis of Art. 6 (1) lit. f GDPR (legitimate interest in the technically error-free presentation and optimization of our website).

3. Purposes of Data Processing

We process your data for the following purposes:

To create and manage your user account and your family group in the app.
To calculate and coordinate the optimal family wake-up times and resource planning (bathroom, breakfast).
To execute the core functions of the app (e.g., wake-up calls on the smartphone at the calculated time).

The legal basis for app functions and account management is the performance of a contract or pre-contractual measures in accordance with Art. 6 (1) lit. b) GDPR, since the app cannot fulfill its advertised purposes without this data.

4. Storage and Sharing of Data (Hosting, Google Firebase, Social Media, and Analytics)

Website Hosting (Contabo)

Our website (landing page) and its static files (HTML, CSS, images) are hosted on servers provided by Contabo GmbH. The server location is Germany. As part of the hosting services, Contabo processes technical data on our behalf (see Server Log Files). We have concluded a Data Processing Agreement (DPA) with Contabo GmbH in accordance with Art. 28 GDPR.

App Data (Google Firebase)

In order to provide the functions of this app (real-time synchronization of wake-up times across multiple devices), we use the backend and database services of Google Firebase (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
The following Firebase services are used:

Firebase Authentication: For the secure creation and management of user accounts.
Firebase Cloud Firestore: Cloud-based NoSQL database for real-time synchronization between family devices.
Firebase Cloud Functions: For executing backend code (e.g., for automated notifications).

The collected data is stored on the servers of Google Firebase. We have restricted the server locations to data centers within the European Union (EU). However, it cannot be ruled out that data may be transferred to the USA. Google (Google Ireland Limited) is certified under the EU-US Data Privacy Framework (DPF). A corresponding Data Processing Agreement (DPA) has been concluded with Google.

Social Media Presence (Instagram)

We maintain a profile on the social network Instagram. The provider is Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland). We are jointly responsible with Meta for data processing (according to Art. 26 GDPR).
When you visit our profile, Meta processes personal data (e.g., through the use of cookies) to create user profiles and display advertising. We do not have full access to all data collected by Meta but use the anonymized statistics provided by Meta ("Instagram Insights") to optimize our content. Processing is based on our legitimate interest in providing up-to-date information and communication (Art. 6 (1) lit. f GDPR).
As Meta may also transfer data to the USA, we point out that Meta is certified under the EU-US Data Privacy Framework (DPF). For further information, please refer to Instagram's privacy policy: https://help.instagram.com/519522125107875.

Email Delivery (Resend)

For sending emails (e.g., for registration confirmation via Double Opt-In), we use the service Resend (Resend Inc., USA). Since data is transferred to the USA, we point out that Resend is certified under the EU-US Data Privacy Framework (DPF), which ensures an adequate level of data protection. In addition, we have concluded a Data Processing Agreement (DPA) with the provider.

Analytics Tool: TelemetryDeck (Web & App Analytics)

To analyze website visits and app usage, we use the privacy-friendly analytics service TelemetryDeck (Provider: TelemetryDeck GmbH, Von-der-Tann-Str. 54, 86159 Augsburg, Germany). The use is based on Art. 6 (1) lit. f GDPR (Legitimate Interest). Our interest lies in the continuous improvement and optimization of our services based on anonymized usage data.

What data is transmitted?
The data processed by TelemetryDeck is completely anonymized and does not allow any conclusions to be drawn about personal information. The collected data includes, among other things:

an anonymized, non-traceable identifier (per device/browser session),
visited pages or triggered actions (e.g., "App started", "Page viewed"),
a rounded timestamp (to the full hour),
device metadata (e.g., system version, app version, device type).

What is not stored?

No IP addresses (neither in logs nor in the database),
no cookies or tracking technologies,
no persistent identifiers that could be traced back to individuals.

For more information on exactly how TelemetryDeck processes data, please visit: https://telemetrydeck.com/privacy and https://telemetrydeck.com/docs/guides/privacy-faq/.

5. Deletion of Data

Your data will only be stored for as long as is necessary to achieve the above-mentioned purposes (provision of app functions) or as long as legally required retention periods exist.

The profiles and family configurations (including all members) you have created can be deleted directly in the app at any time (e.g., "Leave family" or account deletion).
For the complete deletion of your app user account and the associated families, profiles, and members, please contact us via email at daniel.notthoff@gmail.com. Confirmed app users will be deleted upon request. Unconfirmed accounts (Double Opt-In during registration) will also be automatically removed after a period of 48 hours without confirmation.

6. Your Rights

You have the following rights under the statutory provisions:

Right of Access: You have the right to request confirmation as to whether data concerning you is being processed and to request access to this data (Art. 15 GDPR).
Right to Rectification: You have the right to request the completion or rectification of inaccurate data concerning you (Art. 16 GDPR).
Right to Erasure: You have the right to request that data concerning you be erased without undue delay (Art. 17 GDPR).
Right to Restriction of Processing: You have the right to request a restriction of the processing of the data (Art. 18 GDPR).
Right to Data Portability: You have the right to receive the data concerning you which you have provided to us, in a structured, commonly used and machine-readable format (Art. 20 GDPR).
Right to Object: You have the right to object to the future processing of data concerning you at any time (Art. 21 GDPR).

To assert your rights, you can contact the responsible party named in point 1 at any time. In addition, you have the right to lodge a complaint with the competent supervisory authority in the event of suspected violations of data protection law. The competent supervisory authority for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW).

Last updated: May 2026