Privacy Policy

Tock is an alarm clock and sleep tracker for iOS. It is run by Wildframe FZ-LLC, a Free Zone Limited Liability Company licensed by the Ras Al Khaimah Economic Zone Authority (RAKEZ) in the United Arab Emirates. Wildframe FZ-LLC is the company responsible for your personal data (the “controller”). In this policy, “Wildframe,” “we” and “us” mean Wildframe FZ-LLC.

This policy covers the Tock app for iOS, the Tock web checkout at quiz.wildframe.dev, and the servers and services behind them. It explains what we collect, why, who else sees it, how long we keep it, and what you can do about it. We’ve tried to write it in plain language.

Your account

You can sign in with Apple or with an email address and password. With Sign in with Apple, we receive a unique account identifier and the name and email address Apple shares. If you choose Apple’s Hide My Email, we only receive a private relay address. With email and password, we store your email address, your name if you give it, and your password as a secure hash, never in plain text.

Your profile and onboarding answers

Your sleep goal, target bedtime and wake time, sleep schedule and time zone, plus the answers you give during onboarding, such as your age range, chronotype, sleep position, caffeine habits, snooze habits, what worries you about your sleep, and what you want from Tock. We use these to set up and personalise the app. You can change them later.

Your alarms

Each alarm’s time, label, repeat days, sound and snooze settings. They are saved to your account so they survive a new phone, and they ring on your device through Apple’s alarm and notification system, even offline.

Sleep tracking

When you track a night, Tock uses your microphone and motion sensors to detect sound and movement. iOS asks your permission first, and the microphone is only used while a session is running or a feature that needs it is open.

Audio is analysed on your phone and never uploaded. Short clips of notable sounds, like snoring, may be saved on your phone so you can play them back. They stay on your phone.

What we do store on our servers is a summary of each night: when it started and ended, time asleep and in bed, your sleep score, estimated sleep stages, snoring minutes, cough and breathing-disruption counts, noise levels, a respiratory-rate estimate, a timeline of detected events (for example “snoring at 02:14”), and any mood, tags or notes you add. This lets your history sync across devices and powers your insights.

Apple Health (optional)

If you connect Apple Health, Tock can read your sleep and, if a watch or other tracker recorded them, your heart rate, resting heart rate, heart rate variability, blood oxygen, respiratory rate and wrist temperature during sleep. It can also write the nights it tracks (time in bed and time asleep) to Apple Health. Nights imported from Apple Health, including those readings, are synced to your Tock account like any other night. Health data is never used for advertising, never shared with advertisers and never sold. You control access in the Health app.

The AI sleep coach

When you chat with the coach, the app sends your message to our server, together with the context the coach needs to answer: earlier parts of the conversation and notes it has remembered about you, your first name, your alarm, bedtime and sleep goal, your local time and time zone, what the app is doing at that moment, and a summary of your recent nights. That summary can include data imported from Apple Health, such as sleep stages and respiratory rate. Our server passes this to Google’s Gemini service to write the reply (see Services we use).

Your chat history is kept on your phone. Our server keeps a daily count of coach messages, not their content. If you report a reply, we store that question, the reply and any note you add so we can improve the coach.

Camera, photos and voice

The camera is used for your profile photo, the optional day-one photo, and wake challenges that ask you to dance, make a face, or photograph or scan something before an alarm stops. These are processed on your phone. Your profile photo, day-one photo and the reference photos for wake challenges are stored on your phone and are not uploaded, and no camera or face-tracking data is recorded or sent to us.

Voice wake challenges are transcribed on your phone. If you talk to the coach instead of typing, iOS speech recognition turns your voice into text, and Apple may process that audio on its servers under Apple’s Privacy Policy. Only the text reaches us.

Feedback and support

When you send feedback, we receive your message, any screenshots you attach, your email address and name, and basic technical details: app version, iOS version, device model, language, region and whether you have Tock Pro.

How the app is used

The app records usage events, such as screens opened, onboarding steps and answers, paywall views, trials and which features you use. Each event carries a random install ID, the app and iOS version, device model, language, region and time zone. Once you’re signed in, we link these events to your account, including your email address and name. These events go to our own servers, not to an outside analytics company. We work out your country from your device’s language, region and time zone settings. We don’t use GPS or look up your IP address for this.

Security and connection data

When you sign in, our server records a session: a login token, your IP address, the user-agent of the request and timestamps. We use this to keep you signed in and to spot suspicious activity. Your login token is stored in the iOS Keychain on your phone.

Notifications

If you allow notifications, we store a push token for your device, with the app version, iOS version and language, so we can send you notifications.

Purchases

Whether you have Tock Pro, which plan, trial and renewal dates, and where you bought it. We never see your full card details.

A lot of Tock never leaves your device.

Only on your phone

• raw audio from sleep tracking, and saved sound clips;
• camera frames, face-tracking data and wake-challenge reference photos;
• your profile photo and day-one photos;
• voice wake-challenge transcription;
• your coach chat history;
• your login token, in the iOS Keychain.

Synced to our servers

• your account, profile and onboarding answers;
• your alarms;
• your nightly sleep summaries, including nights and readings imported from Apple Health;
• usage events, feedback, push tokens and subscription status.

Deleting the app removes what’s stored only on your phone. To remove what’s on our servers, delete your account (see Deleting your data and your rights).

We use your information to:

• Run the app. Store and sync your alarms, preferences and sleep history, ring your alarms and show your insights.
• Track your sleep and power the coach. Turn sensor readings into sleep data, and answer your questions about it.
• Handle subscriptions. Check whether you have Tock Pro, run trials and process web purchases.
• Keep your account secure. Keep you signed in and protect against unauthorised access.
• Fix and improve Tock. Use crash reports and usage events to find bugs and understand which features work.
• Measure our own advertising. Learn which of our ads lead people to install or subscribe, as described in Ad measurement and tracking.
• Contact you. Send account and billing emails, trial reminders, and notifications you’ve allowed.
• Meet legal obligations and protect the rights and safety of our users and Wildframe.

We never use your sleep or health data for advertising, and we don’t build advertising profiles about you.

Legal bases (EEA and UK)

We process your data to provide the service you asked for (contract); for our legitimate interests in keeping Tock secure, reliable and improving; to meet legal obligations; and with your consent where the law requires it. Sleep and health data is processed with your explicit consent, which you give by starting sleep tracking or connecting Apple Health, and can withdraw at any time. Ad measurement that uses your advertising identifier relies on the permission you give in iOS.

These companies process data for us to run Tock. Each one gets only what it needs for its job.

Apple

Sign in with Apple, App Store purchases, Apple Health, alarms and notifications, and iOS speech recognition for coach voice input. Apple’s handling of your data is covered by Apple’s Privacy Policy.

RevenueCat (subscriptions)

Manages App Store subscriptions. It receives your Tock account ID, your purchase and subscription history, basic device and app details, your device’s vendor identifier (IDFV) and, only if you allow tracking, your advertising identifier (IDFA). RevenueCat passes subscription events to Singular so we can see which ads led to a subscription.

Singular (ad measurement)

Tells us which of our ads led to an install or a trial. It receives install and app-open events, your IP address, device and iOS details, your IDFV, a random install ID, and a few in-app events: completing sign-up, seeing the paywall, starting sleep tracking, starting a trial (with the product and trial length) and claiming a win-back offer. It receives your IDFA only if you allow tracking. Singular shares attribution results with the ad networks we advertise on. It never receives your sleep data, health data or coach conversations.

Sentry (crash reports)

Collects crash reports, errors and app freezes from the app, our servers and the web checkout, with device model, iOS version, app version and a random install ID. It is set up not to collect IP addresses, cookies or screenshots, and we strip email addresses from reports. The app and the web checkout send their reports to Sentry’s EU region, in Germany.

Google (Gemini, for the AI coach)

Receives your coach messages and the context described in What we collect, and returns the reply. Google processes this under the terms that apply to its Gemini API. We don’t send your email address or account ID with coach requests.

SMTP2GO (email delivery)

Sends our emails: password resets, trial reminders, web purchase confirmations and creator program messages. It receives your email address, sometimes your name, and the content of the email.

Stripe (web checkout only)

If you buy Tock Pro on quiz.wildframe.dev, Stripe processes the payment. Your card details go straight to Stripe; we receive your email address, a Stripe customer ID, your plan and the payment status. See Stripe’s Privacy Policy.

Meta and TikTok (web checkout only)

The web checkout can use the Meta Pixel and TikTok Pixel to measure our ads, and our server can report web trials and purchases to Meta through its Conversions API. When we use them, they receive browser identifiers and cookies (such as Meta’s _fbp and _fbc), page and checkout events, and the value and currency of a purchase. We never send them your email address, your quiz answers or any sleep data. The Tock app itself contains no Meta or TikTok code.

Hetzner (hosting)

Our servers and database are hosted by Hetzner Online in Germany.

Tock shows no ads. We do advertise Tock on other apps and sites, and we want to know which of those ads work.

iOS asks whether Tock may track you. If you allow it, Singular and RevenueCat receive your advertising identifier (IDFA) so an install or subscription can be matched to the ad that led to it. If you don’t, we never access your IDFA. Singular still receives the install and in-app events listed above with your IP address and vendor identifier, and uses Apple’s SKAdNetwork, which reports ad results to us in aggregate.

You can change your choice at any time in Settings → Privacy & Security → Tracking. Your sleep data, health data and coach conversations are never shared with ad partners.

Some US state laws treat sharing identifiers with ad partners for measurement as “sharing” or “targeted advertising,” even when no money changes hands. You can opt out as described in Your rights.

In the app, subscriptions are sold and billed by Apple through the App Store. Apple handles your payment details; we and RevenueCat only learn what you bought and when it renews or ends.

On the web checkout, payments are handled by Stripe, and Wildframe FZ-LLC is the seller. We keep a record of each web purchase (email, plan, price, status, refunds and disputes) for billing, support and our accounting and tax obligations.

You manage App Store subscriptions in your Apple ID settings, and web subscriptions through the link in your purchase email. Deleting your Tock account does not cancel a subscription.

We send emails about your account and billing: password resets, trial reminders before you’re charged, and web purchase confirmations. We don’t send marketing email.

If you allow notifications, alarms and reminders ring on your device. We may also send push notifications from our server, such as sleep and streak reminders, product news, or an offer if your subscription is ending. You can turn notifications off in iOS Settings, though alarms need notification permission to ring.

At quiz.wildframe.dev you can answer a short sleep quiz and buy Tock Pro. There we collect your quiz answers, your email address (and a password, stored as a hash, if you create an account), a random device and session ID kept in your browser’s storage, and how you arrived, such as the ad campaign or referring site. Your email and quiz answers are stored so we can set up your plan and follow up on your purchase. Payments, pixels and conversion reporting work as described in Services we use.

If you apply to the Tock creator program, we collect your name, email address, social media handles and application details. If you connect TikTok, TikTok shares your profile, follower count and the view and engagement counts of your videos, so we can confirm your account and calculate payouts. We also record payouts and, if you use it, your Discord user ID. This data is kept separate from sleep data.

Our servers are hosted by Hetzner Online in Germany. Data travels between the app and our servers over encrypted HTTPS connections. We limit access to personal data to what’s needed to run the service, and we work to protect it against loss, misuse and unauthorised access. No system is perfectly secure, so we can’t guarantee absolute security.

Wildframe FZ-LLC is based in the United Arab Emirates, and some of the services we use (including RevenueCat, Singular, Google, SMTP2GO, Stripe and Meta) process data in the United States and other countries. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses.

We never sell your personal information, and we never share your sleep or health data with advertisers. We disclose personal data only:

• to the service providers listed in Services we use, to run Tock for us;
• to ad networks, through Singular and the web checkout tools, only in the limited form described in Ad measurement and tracking;
• when required by law, or to protect the rights, property or safety of you, Wildframe or others;
• if Wildframe is involved in a merger, acquisition or sale of assets, in which case we’ll tell you before your data becomes subject to a different privacy policy.

• Account, alarms and sleep history: for as long as your account exists. You can delete single nights at any time.
• Sign-in sessions: until you sign out or the session expires, and until your account is deleted.
• Usage events: kept to understand how Tock is used. When you delete your account, we remove your account ID, email address and name from them, so what remains is no longer linked to you.
• Feedback and reported coach replies: the text is kept to improve Tock. When you delete your account, we remove your name, email address and screenshots, and unlink the text from your account.
• Web purchase records: kept as long as needed for billing, refunds, disputes, accounting and tax law.
• Web quiz answers and email: kept until you ask us to delete them or we no longer need them.
• Backups: copies of our database may keep deleted data for a limited time before they are replaced or removed.

The services we use keep data according to their own retention policies.

Delete your account

You can delete your account in the app, from your Profile. This permanently removes your profile, alarms, sleep history, sessions and related records from our database, and revokes Tock’s Sign in with Apple access. Usage events, feedback and coach reports are kept only in unlinked form, as described above. To delete your web checkout data, or if you can’t use the app, email [email protected].

You can also revoke Sign in with Apple under Settings → your name → Sign in with Apple, remove Tock’s access in the Health app, and change microphone, camera, motion, notification and tracking permissions in iOS Settings.

Your rights

Depending on where you live, including under the EU and UK GDPR, US state privacy laws such as California’s, and the UAE Personal Data Protection Law, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct data that’s wrong or incomplete;
• delete your data;
• receive your data in a portable format;
• object to or restrict certain processing;
• withdraw consent at any time, without affecting earlier processing;
• opt out of “sharing” for targeted advertising, which you can do by turning off tracking for Tock in iOS or by emailing us.

To use any of these rights, email [email protected]. We may need to verify your identity first, and we’ll respond within the time the law requires. We won’t treat you differently for using your rights. If you’re in the EEA or UK, you can also complain to your local data protection authority.

Tock is not meant for children under 13, or the minimum age required where you live, and our Terms of Use require users to meet that age. We don’t knowingly collect personal data from children under that age. If you believe a child has given us personal data, contact [email protected] and we’ll delete it.

We’ll update this policy when Tock or the law changes. When we do, we’ll change the “Last updated” date at the top. For important changes, we’ll also tell you in the app or by email before they take effect.

Questions, requests or concerns about this policy or your data? Write to us.

Wildframe FZ-LLC
CWEP1139, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates
RAKEZ licence no. 47037364 · Registration no. 0000004096838

Privacy: [email protected]
General: [email protected]