Data handling notice — Aurora Alarma

Data handling notice — Aurora Alarm

Last updated: September 11, 2026

This notice explains, clearly and without beating around the bush, what data Aurora Alarm touches, what leaves the device, who receives it and how it stops. It complements the Privacy Policy and the Terms of Use; if anything seems to contradict among the three, the Privacy Policy prevails.

1. First thing: what does NOT leave your device

Your alarms, schedules, challenges and settings are stored encrypted on the device itself and are not sent to any of our servers. There is no account, no record and no cloud copy managed by us.

2. What does leave, and why

Advertising (Google AdMob)

Aurora Alarm is free and is sustained by advertising from Google. To show an ad, the device communicates with Google’s servers and provides them with:

the device’s advertising identifier (on Android the Advertising ID; on iOS the IDFA, and only if you authorize it);
technical data: model, operating system, language, screen size and IP address, from which the country or region is inferred, not your home address;
the fact that an ad was shown, and whether it was tapped.

We do not send Google any content you create or store in the app.

Google acts here as an independent controller. Its policies: how Google uses partner data and its privacy policy.

In‑app purchases

The charge is processed by the store —Google Play or App Store—, not us. We never see or store your card: we receive from the store only the confirmation that the purchase is valid. Refund rules are those of the store where you bought.

Error reports

If you choose to send us an error report from the app, that submission includes what is needed to reproduce the failure: app version, device model and OS version, and the message you write. It is sent only when you request it.

3. The controls you have, and where they are

3.1 Advertising consent in Europe and the United Kingdom

If you are in the European Economic Area, Switzerland or the United Kingdom, the first time you open the app a consent window managed with Google’s User Messaging Platform (UMP) appears, where you can accept or reject personalized advertising.

You can change your mind at any time from Settings → Ad Privacy within the app itself. Rejecting does not turn off ads: it makes them non‑personalized, which use less data.

3.2 Tracking transparency on iOS (ATT)

On iPhone and iPad the system asks whether you allow cross‑app tracking. If you say no, the IDFA is not used and advertising becomes non‑personalized. That setting lives in System Settings → Privacy & Security → Tracking.

3.3 Resetting or deleting the advertising identifier

It is a phone setting, not an app setting: on Android, Settings → Google → Ads; on iOS, the previous tracking setting.

3.4 Wiping everything

Uninstalling the app deletes all your data, because it is on the device. No need to ask us or wait for us to process anything.

4. Cookies

The mobile app does not use cookies: it is not a website. The advertising identifiers described above serve a similar function and are controlled as explained in section 3.

Our website does use cookies, and that is explained in the site’s cookie notice.

5. How long each thing is retained

What is on your device: until you delete it or uninstall.
Advertising data in Google’s possession: according to Google’s timelines, set by Google. We do not have a copy.
Purchase confirmations: for as long as accounting and tax obligations require.
Error reports: while they are useful for fixing the issue, and at most 24 months.

6. Outside the United States, and your rights

White Hat Mgmt LLC is in the United States, and Google operates servers in several countries. If you are in the European Economic Area or the United Kingdom, those transfers are covered by standard contractual clauses and other mechanisms applied by the providers themselves.

Your rights under the GDPR —access, rectification, erasure, objection, restriction and portability— are exercised by writing to the address in section 8. We respond within one month. Keep in mind that, because there is no account, in most cases we have no personal data of yours to look for.

If you reside in a U.S. state with its own privacy law, we recognize the same access and deletion rights through the same channel. We do not sell personal data nor share it for behavioral advertising between different companies.

7. Minors

The app is not intended for children under 13 and we do not knowingly collect their data. If you believe a minor has sent us data, write to us and we will delete it.

8. Contact

White Hat Mgmt LLC — [email protected]

Error reports: [email protected]