Apps / RYZR

RYZR privacy policy

Effective 17 October 2026

RYZR has no sign-up and shows no ads inside the app. Your personal morning content stays on your iPhone. Limited pseudonymous information is processed for purchases, analytics, fraud prevention, support and measuring RYZR’s Apple Ads campaigns. RYZR does not sell your data.

The short version

• No sign-up, no password, no profile.
• Your alarms, your app selections and your morning history stay on your device.
• What leaves your device: pseudonymous usage, purchase and trial-validation information; installation and vendor identifiers; an Apple AdServices attribution token and available campaign information; limited DeviceCheck signals to prevent repeated trials; and feedback you choose to send.
• No in-app ads, no IDFA collection, no cross-company advertising tracking and no data sales. Apple Ads measurement is described below.

What stays on your device

RYZR keeps the following detailed content locally. Limited action categories and completion signals used for analytics are described separately below:

• Your alarm times, schedules, wake history and snooze history.
• The apps you choose to block. These are handled through Apple's Screen Time (Family Controls) system as opaque tokens, which means even RYZR cannot see which specific apps you selected.
• Your chosen morning actions and their results, plus momentum and badges.
• Any text, photos or notes you create inside the app.

Camera, microphone, motion and speech

Some morning actions use your iPhone's sensors: the camera for photo and movement actions, the microphone and on-device speech recognition for the spoken action, and motion data for a walking action. These are used only while you are doing that action, are processed on your device, and are never uploaded. Speech is transcribed on device. You can decline any of these permissions and still use RYZR.

What leaves your device

Pseudonymous usage analytics

RYZR uses TelemetryDeck to understand onboarding, feature use and reliability. Signals include a hashed installation/vendor identifier, session information, app and device context, permission outcomes and limited First Move categories and completion outcomes. Exact alarm times, detailed wake history, blocked-app identities, written text, speech transcripts and photos are not sent.

RYZR shares its TelemetryDeck app identifier and hashed user identifier with RevenueCat. This lets purchase and access events be associated with the same pseudonymous analytics identity. These records are not identified by your name or email, but they can be linked to a device, installation or purchase record; they are not described as completely anonymous. See TelemetryDeck’s privacy policy.

Purchase and access status

Purchases are made through Apple, and Apple handles all payment details; RYZR never sees your card details, Apple Account password or other payment credentials. Apple's own privacy policy governs the purchase itself.

RYZR uses RevenueCat to verify the free-trial transaction, lifetime purchases and any valid monthly or annual subscription bought through an earlier version. RevenueCat receives an automatically generated pseudonymous customer identifier, Apple purchase, receipt and entitlement information, your Apple identifier for vendor (IDFV), app/device information and the shared analytics identifier described above. RYZR does not supply your name, email, precise location or Apple advertising identifier (IDFA). Purchase and identity data are used for purchase verification, access management, fraud prevention, analytics and measuring the performance of RYZR’s own advertising. See RevenueCat's privacy policy.

Apple Ads attribution

RYZR uses Apple’s AdServices framework to obtain a standard attribution token and sends it to RevenueCat. RevenueCat uses it to ask Apple whether an install came from a RYZR Apple Ads campaign. When Apple makes it available, the response can include campaign, ad group and keyword identifiers or names, country or region and whether an ad click or impression led to the install. Apple controls which attribution details are returned.

RevenueCat associates this advertising data with the pseudonymous customer and purchase record so I can measure campaign installs, trials, purchases and revenue. This is analytics and measurement of RYZR’s own advertising. RYZR uses standard attribution, does not request tracking permission or collect IDFA, and does not send this information to third-party ad networks for retargeting across other companies’ apps or websites. This does not add advertisements to the app. See RevenueCat’s Apple Ads documentation and Apple’s privacy policy.

Trial validation and fraud prevention

To prevent the same device from repeatedly claiming the 7-day trial, RYZR uses Apple's DeviceCheck service and a small RYZR trial-validation service hosted on Google Cloud. When the trial is activated, the service receives a temporary DeviceCheck token, a pseudonymous RevenueCat identifier, the relevant transaction identifier and a random installation identifier.

The service verifies the trial transaction, records its authoritative start and end dates and stores only cryptographic digests of the installation and original transaction identifiers. It does not receive your Apple Account identity, alarm times, blocked-app selections, First Move content, photos, health information or analytics identity.

Feedback you choose to send

If you use the feedback or bug report form inside the app, RYZR sends the message you wrote. You can also choose to include technical details, and if you do, that is limited to a fixed list:

• the app version and build number;
• your iOS version;
• your device family and marketing model, such as "iPhone 16 Pro";
• your app language and locale;
• which part of the app the form was opened from;
• a one-off request identifier.

You can switch technical details off and still send the message. No email address or account is collected, which also means feedback cannot be replied to directly. To protect the feedback service from automated misuse, the app may send Apple-signed transaction evidence to confirm a qualifying RYZR purchase. The raw signed transaction is used for that check. A keyed cryptographic hash derived from its original transaction identifier is stored alongside the message and optional diagnostics to enforce access and abuse limits. It can link reports associated with the same purchase without storing your Apple Account name or payment details.

Feedback goes to my own service rather than a third-party feedback platform. It is stored privately using Google Cloud (Cloud Run and Firestore) as the hosting provider, is read only by me, is used only to fix bugs and improve the app, is configured for deletion after two years, and is never sold or shared for marketing. You can contact me to request earlier deletion where applicable.

What RYZR never collects

• Your precise location. RYZR does not request location permission; Apple Ads may return campaign country or region metadata.
• Your contacts, calendar or clipboard.
• Health or fitness data. RYZR does not use HealthKit at all.
• Camera, microphone, speech or motion recordings.
• Apple’s advertising identifier (IDFA). The IDFV, pseudonymous identifiers and AdServices attribution token described above are processed for the stated purposes; RYZR does not use them to track you across other companies’ apps and websites.

Children

RYZR is not directed at children under 13, and it does not knowingly collect personal information from them.

Your rights

Depending on where you live, you may have rights to access, correct, delete or object to the processing of your personal data. In RYZR's case there is usually very little to act on: your content is on your own device, and the small amount of data that leaves it is anonymous or pseudonymous. Deleting the app removes its local app-container data, but does not automatically delete purchase, attribution, analytics, fraud-prevention or support records held by the services described here. For anything else, email paul@paulcalver.com and it will be handled.

Changes to this policy

If RYZR's data practices change, this page will be updated and the effective date above changed with it. Material changes will also be noted in the app's release notes.

Who is responsible for your data

RYZR is made by one person. Paul Calver, an independent developer based in the United Kingdom, is the data controller for the limited information described above. Apple, RevenueCat, TelemetryDeck and the hosting providers process the limited data for the purposes described here. RYZR measures its own Apple Ads campaigns; data is not sold or shared for cross-company ad targeting.

Contact

For any privacy question, email paul@paulcalver.com and it will reach me directly.