Only · Legal

Privacy Policy

Effective date: October 17, 2026

Introduction

Viral App Labs LLC (“Viral App Labs,” “we,” “us,” or “our”) operates Only: Alarm Clock to Wake Up, an alarm clock for iPhone (the “App”). This Privacy Policy explains what information the App keeps on your device, what it sends to us and to the service providers we use, why, and the choices you have.

Only does not have accounts. The App never asks for your name, email address, or phone number.

At a Glance

  • Your alarms, wake-up history, mission photos, and uploaded sounds are stored on your iPhone. We do not upload them. We do collect usage information about how you use alarms and missions, but never your alarm labels or photos.
  • Camera, microphone, and motion data used by missions is processed on your device and is never uploaded. Your voice is never recorded. The only thing kept is a small thumbnail of your Sky Photo and Make Your Bed photos, on your iPhone.
  • Apple Health sleep data is read only if you turn it on, stays on your device, and is never sent to us or anyone else.
  • To run and improve the App, we collect usage and device information, your onboarding answers, purchase information, and how you found the App. Our analytics provider (Mixpanel), our subscription provider (RevenueCat), and our own servers process this information.
  • We do not show ads, do not use Apple’s advertising identifier, do not track you across other companies’ apps or websites, and do not sell your personal information.

Information That Stays on Your Device

The App keeps the following on your iPhone, in its private storage. These records are not uploaded to us, and they are removed when you delete the App. Some of the same details, such as an alarm’s time and mission, also appear in the usage information described under “Information We Collect.” Alarm labels, photos, and uploaded sounds never do.

  • Alarms and settings. Alarm times, labels, repeat days, sounds, volume, missions, difficulty, and your preferences.
  • Wake-up history. When alarms rang, which missions you completed and how long they took, your streak, and your badges.
  • Mission photos. When you complete a photo mission such as Sky Photo or Make Your Bed, the App keeps a small thumbnail of the photo in your wake-up history. Photos are not uploaded, and the App never accesses your photo library.
  • Tracked sleep. When you use Track sleep, the App stores the start and end time of each session.
  • Uploaded sounds. Audio files you import as alarm sounds are converted and saved within the App.
  • Widgets and Live Activities. Your next alarm (time, label, and mission) and your streak are shared with the App’s own widgets. While an alarm is ringing, its label, mission, and progress are shown in a Live Activity. All of this stays on your device.

Camera, Microphone, Motion, and On-Device Intelligence

Missions use your iPhone’s sensors only while a mission is running. iOS asks for your permission before the App can use the camera, the microphone, or Motion & Fitness (step counting). The Shake mission uses the accelerometer, which iOS does not ask permission for.

  • Camera. Camera missions (Sky Photo, Make Your Bed, Object Hunt, Smile, Push-Ups, and Barcode Scan) analyze camera images on your device with Apple’s Vision and AVFoundation frameworks. Live camera frames are discarded as soon as they are analyzed, and scanned barcodes are not saved.
  • Microphone. Voice missions (Affirmation and Tongue Twister) measure how loudly you speak, on your device. Your voice is not recorded, stored, transcribed, or sent anywhere, and the App does not use speech recognition.
  • Motion. The Shake and Morning Steps missions use motion data on your device to count shakes and steps.
  • Morning note. On devices that support Apple Intelligence, the App writes a short daily note using Apple’s on-device language model, based on your streak and recent missions. This runs entirely on your device.

Apple Health

If you turn on Apple Health in the App (in Settings or when starting Track sleep), Only asks for permission to read your sleep data from Apple Health. It uses this data only to show how long you slept in Insights.

  • Access is read-only. Only never writes anything to Apple Health.
  • Sleep data from Apple Health is processed and stored only on your device. It is never sent to Viral App Labs or to any third party, including our analytics and subscription providers.
  • It is never used for advertising, marketing, or data mining, it is never sold, and it is never stored in iCloud.
  • Turning Apple Health off in the App deletes the sleep totals the App has saved. You can revoke the App’s access at any time in the Health app.

Separately from Apple Health, some information you give the App yourself is health-related: your onboarding answers about sleep and waking up, and when your Track sleep sessions start and how long they last. It is sent to Mixpanel for analytics, as described under “Information We Collect.” It is never used for advertising and never sold.

Information We Collect

To operate the App, understand how it is used, and run subscriptions, the App sends the following to us and to the service providers described below:

  • Identifiers. Apple’s identifier for vendor (IDFV), which is the same for all of our apps on your device and resets when you remove them all. We also use a random ID created when the App is installed, plus anonymous IDs created by Mixpanel and RevenueCat. We use the IDFV to connect your installation, usage, and subscription records.
  • Device and app information. Device model, iOS version, screen size, language and region setting, time zone, App version and build, and network information, such as whether you are on Wi-Fi or cellular and your mobile carrier.
  • IP address and approximate location. Like any app that connects to the internet, the App’s requests reveal your IP address. We and Mixpanel use it to estimate your approximate location (country, region, and city). Our servers also use it to identify your internet provider. We do not collect your precise location.
  • Onboarding answers. Your answers to the setup questions:
    • your gender, with a “Prefer not to say” option;
    • your sleep and wake-up habits, for example whether you are a morning person, how you feel at night and after waking, and whether you snooze or go back to sleep;
    • your current and goal wake-up times;
    • the alarm days and missions you choose;
    • whether you signed the commitment.
    The signature you draw is never stored or sent.
  • App usage. Screens you view and features you use. This includes:
    • alarm settings (time, number of repeat days, mission, difficulty, sound, volume, whether snooze is locked, and whether the alarm is on), identified by a random alarm ID, but never alarm labels;
    • when alarms ring, when missions start and finish, how long they take, and whether you switched to a backup mission;
    • streak and badge counts;
    • settings changes, including whether Apple Health is turned on (but no Health data);
    • if you use Track sleep, when a session starts and how long it lasted.
  • Purchases. Which plan you view and choose, whether a purchase or restore succeeded, your subscription status, and, through RevenueCat, App Store transaction details. These details include the product, price, currency, App Store country, dates, and trial, renewal, or cancellation status. Payments are handled by Apple. We never receive your payment card details.
  • How you found the App. If you open Only through one of our campaign links, the App records the link’s campaign details. These can include the source, medium, campaign, ad group, ad, a click identifier added by the ad platform, the link itself, and any referring page named in it. The App also collects Apple’s Search Ads attribution token. Apple uses it to tell us whether the install came from an Apple Search Ads campaign and, if so, which campaign, ad group, keyword, and ad, and in which country.
  • Diagnostics. Technical details about errors and alarm audio, such as error messages, the audio output in use (for example, speaker or Bluetooth headphones), and volume changes while an alarm is ringing, so we can fix problems and keep alarms reliable.
  • Support emails. If you email us, for example with Contact Support in the App, we receive your email address, your name if your email shows it, and anything you write. The email the App drafts for you includes the App version, build, and iOS version. We use this only to answer you.

Unless you email us, the App does not collect your name, email address, or phone number. It never collects your contacts, photo library, precise location, or Apple’s advertising identifier (IDFA).

How We Use Information

  • To ring your alarms and run missions, on your device.
  • To provide and manage subscriptions, including free trials and restoring purchases.
  • To understand how the App is used and improve it, including testing different versions of the subscription screen.
  • To measure which of our marketing campaigns bring people to the App.
  • To diagnose problems and keep alarms reliable.
  • To comply with legal, tax, and accounting obligations.

Who We Share Information With

We share information only with service providers that help us run the App. We use them only to process information for the purposes described in this policy, and we expect them to protect it with the same or equal protection as this Privacy Policy:

  • Mixpanel (product analytics). Receives the identifiers, device information, approximate location, onboarding answers, app usage, diagnostics, and purchase events described above. If you arrived through one of our campaign links, it also receives the campaign’s source and ad network (for example, “tiktok”), but not the full link or click identifier.
  • RevenueCat (subscription management). Receives App Store transaction information, subscription status, the IDFV, device information, and the Apple Search Ads attribution token. It can also send subscription events to our analytics on our behalf.
  • Our servers. Our servers are hosted with Railway and store data in MongoDB Atlas. They receive:
    • install information (IDs, device information, IP address, and campaign details);
    • the Apple Search Ads attribution token;
    • subscription events from RevenueCat.
    Each time the App starts, and when the subscription screen loads, the App sends the IDFV so our servers can choose which subscription options and which version of the subscription screen to show you. Our servers do not save the IDFV from this request. Like every request to our servers, it is recorded in our server logs with your IP address and the time.
  • IP lookup services. When the App is first opened, and on later launches until our servers have recorded the install, it uses ipify to learn your public IP address. Our servers use IPinfo to estimate approximate location from that IP address.
  • Slack (internal team notifications). When a new install is recorded, our team receives a message with the App version, device model, iOS version, language, time zone, and the random install ID. It contains no IP address, location, or IDFV.
  • Apple. Apple processes App Store purchases and Apple Search Ads attribution. Alarms, notifications, and Live Activities are scheduled locally through iOS. Apple’s handling of this information is governed by Apple’s privacy policy.

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition, or sale of assets.

Advertising and Tracking

The App does not show ads, does not include advertising SDKs, and never asks for permission to track you, because it does not track you. We do not use Apple’s advertising identifier (IDFA). We return Apple’s Search Ads attribution token to Apple so Apple can tell us whether an Apple Search Ads campaign led to your install. Other than that, we do not share your information with advertising networks or data brokers, and we do not combine it with information from other companies’ apps or websites for targeted advertising.

When you arrive through one of our campaigns, we use the campaign details described above only to measure which campaigns work. Our servers and Mixpanel process them, and RevenueCat and Apple process the Apple Search Ads token. We do not send them back to any ad platform.

We do not sell your personal information. We do not share it for cross-context behavioral advertising.

Notifications and Permissions

Only uses alarm and notification permissions to ring your alarms at the times you set, and Live Activities to show a ringing alarm and your mission progress on the Lock Screen and in the Dynamic Island. These are created on your device. Camera, microphone, motion, and Apple Health permissions are requested only when you use a feature that needs them. You can change any of these permissions in your iPhone’s Settings app.

Data Retention

Information stored on your device stays there until you delete the App. In the App, you can delete individual alarms and uploaded sounds. Wake-up history and mission photo thumbnails are removed only when you delete the App. The App keeps your 120 most recent tracked sleep sessions, and sleep totals from Apple Health cover at most the last 180 days.

We keep install, attribution, and subscription records, and server logs, for as long as we need them for the purposes in this policy, including accounting and tax. When you ask us to delete your information, we delete it from our servers and ask Mixpanel and RevenueCat to delete the data they hold for us, unless we are legally required to keep it. Otherwise, Mixpanel and RevenueCat keep data according to the retention settings we choose and their terms.

Data Security

We use reasonable technical and organizational measures to protect the information we handle. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Your Choices and Rights

  • You can decline or revoke camera, microphone, motion, notification, and alarm permissions in your iPhone’s Settings app. If a mission needs a permission you have declined, the App lets you skip it or use a backup mission.
  • You can turn Apple Health off in the App, and revoke access in the Health app.
  • You can turn off Live Activities in the App’s Settings.
  • Deleting the App removes everything it stored on your device.

Depending on where you live, you may have the right to:

  • access the personal information we hold about you;
  • correct or delete it;
  • object to or restrict how it is used;
  • receive a copy of it.

To make a request, email privacy@viralapplabs.com. Because Only has no accounts, we may ask for details that help us find your records. These can include the order ID from your App Store receipt, or your device model and the approximate date you installed the App. We will not discriminate against you for exercising your rights.

Children's Privacy

Only is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

International Users

Viral App Labs LLC is based in the United States. Information we and our service providers collect may be transferred to, stored, and processed in the United States and other countries where those providers operate. Data protection laws there may differ from the laws where you live. If you are in the European Economic Area, the United Kingdom, or Switzerland, you may also lodge a complaint with your local data protection authority.

Changes to This Policy

We may update this Privacy Policy from time to time, for example when we add features. We will post the updated policy on this page and change the effective date above. Changes take effect when posted.

Contact Us

If you have questions about this Privacy Policy or how Only handles your information, please contact us:

Viral App Labs LLC
privacy@viralapplabs.com
support@viralapplabs.com