Last updated: 20 October 2026
Larken (“the App”) is provided by Larken Labs (“we”, “us”). This policy explains how the App handles your information. Short version: the App requires no account, and almost everything it does stays on your device. Two things go online: photos you take for the photo mission, which our server and Anthropic’s Claude check, and your subscription, which RevenueCat manages under an anonymous ID. We do not sell your information.
Your alarms, wake-up routine, mission settings, the codes you register for the scan mission, your answers to the setup questions (such as an optional age range), wake-up history, streaks, and preferences are stored locally on your device. We never receive them. Deleting the App removes them from your device. Settings → Erase all my data also erases them from the device; it keeps your subscription status, your anonymous Account ID and the Emergency Mode counter.
The App uses your camera for two missions. The scan mission reads a barcode or QR code you registered; the code is matched on your device and the App does not send it anywhere. The photo mission sends each photo online to be checked, as described in the next section. Camera access is optional — if you decline it, these missions fall back to a motion-based mission.
If you choose the photo mission, the App asks you to photograph a household object. To check whether you photographed the right thing, every photo you take for the photo mission is sent over the internet to our server, which, unless it refuses the request, passes it to Anthropic’s Claude model to identify what is in it. This includes photos taken when you try the mission in practice. There is no setting to turn this off. If you do not want your photos sent anywhere, choose a different mission: the shake, math, typing and scan missions run on your device and upload nothing you make.
What is sent. Before the photo leaves your device, the App shrinks it (to at most 640 pixels on its longest side) and strips its embedded metadata, including location and timestamp. Our server receives that photo, a label naming the platform (iOS or Android) and whether it is a practice check, and your anonymous RevenueCat account ID. The request also carries the standard information any app’s web request does, such as a User-Agent naming the app build and operating-system version; our server does not log it. The App does not send your name, your email, a device identifier, or the name of the object you were asked to find. Our server uses the anonymous ID to confirm your subscription with RevenueCat and to enforce a daily limit on checks. Anthropic receives only the photo and our fixed instructions — no identifier for you or your device, although the photo shows whatever you point the camera at.
What our server keeps. Our server does not store the photo: it passes it to Anthropic, unless it refuses the request, and discards it. For each check, including a request it refuses, it writes one log line containing a random request number, a one-way hash of your anonymous ID (not the ID itself), the platform label, the result and how long it took, how many checks you have made that day, whether the subscription answer was cached, the AI model used and its usage and cost, our total spend that day, and how many objects were found and the highest score. The log line never contains the photo, a description of it, the names of the objects in it, or your ID. Cloudflare keeps these log lines for at most 3 days. Under the same hash, the server also keeps a count of the day’s checks, deleted after 2 days, and a cached answer about whether you are subscribed, kept for up to an hour. Our server runs on Cloudflare, which handles the connection, including your IP address, to deliver it.
What Anthropic does with it. Anthropic processes the photo on our behalf. It automatically deletes inputs and outputs within 30 days, or keeps them for up to 2 years if its automated trust-and-safety systems flag them (and keeps trust-and-safety classification scores for up to 7 years). If its automated safety systems flag content, a person at Anthropic may review it. Anthropic may also keep data where the law requires it. Anthropic does not use your photos to train its models. See Anthropic’s data retention policy.
Because Anthropic receives no identifier with the photo, we have no way to ask Anthropic to delete a particular photo. The photo is deleted from your device right after the check, unless Memories keeps it.
Memories is on by default and can be switched off in Settings → Save wake-up photos. While it is on, the photo that completes each real (not practice) photo mission is kept only on your device. The App never uploads Memories, and keeps them out of iCloud backups. The photo itself was sent once for its check, as described above. You can delete Memories one at a time or all at once in the App.
Motion-based missions read your device’s accelerometer to detect shaking. These readings are used on-device in the moment and are not stored or transmitted.
The App schedules local alarms and wake-up reminders on your device. There is no push server and no message is sent off your device.
Subscriptions are purchased through the Apple App Store (on iOS) or Google Play (on Android) and managed with the help of RevenueCat, Inc. To validate purchases and manage your subscription, RevenueCat assigns a random, anonymous app-user identifier and processes purchase and transaction data along with device identifiers (on iOS, Apple’s identifier for vendors, which is specific to our apps) and your App Store country, plus your device model, operating-system version, language settings, app version, and your IP address. The RevenueCat software in the App does this every time the App starts or comes back to the foreground, whichever mission you use. Our photo-check server also sends that anonymous identifier to RevenueCat to confirm that you are subscribed. The App never sends us your name, email address, or payment details. Payment is handled entirely by Apple or Google. See Apple’s Privacy Policy, Google’s Privacy Policy, and RevenueCat’s Privacy Policy for their practices.
The App contains no advertising and no tracking, and we have added no analytics or crash-reporting service. RevenueCat’s dashboard shows us subscription statistics and each anonymous customer’s purchase history.
The App is not directed to children under 13, and we do not knowingly collect personal information from children.
You choose whether any photo is uploaded: only the photo mission sends photos, and you can pick another mission at any time. Your subscription is always managed through RevenueCat, as described above. We hold no photos, and our server’s records hold your ID only as a one-way hash. Anyone who has your Account ID, including us through RevenueCat’s dashboard, can match it to those records. To ask us about, or delete, the subscription records RevenueCat holds under your anonymous ID, email us with your Account ID (Settings → Copy Account ID); if the App is still installed, RevenueCat creates a new record the next time the App or our photo-check server contacts it. Settings → Erase all my data erases your alarms, routine, history, Memories and settings from the device. It keeps your subscription status, your anonymous Account ID and the Emergency Mode counter, and it does not reach RevenueCat or our server. Deleting the App erases everything it stored on your device.
If you email us, we receive your email address, what you write, and anything you include. The App’s Support links pre-fill the app version and operating-system version (and, on Android, the device model), which you can delete before sending. We use these only to reply to you. If you include your Account ID, we can link your email to it.
We may update this policy; the “last updated” date above will change accordingly.
Questions about privacy? Email contact@larkenalarm.com.