Privacy

1. Who is responsible

Bastian Wiede, WI-IM-EX
c/o IP-Management #4150
Ludwig-Erhard-Str. 18
20459 Hamburg, Germany
contact@wi-im-ex.com
+49 155 65084652

2. Accounts and sign-in

An account is required to use Agent Awake. Supabase provides our authentication and account database. We process your email address, account ID, verification status, sign-in sessions and technical security records to create and secure your account. Sign-in emails are delivered through Resend; this involves your email address, the authentication message and delivery information. Password sign-in, where configured, is handled by Supabase. The apps store session credentials in the operating system’s secure credential storage.

These activities provide the service you request under Article 6(1)(b) GDPR and protect accounts from misuse under Article 6(1)(f). Authentication emails are service messages, not a marketing subscription.

3. Pro purchases

Apple processes in-app purchases. We do not receive your card number or bank details from Apple. Our server verifies signed Apple transaction information and links the purchase to your Agent Awake account. This includes product and transaction identifiers, account association, purchase environment and entitlement status. Verification may also process expiry, renewal and revocation information. The Mac and iPhone receive short-lived, signed proof of Pro access.

We use this information to provide paid access, restore purchases and prevent fraudulent claims under Article 6(1)(b) and (f) GDPR, and to meet applicable legal obligations under Article 6(1)(c).

4. Your Mac and iPhone connection

Pairing connects your devices. Remote commands and responses are encrypted on the paired devices before passing through the relay. The relay handles encrypted messages and technical connection data, including device identifiers, authentication records, network data, delivery state and timestamps. End-to-end encryption applies to command and response contents; account sign-in, purchase verification and notification metadata are separate services.

Settings, schedules, chat selections, queued actions and cached device status may be stored locally. Sending a scheduled message causes your chosen agent provider to process that message under its own terms and privacy policy. Agent Awake does not change the provider’s usage limits.

5. Provider usage and optional desktop reading

Supported integrations read usage information using accounts already connected on your Mac. Provider credentials remain on the Mac. Usage numbers, provider labels and reading times can be shared with your paired iPhone through the encrypted connection. Availability and freshness depend on the integration.

If you enable desktop reading, Agent Awake uses macOS Accessibility permission to read relevant visible interface labels, such as credit balances. You can turn off this feature in Agent Awake and revoke permission in macOS settings. This optional feature is used to provide your requested functionality; it is not an advertising or cross-app tracking service.

6. Push notifications

If you allow notifications, we store an Apple push token, installation identifier, device association and your selected notification types. The relay sends Apple a standard event such as “Agent finished” or “Keep awake ended”, with delivery identifiers. It does not include your prompt text or chat titles in these push alerts. Apple delivers the notification through APNs. You can disable notifications in iPhone settings and adjust event preferences in Agent Awake.

7. Website, technical records and support

Lovable hosts the website. Requests may process IP address, browser and operating system information, page URL, time and response status. Website analytics and error reporting may process page visits and technical error information to help operate and improve the site. Your theme preference is stored locally in your browser. The website does not ask you to enter an Agent Awake password or payment details.

When you contact support, we process the contact details, message and diagnostic information you choose to provide. Please do not send passwords, sign-in codes or private keys. We use technical records and support information to operate, secure and troubleshoot the service, and to answer requests, under Article 6(1)(b) or (f) GDPR as applicable. Where consent is required for optional processing, Article 6(1)(a) applies and you may withdraw it for the future.

8. Service providers and international processing

We use Supabase for account infrastructure, Resend for authentication email, Apple for purchases and push delivery, and hosting infrastructure for the website and encrypted relay. Our Supabase project is configured in Frankfurt. Service providers may also process operational, support or delivery data outside the European Economic Area. Applicable contractual and legal safeguards govern such processing; a database region does not mean all service operations occur only in that region.

Further information: Supabase, Resend, Apple and Lovable.

9. Retention and deletion

Account and purchase-link records are kept while needed to provide your account. You can delete the account from either app under Account & Pro, including from the signed-in Pro screen. Deletion removes the account and its purchase links from our account service. It does not cancel an Apple subscription, request a refund, delete your provider accounts or automatically erase data stored on paired devices. Cancel subscriptions separately with Apple, unpair devices and clear local data as needed.

Relay command packets have short expiry times and expired records are removed during relay operation. Push delivery records also expire; device registrations are used only while current. Technical logs, backups and support records may remain for their operational retention period or as required by law. We retain personal data only while needed for the relevant purpose, a legal requirement or the establishment or defence of legal claims. Contact us for a deletion request if you cannot access your account.

10. Your rights

Subject to applicable conditions, you can request access, correction, erasure, restriction and portability of your personal data. You can object to processing based on legitimate interests and withdraw consent for the future. Contact contact@wi-im-ex.com. You may complain to a data protection supervisory authority, including where you live or work or where an alleged infringement occurred.

11. Changes

We update this notice when our features or data processing change. Last updated: 27 October 2026.