Privacy policy
Last updated: 3 November 2026
Mitzvah Alarm recognizes speech on your phone. This policy explains the app’s local processing, its network connections, and this website.
Who is responsible?
Oleksii Lipovetskii, using the name Galtworks, Germany, is responsible for Mitzvah Alarm and this website. Contact: o.lipovetskii.dev@gmail.com. See our legal notice for operator details.
Speech and microphone
The app uses the microphone when you choose to practice or speak to dismiss an alarm. Audio and recognized words are processed on your device by the speech recognizer. The app does not send your recordings or recognized prayer to Galtworks, Hugging Face, or a cloud transcription service. Recording is not used for advertising or training our own models. Microphone permission can be withdrawn in your phone’s settings; the app also offers a dismissal method without speaking.
Location and local settings
If you allow foreground location access, the app uses your position to find a nearby city for Shabbat and sunset calculations. The current implementation may request precise location; you can decline, choose approximate access where Android offers it, or pick a city manually. Coordinates used for the calculations and your chosen city, alarm schedule, language, prayer preferences, and dismissed notices are stored or processed locally. The app does not upload these settings or your location to a Galtworks server.
Android’s device backup or transfer features may copy app data according to your system and account settings. This is separate from the app’s own network requests. Manage backups in Android settings.
Downloads and notices
The app downloads the selected speech model from Hugging Face over HTTPS. It also requests a public announcement feed hosted on Cloudflare Pages when the app opens or returns to the foreground. These requests do not contain your audio, transcript, selected city, or alarm settings. The hosting and delivery providers nevertheless receive normal connection information, such as your IP address, requested file, request time, and technical request information, and may process it for delivery and security.
Downloaded speech models, settings, and a cached announcement feed are kept on your device so the relevant functions can work offline. Announcements may need an internet connection to refresh. The app has no user account, advertising SDK, or app-usage analytics integration.
This website
Cloudflare Pages hosts and delivers this site. Cloudflare processes connection information such as IP address, request time, requested URL, and browser or device request details to deliver and secure it. We do not add advertising trackers, analytics scripts, embedded social media, third-party fonts, or optional cookies. Cloudflare may use strictly necessary security technologies as part of its hosting service.
Support and payment links
If you email us, your address, message, and any attachments are processed to respond. Our support mailbox is hosted by Google. Please do not send recordings, location details, or other sensitive information unless needed for your request. There is no checkout on this website at present. If you follow a payment link in an app version, Stripe handles the checkout on its own website; card details are not collected by this site. Any payment information available to us is used for payment support, refunds, and applicable recordkeeping.
Purposes and legal bases
Where EU data-protection law applies, we rely on legitimate interests in securely providing this site, delivering requested files and notices, and answering general enquiries (Article 6(1)(f) GDPR). Processing needed to handle a requested service or transaction is based on Article 6(1)(b); legally required records are based on Article 6(1)(c). For optional personal-data processing that requires consent, Article 6(1)(a) applies, and consent may be withdrawn. Operating-system permission controls let you decide whether the app can use your microphone or location; local-only processing does not give us access to those data.
Providers and international processing
Our hosting, file-delivery, email, and payment providers may process information outside the EEA, including in the United States. Applicable safeguards may include adequacy decisions and standard contractual clauses, depending on the provider and service. Their policies explain their processing and safeguards: Cloudflare, Hugging Face, Google, and Stripe. We do not sell your personal data.
Retention and deletion
Local settings and model files remain until changed, removed through app controls where available, or erased by clearing app storage or uninstalling the app. Android backups may remain subject to your backup provider’s controls. We keep support correspondence only as long as needed to handle the enquiry and any related dispute or legal obligation, and review it for deletion once that purpose ends. Transaction records, if any, are kept for applicable statutory retention periods. Provider-operated delivery and security records follow the provider’s retention practices; we do not set a separate fixed retention period for those records.
Your choices and rights
You can revoke microphone and location permissions, choose a city manually, and clear local app data through Android settings. There is no Galtworks account to delete. Where applicable, you can request access, correction, erasure, restriction, or portability of personal data we hold, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. Contact o.lipovetskii.dev@gmail.com. You may also complain to a data-protection supervisory authority, including the authority where you live or work.
Changes
We will update this policy when the app, website, or data practices change. The date below identifies this version.