← Back to Palarm

Privacy Policy

Effective date: August 6, 2026

한국어 버전 (Korean version)

Ductorio ("we," "us," or "our") operates EarlyBird AI (also known as Palarm, the "Service"), a morning alarm app that wakes you up with an AI voice conversation. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have.

1. Information We Collect

  • Account information: your email address, your name (when provided by Google or Apple Sign-In), and a social login account identifier.
  • Conversation data: text transcripts of your voice conversations with the AI (converted from speech on your device), conversation session details (time, number of turns, wake-up state), and AI-generated conversation summaries (per-session, weekly, and monthly).
  • AI-inferred profile information: to personalize future conversations, our AI may extract and store information you mention during conversations, such as your name, occupation, gender, general location, topics you prefer or want to avoid, and your preferred conversation style.
  • Alarm settings: alarm times, repeat days, and your chosen AI persona.
  • Device information: push notification token, operating system (iOS/Android), and app version.
  • Advertising data (with your consent): advertising identifiers (IDFA/AAID) and related device information, collected by Google AdMob to serve ads.
  • Automatically generated information: IP address, access timestamps, and service usage records (including error logs), recorded in server logs for service operation, security, and incident response, and deleted according to our hosting providers' log retention policies.

🎙️ About your voice

We do not transmit or store your raw voice audio on our servers. Speech-to-text runs through your device's operating system speech recognition (provided by Apple or Google), and only the resulting text is sent to us. As part of this process, Apple or Google may transmit audio to their own servers to perform recognition, subject to their respective privacy policies.

2. How We Use Your Information

  • To create and manage your account and authenticate you
  • To provide the alarm and AI wake-up conversation service
  • To personalize conversations based on your history and preferences
  • To send service-related push notifications (such as announcements)
  • To serve ads (only where you have consented)
  • To respond to support inquiries and improve the Service

3. AI Processing

  • Your conversation transcripts and personalization context are sent to Google LLC's Gemini API to generate AI responses.
  • AI-generated response text is sent to Microsoft Corporation or Google LLC text-to-speech services to synthesize the voice you hear.
  • We do not use your conversations to train our own AI models.
  • The AI may infer information about you (such as gender or location) from what you say. You can request access to, correction of, or deletion of this information as described in Section 7.

4. Data Retention

  • We retain your personal information while your account is active, except where retention is required by law.
  • You can delete your account yourself at any time in the app under Settings → Delete account (설정 > 회원탈퇴). Deletion takes effect immediately and removes your account together with your conversation transcripts, AI-extracted profile, conversation summaries, alarm settings, and push notification tokens.
  • If you cannot access the app, you can also request deletion at contact@ductorio.com; we will verify your identity and delete your information without undue delay (at the latest within 30 days).

5. Service Providers and International Transfers

We share personal information with the following service providers, which process it on our behalf. Your data may be processed in the United States, Singapore, and other countries where these providers operate.

Provider Purpose Data involved
Supabase, Inc. (US) Authentication and database hosting Account info, transcripts, profile, alarms, push tokens
Google LLC (US) AI response generation (Gemini API) Conversation transcripts, personalization context
Microsoft Corporation (US) Text-to-speech synthesis AI response text
Railway Corp. (US; servers in Singapore) Application server hosting Data processed by our server
Expo (650 Industries, Inc., US) Push notification delivery Push notification tokens
Google LLC — AdMob (US) Ad serving (with consent) Advertising identifiers, device information

We do not sell your personal information. We may also disclose information if required by law or valid legal process.

6. Advertising and Tracking

  • The app shows ads via Google AdMob. On iOS, we request App Tracking Transparency (ATT) permission before using the advertising identifier; declining does not affect app functionality.
  • Users in regions covered by Google's consent framework can change their ad privacy choices at any time in the app under Settings → Ad privacy settings.
  • Our website (ductorio.com) does not use cookies.
  • We do not currently respond to browser "Do Not Track" signals.

7. Your Rights and Choices

  • You may request access to, correction of, or deletion of your personal information, or ask us to restrict its processing, by emailing contact@ductorio.com. We will verify your identity and respond without undue delay.
  • You can delete all of your personal information yourself, without contacting us, in the app under Settings → Delete account (설정 > 회원탈퇴) — see Section 4.
  • You can disable push notifications in your device settings at any time.
  • You can withdraw ad tracking consent via iOS ATT settings or in-app ad privacy settings.

California residents: under the CCPA/CPRA you have the right to know what personal information we collect and how it is used, the right to request deletion and correction, the right to opt out of the "sale" or "sharing" of personal information, and the right not to be discriminated against for exercising these rights. We do not sell personal information; you can opt out of ad-related sharing through the ATT prompt and in-app ad privacy settings. Residents of other U.S. states with comprehensive privacy laws may have similar rights. To exercise any of these rights, contact contact@ductorio.com.

8. Security

We protect your information with measures including encryption in transit (TLS), row-level database access controls, token-based authentication, and data minimization (for example, we never collect raw voice audio). No method of transmission or storage is 100% secure, but we work to protect your information using commercially reasonable safeguards.

9. Children's Privacy

The Service is not directed to children under 13 (or under 14 in the Republic of Korea), and we do not knowingly collect personal information from them. If we learn that we have collected such information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post changes on this page at least 7 days before they take effect (30 days for material changes).

11. Contact Us