This translation is provided for convenience; the Dutch version prevails. Nederlandse versie
Hop Awake privacy policy
Last updated: 31 October 2026
In short
- You need an account to pair your Sleepslab. For that we store your email address, your Sleepslab and your phone (which device is active).
- Your alarms, blocks, your streak and your history stay on your iPhone.
- Which apps you block and how long you use them, we cannot see. Apple does not allow it.
- If you order a Sleepslab, we keep your name, address, email address and order. We also have to for the tax authorities: 7 years. Payment goes through Stripe; we do not see your bank or card details.
- No advertising, no tracking, no analytics. We do not sell your data.
Who we are
Hop Awake (the app and the Sleepslab) belongs to Cordes Digital, the sole proprietorship of Jeremy Cordes.
- Chamber of Commerce (KVK) number: 42192711
- Address: Boulevard 1945 57, 7511 NH Enschede, the Netherlands
- Email: jcordes@runvex.app
- Phone: +31 6 14862977
- Website: hopawake.com
Cordes Digital is the controller for the processing of your data as described in this policy.
What data we keep, why and for how long
The app
This data is stored on our server at Supabase (see "Who we share data with").
| Data | Purpose | Legal basis | How long |
|---|---|---|---|
| Email address and the time you signed up and logged in | Logging in with a 7-digit code. We do not use a password. | Performance of the contract (you want to use the app with an account) | Until your account is deleted |
| Sleepslab data: Sleepslab ID, the serial number of the NFC chip (UID), status (active or blocked) and the link to your account | Checking that a Sleepslab is genuine, that it belongs to you and whether it is blocked (for example after a replacement). A Sleepslab can be linked to at most 2 accounts. | Performance of the contract | The link: until you unpair the Sleepslab or delete your account. The Sleepslab ID and the UID themselves are kept as part of our list of Sleepslabs, without any link to you. |
| Device data: a random device ID that the app creates itself, the type of phone (for example "iPhone (iPhone17,1)"), whether the device is active, when it was last seen, and which login session belongs to it | You can be logged in on one phone at a time. If you log in on a new phone, you see the type of your old phone and choose yourself whether to replace it. | Performance of the contract, and our legitimate interest in preventing misuse (one account shared by many people) | Until your account is deleted |
| Escape moments: the date and time you used an escape, and whether it was for the alarm or a block | You may use the escape 3 times a month. By keeping these moments on the server, the counter does not reset if you reinstall the app. | Performance of the contract | 40 days. After that we delete them automatically every night. If you delete your account earlier, they are gone immediately. |
| Technical data, such as IP address and time of a request | Supabase keeps these in log files for security and to fix faults. | Legitimate interest (a secure, working service) | A short time, according to Supabase's rules |
The web shop
If you order a Sleepslab on hopawake.com, you pay through Stripe. We then keep this data:
| Data | Purpose | Legal basis | How long |
|---|---|---|---|
| Order data: name, shipping and billing address, email address, what you ordered (colour, quantity), amount, any discount code and the date | Sending your order, answering questions, handling returns and replacements, and our accounts | Performance of the contract, and a legal obligation (tax record-keeping) | 7 years after the order (tax record-keeping) |
| Payment data: how you paid and whether the payment succeeded | Checking that you have paid, and refunding you after a withdrawal | Performance of the contract, and a legal obligation | 7 years (tax record-keeping). We never receive your full card or bank details; Stripe processes those. |
| Withdrawal: what you fill in on the withdrawal form (name, email address, order date, order number and reason if given) and the time it was sent | Handling your withdrawal and being able to show when we received it | Legal obligation (right of withdrawal) | Together with the order: 7 years |
For shipping, we give your name and address to the carrier that delivers your parcel.
The device ID is not Apple's advertising ID, nor a serial number of your phone. The app creates it itself, once.
We do not use your data for advertising or profiling, and we do not make automated decisions about you.
What stays on your iPhone
This data does not come to us:
- Your alarms. The app sets them through Apple's AlarmKit, on your phone.
- Your history and your streak. When and how you got up is worked out by the app on your phone.
- Your blocks. Which apps, when, and how you open them again.
- A technical log (times and states around the alarm, without personal data). It helps when looking for bugs. It only reaches us if you share it yourself, for example through a screenshot or the share button.
- Your login session and your device ID, stored securely in the iOS Keychain.
The app keeps this data in a shared folder on your phone (an "App Group"). Only parts of Hop Awake itself can access it, such as the Screen Time block screen. Other apps cannot.
If you delete the app, this data disappears from your phone. Only the device ID in the Keychain may remain; that is how iOS works. Your alarms and blocks are then gone.
Screen Time
To block apps, Hop Awake uses Apple's Screen Time features (Family Controls). You give permission for this yourself.
- You choose the apps in a screen from Apple. The app then only gets encrypted codes back, not the names of apps or websites.
- Apple does not let us see which apps you use, for how long, or when.
- The codes stay on your phone and do not go to our server.
Sleepslab
When you hold your phone against the Sleepslab, the app reads the Sleepslab ID and the serial number of the chip. When you pair it, these go to our server to check that the Sleepslab is genuine. After that the Sleepslab also works without internet; the alarm is then switched off on your phone itself.
Website
Our website hopawake.com sets no cookies and uses no analytics or tracking. Our hosting provider Vercel does see technical data such as your IP address, because that is needed to show the page.
The welcome-discount notice remembers in your browser (localStorage) that you have seen it, and whether you want to use the code. This stays on your own device, does not come to us and is not a cookie. You erase it by clearing the website data in your browser.
Who we share data with
We do not sell your data and do not share it with advertisers. There is no advertising, tracking or analytics in the app.
We work with these parties (processors):
| Party | What they do | Where |
|---|---|---|
| Supabase | Database and login for the app | Server in Ireland (EU, AWS region eu-west-1). Supabase is an American company. |
| Google (Gmail) | Sends the email with your login code. Google sees your email address and the code. | United States and other countries |
| Apple | Delivers the app through the App Store and TestFlight. Apple processes its own data about you, under Apple's privacy policy. If you take part in TestFlight, Apple may share crash reports and feedback with us if you choose to. | United States and other countries |
| Vercel | Hosts the website and processes the order and withdrawal forms | Worldwide network; server functions run in the US by default (Washington D.C.). Vercel is an American company. |
| Stripe | Payments in the web shop. Stripe also stores the order data and withdrawals. For fraud prevention and legal compliance, Stripe is sometimes a controller itself, under Stripe's privacy policy. | Stripe Payments Europe (Ireland); data may also go to the US. Stripe has an American parent company. |
| The carrier | Delivers your parcel. Receives your name and address. | The Netherlands and Belgium |
We only give data to others when the law requires us to.
Data outside the EU
Supabase, Google, Apple, Vercel and Stripe are American companies or have American parent companies. As a result, data may end up in the United States. That is only allowed with proper safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We use the safeguards these parties offer in their own terms.
Security
- You log in with a 7-digit code that is valid for 15 minutes. There is no password that can leak.
- All connections to our server are encrypted (HTTPS).
- In the database you can only see your own data. Pairing and unpairing are only possible through fixed checks on the server, and only from your active phone.
- The key we use to check whether a Sleepslab is genuine is not in the app.
- Your login session is stored in the iOS Keychain.
If something does go wrong with your data (a data breach), we report it where required to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and to you.
Your rights
You may:
- access your data;
- have your data corrected;
- have your data deleted;
- object or have the processing restricted;
- take your data with you in a common file format.
This is how to do it now:
- Unpair a Sleepslab: in the app, under your Sleepslabs.
- Log out: in the app.
- Delete your account: you do this yourself in the app, under Settings → Delete account. Your account, your device data, your escape moments and your Sleepslab links are then deleted from our server straight away, and the app erases everything on your phone.
- Order data: because of the tax record-keeping obligation we cannot delete this before 7 years have passed. You can view it; email us.
- View or take your data: send an email to jcordes@runvex.app. Email from your account's address. We respond within one month. If deleting in the app does not work, you can also do it this way.
You delete data on your phone yourself, by deleting the app.
Children
Hop Awake is meant for people aged 16 and over. If you are younger, only use the app with permission from your parent or guardian. Do you think we hold data of a child under this age? Email us and we will delete it.
Changes
If the app changes, we update this policy. The date of the latest version is at the top. For major changes we will let you know in the app or by email.
Contact
Questions about your privacy? Email jcordes@runvex.app.
Complaints
Not happy with how we handle your data? Let us know first, and we will look for a solution together. You may also always lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.