Privacy Policy — Nawm

1) Who we are

Nawm is a sleep and fitness tracker for Wear OS watches and Android phones, developed by Saifullah Ahad ("we", "us", "our"). Our website / portfolio is: https://saifullah.ai.

2) What this policy covers

This Privacy Policy explains what information Nawm (the "App") handles, what stays on your device, what (if anything) leaves your device, and the choices you have.

3) Information the app handles

Nawm is designed to keep your health information on your device. The categories below describe what the app touches.

• Sleep, heart rate, steps, calories, distance, floors, active minutes and workout data measured by your Wear OS watch sensors. This data is stored locally on the watch and on the paired phone for display inside the app. It is not sent to the developer or to a remote server by the app.
• GPS location during a workout (only when you start a Walk / Run / Cycle / Strength session on the watch and only for the duration of that session). The route is stored on the device. The app does not send GPS data to the developer or to a remote server.
• App settings such as sleep goal, step goal, smart-alarm preference and units. Stored locally.
• App Lock settings: the on-off state of App Lock and biometric unlock, plus a salted SHA-256 hash of your App PIN (if you set one). The PIN itself is never stored. All of this stays on the device.
• Optional feedback messages you write in the "Send Feedback" sheet on the About screen. See section 6.
• Device & technical data attached only to feedback messages you choose to send: app name, app version, Android version, device manufacturer, and device model.

4) How information is used

• To show your daily sleep, heart rate, workouts and movement inside the app on the watch and phone.
• To compute a daily readiness score and weekly trends from the metrics already stored on the device.
• To deliver feedback messages you submit (with optional reply email and a short technical footer) to the developer's inbox.

5) Sharing and third parties

We do not sell your information. We do not run advertising SDKs in this app. We do not run an analytics or crash-reporting SDK in this app.

The app interacts with the following on your device or at your request:

• Health Connect (optional, user-initiated). The Activity screen has a "Connect" button and an "Export today" / "Export workout" button. Nothing is exported to Health Connect until you tap one of these buttons and grant the corresponding Health Connect permissions yourself. Once connected, Nawm can write step, calorie, distance, floor, heart-rate and exercise records into Health Connect. You can revoke Health Connect permissions at any time from the Health Connect app or from Settings > Privacy > Health Connect.
• Web3Forms (optional, user-initiated). Used only when you tap "Send" inside the "Send Feedback" bottom sheet. See section 6.
• Google Play Services - Wearable Data Layer. Used to sync sleep, fitness and workout data between your watch and your phone. This is on-device sync over the standard Wear OS bridge and does not send the data to the developer or to a remote server.

6) Optional in-app feedback messages

Nawm includes a Send Feedback option on the "About developer" screen. This feature is fully user-initiated - no message is ever sent unless you tap Send.

If you submit feedback:

• Your message text is delivered to the developer's email inbox.
• Your email address is optional. If you provide it, it is used solely so the developer can reply. If you leave it blank, the message is delivered anonymously and the developer cannot reply.
• A short technical footer is auto-attached to help reproduce bugs: app name, app version, Android version, device manufacturer, and device model. No identifiers, contacts, account data, or sleep / heart-rate / workout content from inside the app are included.

The message is sent over HTTPS to a third-party email-relay service, Web3Forms (privacy policy: https://web3forms.com/privacy), which delivers it to www.saifullah.ai@gmail.com. Web3Forms processes the submission only to relay it.

7) Permissions the app requests

• Body sensors / Heart rate (watch only): to read heart-rate values from the watch sensor for live HR and sleep HR context.
• Activity recognition: to read steps and exercise events on the watch.
• Foreground service - health / location (watch only): to keep the sleep tracker and workout tracker running while the watch screen sleeps.
• Location (watch only, fine): to record GPS route during a workout you start. Not used outside of an active workout session.
• Health Connect permissions (phone, optional): only when you tap "Connect" and approve them. Used to write steps, calories, distance, floors, heart-rate and exercise records that you choose to export.
• USE_BIOMETRIC (phone): to support the optional biometric unlock for App Lock.
• POST_NOTIFICATIONS (phone): to show optional bedtime reminders and weekly summaries when you enable them in Settings.
• BLUETOOTH_CONNECT (phone): to communicate with the paired Wear OS watch.
• INTERNET (phone): only used when you tap Send inside the feedback sheet (Web3Forms) or when Health Connect performs its own sync (which you initiate).

8) Data retention and deletion

Sleep, heart rate, fitness and workout data live on your device. You can remove all of it by clearing app data or uninstalling Nawm from the phone and from the watch.

Feedback messages you sent through the in-app form sit in the developer's email inbox. To request deletion, email www.saifullah.ai@gmail.com with the rough date you sent the message.

9) Security

Local data is protected by Android's standard sandbox. The App PIN (if you set one) is stored only as a salted SHA-256 hash. Biometric unlock uses Android's BIOMETRIC_WEAK class - your device PIN or pattern does not unlock Nawm. Feedback messages are sent over HTTPS.

No method of transmission or storage is 100% secure, but the app is designed to keep your health information on the device by default.

10) Children's privacy

Nawm is not directed to children under 13. The app is intended for users aged 13 and over who use a Wear OS watch.

11) International transfers

Sleep, fitness and workout data does not leave your device. Feedback messages (only when you tap Send) are transmitted to the Web3Forms email relay; the developer reads them on infrastructure in the developer's country of residence.

12) Changes to this policy

We may update this Privacy Policy as the app changes. Updated versions will be posted here and the effective date at the top will be updated.

13) Contact

Questions or requests? Contact: Saifullah Ahad
Email: www.saifullah.ai@gmail.com
Phone: +8801711134346
Website: https://saifullah.ai