Hushfall privacy policy
Effective date: 2026-10-16
Developer: Baitham Apps
Contact: baitham.labs@gmail.com
Summary
Hushfall collects nothing. It has no account, no ads, no analytics and no crash reporting. The app cannot connect to the internet: it does not declare the INTERNET permission. Everything it knows stays on your phone.
What stays on your phone, and why
Hushfall stores these items only in its private app storage on your device. We never receive them.
| Item | Why it exists |
|---|---|
| Your settings (fade length, presets, switches) | So the app remembers your choices |
| Timer state | So a running timer survives a restart of the app or phone |
| The journal (Pro): when each timer ran, why it stopped, the name of the app that was playing, the track title and artist, and the playback position | So the morning card can show where you drifted off and let you resume |
| Your alarms, reminders and the alarm history ("did it ring") | So alarms and reminders go off, and the Alarm check can tell you why one didn't. Alarm times, labels, task settings, the way-out sentence and scan-code fingerprints are also kept in Android's "device-protected" storage so an alarm can ring after a restart before you unlock the phone. Reminder text is not |
Android's backup is switched off for Hushfall, so none of this goes to Google Drive or to a new phone during a device transfer.
Permissions, one by one
Android shows some of these as a prompt and some on a settings page. Hushfall asks only when a feature needs the permission.
| Permission (as declared) | What Hushfall uses it for |
|---|---|
POST_NOTIFICATIONS | Shows the ongoing timer notification with its buttons, the ringing alarm and your reminders |
FOREGROUND_SERVICE, FOREGROUND_SERVICE_SPECIAL_USE | Keeps the sleep timer running while the screen is off |
FOREGROUND_SERVICE_MEDIA_PLAYBACK | Plays Hushfall's own sleep sounds with the screen off |
WAKE_LOCK | Keeps the phone awake just long enough to fade and pause on time |
SCHEDULE_EXACT_ALARM | Ends the timer at the exact minute you chose |
RECEIVE_BOOT_COMPLETED | After the phone restarts: resumes a running timer, sets your alarms and reminders again, and lets an alarm ring before you unlock the phone |
VIBRATE | Gives a small buzz when a shake extends the timer |
ACCESS_NOTIFICATION_POLICY (optional) | Turns on Do Not Disturb when the timer ends, if you choose that end action |
REQUEST_IGNORE_BATTERY_OPTIMIZATIONS (optional) | Lets you exempt Hushfall from battery limits so the timer is not killed overnight |
BIND_NOTIFICATION_LISTENER_SERVICE ("notification access", optional) | See below |
BIND_DEVICE_ADMIN ("device admin", optional) | See below |
USE_EXACT_ALARM | Rings alarms, reminders and the timer end at the exact minute you chose |
USE_FULL_SCREEN_INTENT | Shows the alarm screen over the lock screen when your alarm (or a Relentless reminder) goes off |
FOREGROUND_SERVICE_SYSTEM_EXEMPTED | Keeps a ringing alarm going until you turn it off |
CAMERA (Pro, optional) | The "Scan a code" alarm task. Frames are checked on the phone and never saved; only a fingerprint (hash) of the code is kept |
ACTIVITY_RECOGNITION (Pro, optional) | The "Walk" alarm task counts steps while the alarm rings. Nothing is stored |
com.android.vending.BILLING | Lets the Play Store app handle your Pro purchase |
Notification access (shown in the app as "media access"). Android ties its list of active media sessions to this setting. Hushfall uses it only to see which app is playing and to pause that app. It reads the app name, track title and playback position. It does not read the content of your notifications, messages or any other app data. This information is shown on screen and, for Pro users, saved in the journal on your phone. It is never sent anywhere. Without this access the timer still works by other methods, but Hushfall cannot show titles.
Device admin. Optional and off by default. Hushfall uses it for one thing: turning the screen off when the timer ends (the force-lock policy). It cannot read or change anything else. You can switch it off at any time in the app's settings or in Android's device admin list.
Motion sensor. Hushfall reads the accelerometer in two places: near the end of a timer, so a shake can extend it, and while an alarm with the "Shake" task rings, to count the shakes. It needs no permission. It reads only shake strength, only at those times, and stores nothing.
Text-to-speech (Pro reminder voice). Android's text-to-speech engine on your phone reads the reminder text aloud. Hushfall passes the text to it through Android and has no internet access, so the text stays on the phone.
Do Not Disturb access is optional and used only for the end action described above.
Purchases
Hushfall Pro is a one-time purchase handled by Google Play. Hushfall uses Google's Play Billing library, which talks to the Play Store app on your phone. Google processes your payment details and purchase record; Hushfall never sees your card or account details. Google's privacy policy applies to the purchase: https://policies.google.com/privacy.
Children
Hushfall is not directed at children under 13 (or the minimum age in your country) and is listed for adults. Because it collects no data, it holds no information about anyone, children included.
Deleting your data
All Hushfall data is on your phone, so you control it:
- Clear the journal: Journal screen, "clear".
- Delete everything: Android Settings, Apps, Hushfall, Storage, "Clear data". Uninstalling the app removes it too.
We hold no copy, so there is nothing for us to delete on a server.
Changes
If this policy changes, we will update the effective date above and publish the new version at this address. If a future version ever collects data, we will say so here and in the app before it does.
Contact
Questions about privacy: baitham.labs@gmail.com