Privacy Policy

MaskAlarm

This privacy policy applies to the MaskAlarm app (hereby referred to as "Application") for mobile devices that was created by SomexAI Applications Group, LLC (hereby referred to as "Service Provider") as a Commercial service. This service is intended for use "AS IS".

Information Collection and Use

The Application collects diagnostic and usage information in two ways:

Third-party analytics (Android only): the Android version uses Google Analytics for Firebase and Firebase Crashlytics, which automatically collect standard diagnostic and usage information such as your device's Internet Protocol (IP) address, device model and operating system, in-app events, and crash reports. The iOS version does not include these third-party analytics or crash-reporting services.
Session diagnostics from the Application (both platforms): at the end of each monitoring session, the Application sends a small amount of technical information to the Service Provider's own servers to help keep the mask-off alarm reliable. This includes your device model and app version, statistics about the session (such as its length, the number of AI mask-checks performed, and how many mask-off events and alarms occurred), and how the session started and ended — including whether it stopped normally or ended unexpectedly because the app closed or crashed. This information contains no camera images and is not linked to your real-world identity; it is associated only with the random installation identifier described under "Accounts and Identifiers." You can turn this off at any time in Settings → Data & Privacy → "Share diagnostic & crash data." When it is off, the Application sends none of this information, except the minimal usage needed to enforce a free evaluation if you have one active.

The Application does not gather precise information about the location of your mobile device.

Camera Usage and Image Handling

The Application uses your device's camera exclusively for CPAP mask monitoring purposes:

The camera is only active while you have explicitly started a monitoring session, and you can stop it at any time by ending the session.
During a session, the Application takes small still images ("frames") of the sleeping area at intervals throughout the session to detect whether you are wearing your CPAP mask.
To determine whether the mask is on or off, each frame is transmitted securely over an encrypted connection to a third-party artificial-intelligence service, which returns a simple result (for example, "mask on," "mask off," or "no person in bed").
Images are never stored or saved — neither on your device nor in the cloud — and each image is deleted as soon as it is processed. Frames are used only for this real-time mask-detection purpose, never to advertise to you or to build a personal profile.
The third-party AI provider processes each frame to generate the result and handles it in accordance with its own privacy and data-retention policies.
Images are not sold. They are not shared with third parties except the AI provider that performs the detection, and except as otherwise described in this policy (for example, where required by law).

Phone-to-Phone Transfer (Optional)

If you switch phones, the Application can move your data for you. When you choose "Export to a new phone", a copy of your session history and settings (never camera images) is uploaded over an encrypted connection and held behind a random one-time code. This copy is deleted automatically the moment your new phone imports it, or after 24 hours, whichever comes first. The transfer happens only when you explicitly start it.

AI Sleep Report and Usage Summary

At the end of a monitoring session, the Application can generate a plain-language "Sleep Report." To do this, a summary of the session — such as how long the mask was on or off, and when — is transmitted securely to the same third-party artificial-intelligence service, which returns a short written summary. You may optionally have this summary read aloud, which sends the summary text to a text-to-speech service to produce audio. This session-summary data is used only to generate your report; it is not sold and is not used for advertising or to build a personal profile.

Accounts and Identifiers

The Application does not require you to create an account or provide your name or email address. To operate its monitoring and reporting features, the Application generates a random, anonymous identifier for your installation, which is used only to route requests to the mask-detection service and to enforce fair-usage limits. This identifier is not linked to your real-world identity.

Free evaluation and promotional-abuse prevention: if a complimentary evaluation of the Application is offered and you accept it, the Application sends a device installation identifier to our server, where it is immediately converted to a one-way cryptographic hash and stored only in that hashed form. This hash is used solely to ensure each device receives at most one complimentary evaluation (for example, after reinstalling the Application or clearing its data); it cannot be reversed into the original identifier, is not linked to your real-world identity, is never used for advertising, and is never shared with third parties.

Third Party Access

The Application relies on the following third-party services, each of which has its own Privacy Policy governing how it handles data:

A third-party artificial-intelligence provider (both platforms) that performs mask on/off detection on camera images and generates the written Sleep Report, as described above.
Google Play Services (Android only)
Google Analytics for Firebase and Firebase Crashlytics (Android only)

On Android, only aggregated, diagnostic and usage data is transmitted to these analytics services to help the Service Provider improve the Application. The Service Provider may otherwise share your information with third parties only in the ways described in this privacy statement.

The Service Provider may disclose User Provided and Automatically Collected Information:

as required by law, such as to comply with a subpoena, or similar legal process;
when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
with their trusted services providers who work on their behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement.

Opt-Out Rights

You can turn off the Application's own diagnostic and crash reporting at any time, without uninstalling, in Settings → Data & Privacy → "Share diagnostic & crash data." You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.

Data Retention Policy

The Service Provider will retain User Provided data for as long as you use the Application and for a reasonable time thereafter. If you'd like them to delete User Provided Data that you have provided via the Application, please contact them at support@somexai.com and they will respond in a reasonable time.

Monitoring frames: deleted as soon as each frame is processed; never stored or retained.
Phone-to-phone transfer copies: retained for at most 24 hours and deleted immediately upon import.
Session diagnostics: retained by the Service Provider to monitor and improve the reliability of the alarm. This data contains no camera images and no real-world identity, and you can stop it at any time (see Opt-Out Rights).

Children

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.

The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. In the case the Service Provider discover that a child under 13 has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider (support@somexai.com) so that they will be able to take the necessary actions.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.

Changes

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of July 25, 2026

Your Consent

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at support@somexai.com.