AM Heist
Last updated: September 29, 2026
AM Heist does not collect your personal information, run its own analytics, or run its own servers. There is no account and no login. Everything the app saves — your alarms, your streak, your wake-up history, your vault pieces, your morning checklist — is stored on your own phone and never sent to us or to anyone else. Purchases of AM Heist Plus are handled entirely by Google Play (Section 13). Two bundled Google components — ML Kit and Firebase Installations — send Google technical diagnostics about their own performance; that is described in Section 9, and it is not something we asked for or receive.
This policy explains that in detail, including exactly what the camera and step-counter permissions are used for.
AM Heist is published by Yellow8 Studios LLC, a Texas limited liability company.
Contact: support@yellow8studios.com
AM Heist stores the following on your device only, in the app's private storage:
| What | Example |
|---|---|
| Your alarms | time, repeat days, label, tone, which missions are enabled |
| Onboarding state | whether you have completed first-run setup |
| Wake-up history | date/time of each completed wake-up, how long it took, which mission, whether it was completed without snoozing |
| Streak and totals | current streak, best streak, total wake-ups, early wake-ups, perfect missions, missions completed |
| Vault pieces | which collectible pieces you have unlocked |
| Sleep-sound settings | chosen sound, volume, duration, stop-before-alarm preference |
| Morning checklist | the reminder text you type in, and whether each item is done |
| Preferences | mission difficulty, and whether AM Heist Plus is currently active on this device, as last reported by Google Play (see Section 13) |
This data is written using the Android SharedPreferences mechanism, which is private to the app. None of it is transmitted off the device. We never see it.
Two missions use the camera:
No camera image, video frame, or pose data is ever uploaded, transmitted, or shared. ML Kit's image-labeling and pose-detection models used here run offline on the device.
One technical detail we want to state accurately: when you take a photo for Case the Joint, Android's camera component writes the captured JPEG to the app's own private cache folder so the recognition model can read it. That file stays in the app's private storage on your phone, is not added to your photo gallery or camera roll, and is not sent anywhere. It is removed when you clear the app's storage or uninstall the app.
The camera permission is requested only when you first start a camera mission, and you can deny or later revoke it in Android Settings. Denying it disables those two missions and nothing else.
The Make the Getaway mission asks you to walk a number of steps. It reads your phone's built-in step counter through Android's ACTIVITY_RECOGNITION permission, only while that mission is running, and only to count up to the target.
Step counts are used in the moment and are not stored by the app and never transmitted. The permission is requested the first time you run that mission and can be denied or revoked at any time; denying it disables only that mission.
The shake mission reads the phone's accelerometer while the mission is on screen. Motion data is not stored and not transmitted. This uses no Android runtime permission.
AM Heist asks for permission to post notifications and to schedule exact alarms. These are used solely to make an alarm ring and to display the wake mission over your lock screen at the time you set. They are not used for marketing, and we send no push notifications — the app has no server that could send one.
The app also registers to be restarted after your phone reboots, so that alarms you have set survive a restart.
AM Heist includes Google ML Kit on-device models (image labeling, pose detection) and Google Firebase Installations, a small component ML Kit depends on. Both are bundled with the app, not something we chose to add for analytics, and both report technical information back to Google about their own performance. We do not receive this information and it does not identify you to us:
INTERNET permission even though AM Heist's own code never opens a network connection — the permission belongs to these bundled Google components, not to us.If you obtained AM Heist from Google Play, Google separately collects information about that download and about any purchase under Google's own privacy policy, not this one — see Section 13.
We use no other processor or service provider, and no processor of ours receives your photos, frames, sensor readings, or app content off the device.
Because your data never leaves your phone, you control deletion completely and no request to us is needed. You can:
We hold no copy of your data, so there is nothing for us to delete on our side. If you would like written confirmation of that, email support@yellow8studios.com.
AM Heist is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13 — or from anyone of any age, as described above. Because the app collects no personal information and has no account system, there is no personal information of a child for us to hold or delete. Parents with questions may contact us at the address above.
The rights described below (access, correction, deletion, portability, opting out of sale or sharing, and non-discrimination for exercising them) exist under laws including the EU/UK GDPR, the California Consumer Privacy Act as amended by the CPRA, and the Texas Data Privacy and Security Act.
In AM Heist's case there is nothing held by us to which those rights attach, because we receive and store no personal information. The data is on your device, under your control, and you can view, correct, or erase it yourself at any time. We do not sell or share personal information and we do not engage in targeted advertising or profiling.
If you believe we hold information about you, or want to exercise a right anyway, write to support@yellow8studios.com and we will respond within the time the applicable law requires.
AM Heist Plus is sold, billed, and canceled through Google Play. Google is the merchant of record.
lib/billing.dart).Your AM Heist data is protected by Android's per-app storage sandbox and by whatever screen lock and device encryption you have enabled. Because nothing is transmitted, there is no data in transit to intercept and no database of ours to breach. No system is perfectly secure; keeping your device locked and updated is the most effective protection for this app's data.
AM Heist processes data only on your own device, wherever you are. No international transfer of your data occurs, because no transfer of any kind occurs.
We may update this policy. Material changes will be shown by an updated "Last updated" date above and, where required, by notice in the app. If AM Heist ever begins collecting data off the device, we will say so here clearly and update our Google Play Data safety declaration before that change ships.
support@yellow8studios.com
Yellow8 Studios LLC