# Light Alarm

A simple Android alarm clock that wakes you up with your phone's flashlight instead of a sound.

## Features

- Flashlight alarms: steady or strobe
- Repeat on any days of the week
- Snooze or dismiss with a swipe

Requires Android 8.0+ and a device with a flashlight.

## Download

| Source                             |                                                                                                                                    |
|------------------------------------|------------------------------------------------------------------------------------------------------------------------------------|
| **GitHub** (free)                  | [Releases](https://github.com/Ghost-Applications/light-alarm/releases)                                                             |
| **Obtainium** (free, auto-updates) | [Add to Obtainium](https://apps.obtainium.imranr.dev/redirect?r=obtainium://add/https://github.com/Ghost-Applications/light-alarm) |
| **Google Play** ($5)               | [Play Store](https://play.google.com/store/apps/details?id=rocks.ghostapps.lightalarm)                                             |

We recommend [Obtainium](https://github.com/ImranR98/Obtainium) to install from GitHub and stay up to date.
The Play Store version costs $5 because dealing with the Play Store is awful.

## Verifying Releases

Every GitHub release ships a detached PGP signature (`.asc`) alongside the APK.

- PGP key: [`3239 DF00 5BDF 2CD2 7898  57AF 59F8 42F7 3BAF 2A8D`](https://ghostapps.rocks/pgp.asc)

To check that an APK really came from us and wasn't modified:

1. Download `light-alarm-release.apk` and `light-alarm-release.apk.asc` from the same
   [release](https://github.com/Ghost-Applications/light-alarm/releases) into one folder.
2. Import our public key (once), then verify the APK against its signature:

```sh
gpg --recv-keys 3239DF005BDF2CD2789857AF59F842F73BAF2A8D
gpg --verify light-alarm-release.apk.asc light-alarm-release.apk
```

3. Look for `Good signature from "Ghost Apps <ghost@ghostapps.rocks>"` and check that the fingerprint matches the one
   above. A `BAD signature` means the file was altered — don't install it. A warning that the key isn't certified
   with a trusted signature is normal unless you've signed our key yourself.

Signing certificate (SHA-256) for APKs from our GitHub releases. Compare it with
[Verified Apps](https://github.com/privacyguides/verified-apps-android) or the certificate shown in Obtainium.

| Package ID                   | Certificate SHA-256                                                                               |
|------------------------------|---------------------------------------------------------------------------------------------------|
| `rocks.ghostapps.lightalarm` | `9E:0B:AF:B5:36:D7:43:E1:4E:82:AB:43:7C:04:72:70:29:85:DB:6C:8C:E5:46:EC:3B:EA:93:4A:EE:3C:51:F7` |

> [!NOTE]
> Google Play builds are signed by Google Play App Signing, so their fingerprint differs from the one above.

---

Signed with our PGP key: [source](https://raw.githubusercontent.com/Ghost-Applications/light-alarm/main/README.md) · [signature](https://github.com/Ghost-Applications/light-alarm/blob/main/README.md.asc)