NapNest

Privacy Policy

Last updated: 3 November 2026

NapNest is a baby sleep and care tracker. It is built to need as little data as possible: no account, no ads, no selling or sharing of data for advertising, no tracking across other apps or websites.

Who is responsible: Rares Bologa, independent developer, Romania (“we”). Contact: napnest.app@gmail.com.

1. What stays on your phone

Everything you log (sleep, feeds, diapers, growth, teeth, notes and more), your baby's name and birth or due date, your settings, and the baby photo you choose are stored only on your phone. The baby photo never leaves your phone, even with family sync. Deleting the app, or Settings → Privacy → Delete all my data, removes it.

2. Family sync (only if you switch it on)

Family sync (part of NapNest Plus) lets up to 12 phones share the same logs. When you create or join a family space, our server (run for us by a cloud hosting company) stores:

• the logs and baby details of that family space (so the other phones can receive them);
• for each phone: a random device number, the name and role you choose (for example “Mum's iPhone”, parent), a random install ID, when it last synced, and a scrambled (hashed) form of its secret key;
• invite codes, which expire after 24 hours;
• whether someone in the family has NapNest Plus (an anonymous purchase ID from our purchase-management service, the end date, never payment details);
• abuse-protection counters, keyed by a scrambled (hashed) form of your IP address that changes every day; they are deleted after 30 days.

When the last phone leaves the family space, all of its data is deleted from the server. A family space that no phone has used for 1 year is deleted automatically. Data is sent over encrypted connections (HTTPS).

3. Purchases

Payments are handled by Apple; we never see your card or Apple ID details. We use a purchase-management service to know which plan is active. It receives an anonymous app user ID, the purchases and, if you use family sync, the family space ID (so Plus can reach the whole family).

4. Crash reports

If the app crashes, a crash report is sent to a crash-reporting service so we can fix the problem: the error, the place in the code, app version, phone model and system version. No logs, notes, names, photos, screenshots or IP address are included.

5. Anonymous usage statistics

To see which features are used, the app sends simple events to a usage-statistics service, linked to a random install ID: app opened or closed, onboarding completed, a log saved or deleted (only which tracker, never what you wrote), timers started or stopped and how long, the Plus screen viewed, and which button was used on the bedtime reminder card. No names, logs, notes or photos. We do not use the IP address for location.

6. Service providers and transfers outside the EU

We use a small number of service providers only to run the features above: a cloud hosting company (family sync server), a purchase-management service, a crash-reporting service and a usage-statistics service. Each receives only the data described in its section, and may use it only to provide its service to us, under its data-protection terms. Some of them are based in the United States; such transfers rely on safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework. You can ask us by email for the names of these providers at any time.

7. Permissions

Camera and photos are used only when you choose to add a baby photo. Notifications are used only if you turn on sleep reminders; they are scheduled on your phone from today's sleep plan, and nothing is sent to a server for them. NapNest does not use location, contacts, the microphone or Face ID.

8. Legal basis (EU/EEA users)

Family sync and purchases: to provide the service you ask for (contract). Crash reports and usage statistics: our legitimate interest in keeping the app working and improving it, with minimal, anonymous data. Logs about your baby can include health-related information; it stays on your phone unless you choose family sync.

9. Your rights

You can ask to see, correct or delete data we hold about you, or object to processing. Most data you can delete yourself (sections 1 and 2). For anything held by us or our providers, email us your anonymous ID from Settings → Privacy. You can also complain to your data protection authority (in Romania: ANSPDCP).

10. Children

NapNest is meant for parents and caregivers, not for children to use. It records information about a baby, given by the parent or caregiver.

11. Changes

If this policy changes, we will update the date above and, for important changes, tell you in the app.