Nightloop — Privacy Policy

Last updated: October 5, 2026

Nightloop ("we", "us") is a sleep app with Nilo, a plush mascot who listens at night and tells you about it in the morning. It is operated by Côme Delamare (sole trader, Malta). This policy explains what data the app handles, where it goes, and what your rights are.

1. What stays on your iPhone

• Night recordings. When the night recorder is on, the app uses the microphone during the night. A sound recognition model that runs only on your iPhone (YAMNet, an open-source model by Google) picks out sleep talk, snoring and laughter, and the app keeps only a few seconds around each moment. Clips are deleted automatically after 7 days, and you can delete them all at any time in Me › Privacy. They are never uploaded.
• Sound measurements. Every 30 seconds of the night, the app also keeps a few numbers about the sound (how loud it was, the background noise, short noise bursts, a breathing-like rhythm, and what the sound model heard), never the sound itself, plus whether your iPhone was unlocked. They are used to estimate your sleep stages when you don't wear a watch. They stay on your iPhone and are deleted with the night after 7 days.
• What you said. Sleep talk is transcribed on your iPhone with Apple's on-device speech recognition.
• Your sleep journal. Morning check-ins, bedtimes and wake times, your sleep age, and the answers you give when you start (including your birth year, used only to compare your sleep age with your real age).
• Apple Health. If you connect it, Nightloop reads your sleep data (read only), including the sleep stages your watch, ring or band measures, to show your nights, your sleep stages and your sleep age. It never writes to Apple Health, never uploads this data, and never uses it for advertising or marketing.
• Alarms, reminders and sounds. Alarms and notifications are scheduled on the device. A sound you import for your alarm stays on the device.
• Preferences, such as your alarm settings and whether Nilo's voice is on.

If you use iCloud Backup, iOS may include this data in your device backup, which Apple protects under its own terms. Deleting the app deletes this data from your iPhone.

2. What leaves your iPhone

Personal lines (only if you allow them)

When Nilo heard clear words in your sleep, he can answer them with a line written just for you. The first time, the app asks for your permission; you can change it any time in Me › Personal lines. When it is on:

• Only the text of what you said is sent (never the recording), to our server (a Supabase function), at most a few times per night.
• Anthropic (Claude) receives those words to write Nilo's answer. ElevenLabs receives Nilo's written answer (which may quote your words) to turn it into Nilo's voice. If ElevenLabs is unavailable, WaveSpeed AI, which runs the same ElevenLabs voice model, receives that answer instead.
• The audio comes straight back to your iPhone and is kept with that night. We don't store your words, Nilo's answer or the audio on our servers.

Proof of your subscription (no account)

Personal lines are for subscribers. With each request, the app sends the proof of your subscription that Apple signs on your iPhone (the subscription's transaction number, product and dates; never your name, Apple ID or payment details). Our server checks Apple's signature and counts how many personal lines that subscription asked for today, to prevent abuse and control costs. Only a scrambled (hashed) form of the transaction number is stored with the count, and counts are deleted after 2 days. There is no account to create.

Nilo's recorded lines

The app downloads Nilo's recorded lines (text and audio) from our servers (Supabase and Cloudflare). These downloads contain no personal data, apart from what any internet request includes, such as your IP address, which our providers may log for security.

Anonymous Smart alarm report (you can turn it off)

After a night with the Smart alarm, the app sends one anonymous report to our database (Supabase), so we can check that Nilo wakes people at the right moment and tune it: whether he woke you early and why (movement or voice heard), by how many minutes, how long you slept (rounded to 5 minutes), how many movements and voice sounds he heard in the window, your morning mood if you did the check-in, the alarm sound family and the alarm's settings. It contains no recording, no words, no account or device identifier and no time of day (only the date is kept), and nothing in it links it to you. You can turn it off in Me › Privacy. Apple Health data is never part of it.

Weekly league

After each morning check-in, the app sends your username, your avatar and your points for the week to our database (Supabase), with your subscription proof. They are stored under a hashed subscription number, never your name or Apple ID, and shown to the other players of your league group, who see nothing else about you. Usernames that break our rules are replaced by a default one. You can report or block a player by pressing and holding their name; reports are kept so we can review them. League data is deleted after 5 weeks.

Subscriptions

Payments are processed entirely by Apple; we never see your payment details. RevenueCat receives your subscription transactions (product, dates, status) with a random app identifier, so we can check and understand subscriptions.

3. What we don't do

• No ads, no advertising identifiers, and no tracking across other apps or websites.
• No selling or renting of your data.
• No analytics or crash-reporting tools in the app, apart from the anonymous Smart alarm report described above.
• No access to your location, contacts or photos.
• Your night recordings and your Apple Health data never leave your iPhone.

4. Service providers

These providers process data on our behalf under their data-processing terms, and may keep it for a limited time for security and abuse monitoring as described in their own privacy policies. Anthropic's commercial terms do not allow it to use data sent through its API to train its models.

5. Why we can use your data (legal bases)

• Your consent for personal lines. You can withdraw it at any time in Me › Personal lines; nothing more is sent after that.
• Our contract with you to provide your subscription and its weekly league.
• Our legitimate interests to keep the service safe and affordable (checking the subscription and the daily count of personal lines, security logs).

Data that stays on your iPhone (section 1) is not sent to us.

6. How long we keep data

• On your iPhone: night clips for 7 days; everything else until you delete it or the app.
• On our servers: no words, answers or audio. The daily count of personal lines (stored under a hashed subscription number) is deleted after 2 days.
• Anonymous Smart alarm reports: kept for up to 24 months as statistics, then deleted.
• Weekly league: your username, avatar and points are deleted after 5 weeks; reports about a username after 6 months.
• Subscriptions: RevenueCat and Apple keep transaction records as long as needed for accounting and legal obligations.

7. International transfers

Some providers are based in, or store data in, the United States. When personal data is transferred outside the European Economic Area, we rely on the safeguards in our providers' data-processing terms, such as the European Commission's Standard Contractual Clauses.

8. Your rights

Depending on where you live (including under the GDPR if you are in the EU/EEA), you have the right to access, correct, export, restrict or delete your personal data, to object to its use, and to withdraw your consent at any time. Most of your data is on your iPhone and in your hands: you can delete recordings, disconnect Apple Health, turn off personal lines, or delete the app. For anything on our side, email us. You can also lodge a complaint with a supervisory authority, such as the Information and Data Protection Commissioner in Malta.

9. Children

Nightloop is not directed at children under 13, and we do not knowingly collect personal data from them.

10. Security

Data is sent over encrypted connections (TLS). Our database uses access controls, including row-level security, and our providers' keys are kept on our servers, never in the app. No system is perfectly secure; if a breach affects your data, we will notify you as required by law.

11. Changes

We may update this policy as the app evolves. Material changes will be shown on this page with a new "last updated" date, and in the app when they affect what is sent from your iPhone.

12. Contact

For any privacy question or request:
app.chaptr@gmail.com