← Back to home
Note: This privacy policy is subject to review and may be updated before final launch.
Privacy Policy
Effective Date: February 2, 2026
Last Updated: February 2, 2026
IMPORTANT NOTICE REGARDING CHILDREN
Nighty is designed for family use under adult supervision. We do NOT record children's voices. Only adults (parents/guardians) provide voice samples for the app's voice cloning feature.
Age Requirements
- Account Creation: Must be 18 years or older
- Child Usage: Children may use the app only under direct parental/guardian supervision
- Voice Recording: Only adults (18+) may record voice samples
1. INFORMATION WE COLLECT
1.1 Personal Information
- Account Information: Email address, name, billing information (processed by Apple)
- Voice Data: Adult voice recordings for voice cloning (with explicit consent)
- Usage Data: App interactions, feature usage, crash logs
- Device Information: Device model, iOS version, app version, device identifiers
1.2 Generated Content
- Stories: AI-generated bedtime stories based on user inputs
- Images: AI-generated illustrations for stories
- Audio: Text-to-speech audio using cloned voices
1.3 What We DO NOT Collect
- Children's Voices: We never record or store children's voice data
- Location Data: We do not collect precise location information
- Contacts: We do not access your device contacts
- Photos/Camera: Except for profile pictures (optional, with permission)
2. HOW WE USE YOUR INFORMATION
2.1 Primary Uses
- Voice Cloning: Process adult voice samples to create personalized text-to-speech
- Story Generation: Create custom bedtime stories using AI technology
- Service Delivery: Provide app functionality and features
- Account Management: Maintain your subscription and preferences
2.2 Secondary Uses
- Improvement: Analyze usage patterns to improve app features
- Support: Provide customer service and technical support
- Legal Compliance: Meet legal obligations and enforce our terms
3. DATA PROCESSING AND STORAGE LOCATIONS
3.1 Data Storage (United States)
- Primary Database: Supabase (US-hosted servers)
- Media Storage: Cloudflare R2 (US-hosted)
- Backup Systems: US-based cloud infrastructure
3.2 AI Processing (Singapore)
- Voice Cloning: Alibaba DashScope servers in Singapore
- Text-to-Speech: DashScope TTS processing in Singapore
- Data Transfer: Voice samples transmitted securely for AI processing
3.3 Cross-Border Data Transfers
We implement appropriate safeguards for international data transfers, including:
- Encryption in transit and at rest
- Standard contractual clauses with third-party processors
- Regular security audits and compliance monitoring
4. THIRD-PARTY SERVICES
4.1 AI and Processing Services
- Alibaba DashScope (Singapore): Voice cloning and text-to-speech
- Alibaba DashScope (Qwen): Story generation
- fal.ai: Story illustrations
4.2 Infrastructure and Analytics
- Supabase: Database and authentication services
- Cloudflare R2: File storage and content delivery
- Apple App Store: Payment processing and app distribution
- RevenueCat: Subscription management and analytics
4.3 Third-Party Privacy
Each third-party service operates under their own privacy policies. We require all processors to maintain appropriate data protection standards.
5. DATA RETENTION AND DELETION
5.1 Voice Data Retention
- Voice Samples: Retained as long as your account is active
- Cloned Voice Models: Deleted within 30 days of account deletion
- Generated Audio: Cached for performance, deleted after 90 days
5.2 Account Data Retention
- Active Accounts: Data retained while subscription is active
- Deleted Accounts: Most data deleted within 30 days
- Legal Requirements: Some data may be retained longer for legal compliance
5.3 Automatic Deletion
- Inactive Accounts: Data deleted after 2 years of inactivity
- Failed Payments: Account data retained for 90 days after payment failure
6. YOUR PRIVACY RIGHTS
6.1 Universal Rights
- Access: Request copies of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal data
- Portability: Receive your data in a portable format
6.2 California Residents (CCPA/CPRA)
- Right to Know: Categories and specific pieces of data collected
- Right to Delete: Deletion of personal information
- Right to Opt-Out: Opt out of data sales (we do not sell data)
- Right to Non-Discrimination: Equal service regardless of privacy choices
6.3 European Residents (GDPR)
- Legal Basis: Legitimate interest and contract performance
- Withdrawal of Consent: Withdraw consent for voice processing
- Data Protection Officer: Contact details below
- Supervisory Authority: Right to lodge complaints
7. DATA SECURITY
7.1 Technical Safeguards
- Encryption: AES-256 encryption for data at rest
- Transmission: TLS 1.3 for data in transit
- Access Controls: Role-based access with multi-factor authentication
- Regular Audits: Security assessments and penetration testing
7.2 Organizational Measures
- Employee Training: Privacy and security awareness programs
- Incident Response: Breach detection and response procedures
- Data Minimization: Collect only necessary data
- Purpose Limitation: Use data only for stated purposes
8. CHILDREN'S PRIVACY (COPPA COMPLIANCE)
8.1 No Collection from Children
- We do NOT knowingly collect personal information from children under 13
- Voice recording feature is restricted to adults (18+) only
- Children may use the app only under parental supervision
8.2 Parental Controls
- Account Control: Parents control all account settings
- Content Control: Parents can review and delete generated content
- Usage Monitoring: Parents can monitor app usage through iOS Screen Time
8.3 If We Learn of Child Data Collection
If we discover we have collected information from a child under 13:
- We will delete the information immediately
- We will disable the account
- We will notify the parent/guardian if contact information is available
9. CALIFORNIA PRIVACY RIGHTS
9.1 Information Collected (Last 12 Months)
| Category |
Purpose |
Shared With |
| Identifiers |
Account management |
Service providers |
| Audio data (adults only) |
Voice cloning |
AI processors |
| Usage data |
App improvement |
Analytics providers |
| Device information |
Technical support |
Service providers |
9.2 No Sale of Personal Information
We do not sell, rent, or share personal information for monetary consideration.
10. INTERNATIONAL USERS
10.1 Data Processing Location
Your data may be processed in the United States and Singapore. By using our service, you consent to this processing.
10.2 European Users
For EU residents, our legal basis for processing includes:
- Contract Performance: Providing the app service
- Legitimate Interest: App improvement and security
- Consent: Voice data processing (freely given, specific, informed)
11. CHANGES TO THIS POLICY
11.1 Notification Method
- App Notifications: In-app alerts for material changes
- Email Notices: Sent to registered email addresses
- Policy Updates: Posted on our website with revision dates
11.2 Continued Use
Continued use of the app after policy changes constitutes acceptance of the new terms.
12. CONTACT INFORMATION
12.1 Privacy Inquiries
Email: privacy@getnighty.com
Contact: Contact us via email
Response Time: We will respond within 30 days
12.2 Data Deletion Requests
Process:
- Send email to privacy@getnighty.com
- Include account email and deletion request
- Verify identity through email confirmation
- Data deleted within 30 days of verification
13. COMPLIANCE INFORMATION
- COPPA Compliant: No collection from children under 13
- CCPA/CPRA Compliant: California privacy rights respected
- GDPR Compliant: European data protection standards
- Apple Guidelines: App Store privacy requirements met