Introduction
nappi ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application and related services.
Information We Collect
We collect information that you provide directly to us:
- Account Information: Email address and authentication data when you create an account. If you sign in with Google or Apple, we receive your email address and a unique identifier from the provider — we do not receive your Google or Apple password
- Baby Data: Baby's name, birth date, and tracking data (sleep, feeding, diapers, growth, pumping, activities, milestones)
- Usage Data: How you interact with the app, including anonymized analytics collected via PostHog to improve our service
- Device Information: When you enable push notifications, we collect your device's push notification token, device model, and operating system version to deliver notifications
- Quick Log Inputs: When you use the Quick Log feature, text, voice recordings, or photos you submit are sent to OpenAI for processing. We do not permanently store the raw input — only the extracted tracking entries
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Sync your data across devices and with family members you invite to your household
- Send you push notifications about tracked activities, feeding/diaper reminders, nap predictions (SleepSense), and weekly summaries
- Send you important updates about the app and occasional re-engagement emails (with unsubscribe option)
- Analyze anonymized usage patterns to improve the user experience
- Monitor app stability and diagnose errors via crash reports and performance data
Data Storage and Security
Your data is stored securely using Supabase, with encryption at rest and in transit. We implement industry-standard security measures to protect your information. Your tracking data is stored locally on your device and synced to our secure cloud servers for backup and multi-device access. Photos attached to entries or saved as memories are stored in private cloud storage. Photo access is restricted to members of your household only — no one outside your household can view, download, or access your photos. Photos are served via time-limited signed URLs that expire after one hour.
Third-Party Services
We use the following third-party services to operate nappi. Each processes data only as necessary to provide their service:
- Supabase: Database, authentication, and real-time sync
- RevenueCat: Subscription management and purchase verification — receives your anonymized user ID and purchase status from Apple/Google
- OpenAI: AI-powered entry extraction for the Quick Log feature — processes text, voice transcriptions, and photos you submit. OpenAI's API data usage policy states that API inputs are not used to train their models
- Sentry: Error monitoring and crash reporting — collects crash reports, performance data, and in some cases anonymized session replays (brief screen recordings of the moments leading to an error) to help us fix bugs
- PostHog: Product analytics — tracks anonymized usage patterns to help us improve the app
- Expo Push Service: Delivers push notifications to your device
- Apple Push Notification service (APNs): Delivers real-time updates to Live Activities and the Apple Watch
- Resend: Delivers transactional and marketing emails
- Amazon Alexa: If you enable the nappi Alexa skill, Amazon processes your voice commands and sends interpreted intents to our servers. We store your Alexa user ID to link your accounts
Data Sharing
We do not sell your personal data. We may share information with:
- Family Members: Users you invite to your household have full access to all baby profiles and tracking data. All household members receive real-time notifications when entries are logged by any member. If any household member has a premium subscription, all members benefit from premium features. You can remove members at any time, which revokes their access immediately
- Service Providers: The third-party services listed above, which process data only as necessary to provide their respective services
- Legal Requirements: When required by law or to protect our rights
Apple Watch and Companion Devices
If you use the nappi Apple Watch app, baby tracking data is shared between your iPhone and Apple Watch via Apple's WatchConnectivity framework and shared App Groups storage on your device. This data remains on your devices and is used solely to enable tracking from your wrist.
Widgets and Live Activities
nappi supports iOS Live Activities (Dynamic Island and Lock Screen) and home screen widgets on iOS and Android. These display real-time timer data and recent activity summaries. Widget data is stored locally on your device. Live Activity push tokens are collected to enable real-time updates via Apple Push Notification service.
Siri Shortcuts
nappi integrates with Apple's Siri for hands-free voice commands. Siri voice processing is handled by Apple on your device and is governed by Apple's privacy policy. We receive only the structured command intent, not your raw voice audio.
Amazon Alexa
If you enable the nappi Alexa skill, your Amazon account is linked to your nappi account via OAuth. Amazon processes your voice commands and sends the interpreted intents to our servers. We store your Alexa user ID and playback session data to enable sleep sound playback and sleep logging. Amazon's handling of your voice recordings is governed by Amazon's privacy policy. You can unlink your account at any time through the Alexa app.
Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and all associated data
- Export your data
- Opt out of marketing communications and push notifications
Children's Privacy
nappi is designed for parents and caregivers to track baby care activities. We do not knowingly collect information from children under 13. The baby data entered, including photos, is provided by parents/guardians with their consent. Photos of children are stored privately and accessible only to household members.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this privacy policy, please contact us at: