Privacy

Nocturne stores what you log about your baby’s sleep so it can give the recommendations back to you. It is not sold, not shared with advertisers, and not used to train anything. You can download all of it or delete all of it from Settings, at any time, without asking us.

• Your account — email address and a password hash. The password itself is never stored and cannot be recovered from the hash.
• About your baby — the name you enter, date of birth, gestational age at birth, timezone and target wake time.
• Sleep records — when sleeps started and ended, how long settling took, night wakings, and any notes you add.
• Health screening answers — the safety questions in Settings, used only to decide whether behavioural programs are offered.
• Billing — if you subscribe, Stripe processes the payment and Nocturne stores only a customer reference and subscription status. Card details never reach our servers.

Some of this is health data about a child, which UK and EU law treats as a special category requiring extra care. That is why it is never shared and why erasure is immediate and complete.

The data is processed to provide the service you asked for — performing the contract between us. The health screening relies on your explicit consent, given by answering those questions, and you can withdraw it by clearing the answers.

• It is not sold or rented.
• It is not shared with advertisers or data brokers.
• It is not used to train machine-learning models.
• It is not used to build a profile of you for anything other than the sleep recommendations shown in the app.

Only the infrastructure needed to run the service: the hosting provider, the object-storage provider holding encrypted backups, and Stripe for payments if you subscribe. Each processes data on our instructions and nothing more.

[To finalise before launch: name the hosting and storage providers, their regions, and the transfer mechanism if any sits outside the UK/EEA.]

You can exercise all of these yourself from Settings — no email, no waiting:

• Get a copy — “Download all my data” produces a complete JSON file of everything held about your account.
• Erase it — “Delete my account” removes your account, every baby, every logged sleep and any subscription. It is immediate and cannot be undone.
• Correct it — every logged sleep can be edited or deleted individually from the Today screen.

You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) if you think the data has been mishandled.

For as long as the account exists. When you delete the account the records are removed immediately from the live database. Encrypted backups roll off within the retention window, after which no copy remains.

[To finalise before launch: state the exact backup retention period once set.]

Passwords are hashed with scrypt and a per-account salt, and compared in constant time. Sessions use signed, HTTP-only cookies. Repeated failed sign-ins are rate limited. Data is served only over HTTPS, and backups are encrypted at rest.

Nocturne is for parents and carers. The account holder is an adult; the data concerns their child, and they control it entirely. Nocturne is not directed at children and does not knowingly allow anyone under 16 to create an account.

Nocturne is an information and tracking tool. It does not diagnose or treat, and it is not a substitute for your GP, health visitor or paediatrician. If you are worried about your baby’s breathing, growth or wellbeing, contact a clinician rather than an app.

[To finalise before launch: the data controller’s legal name, registered address and a contact email.]