What we collect, why, and how to get it back.

About this service

Little Nap is a baby sleep tracker based in Stockholm, Sweden. The operator of the service acts as the data controller under the EU General Data Protection Regulation (GDPR).

You can reach us at [email protected].

Scope

This policy describes how Little Nap handles personal information when you use the Little Nap app (currently on iOS) and the littlenap.app website. It does not cover third-party services we link to, which have their own policies.

What we collect

We try to only ask for what the app actually needs. Each category below exists because a specific feature requires it.

Account information

When you sign up, we store the identifier you sign in with — your email address (for email sign-in), or the account identifier returned by Apple or Google. If you use Apple’s “Hide My Email”, we only ever see the relay address Apple generates. We also store a session identifier so you stay signed in between app launches.

Baby profile

For each baby you add, we store the information you enter: name, date of birth, and an optional profile photo. Photos are kept private — only you and caregivers you’ve invited can see them.

Photo library and camera

If you add a baby photo, we ask the operating system for access to your camera or photo library at the moment you tap to add or change a picture. We don’t browse, upload, or otherwise access photos beyond the one you pick.

Sleep sessions

When you log a nap or night, we store what you entered — start and end time, whether it was a nap or night sleep, and any optional details you choose to add (quality rating, tags, notes, night wakings).

Caregiver sharing

If you share a baby, we store the invite code, the share status, and any handoff notes either of you leaves on a sleep session. Notes are visible to everyone with access to that baby.

Sleep Coach and Smart Log input

The Sleep Coach (chat) and Smart Log (natural-language sleep logging) are premium features powered by a third-party AI model accessed through our backend. When you send a message in the Coach, or type a sentence like “napped 1 to 2:30” into Smart Log, the text of your message and a recent sleep summary are sent through our server to generate a response or parse the entry.

To make answers specific to your baby, the prompt also includes your baby’s first name, age in months, and a compact numerical summary of recent naps and nights. We do not send your email address, account identifier, baby photos, or any handoff notes from caregivers.

Subscription information

Subscriptions are processed through Apple’s In-App Purchase system and tracked through our subscription management provider. We store or receive your subscription status, entitlement (which premium features you can use), and a random user identifier tied to your account.

Notifications

If you turn on notifications, we store the device tokens needed to deliver any reminders or updates you’ve enabled in the app. Delivery is handled by Apple Push Notification service and our notification provider.

On-device only

Some information stays on your device and never reaches our servers — for example, your local preferences and prediction feedback the app uses to adjust its own suggestions.

Diagnostic and product events

We log a small set of non-identifying events tied to your account — for example, whether the purchase flow is working — so we can tell what’s broken and what isn’t. These are not shared with advertisers or analytics networks.

What we don’t ask for

We want this on the record:

• No location data, contacts, calendar, or microphone access. The app does not request any of these.
• No HealthKit data. Little Nap does not read from, or write to, Apple HealthKit.
• No advertising identifier or cross-app tracking. We don’t request the IDFA and don’t track you across other apps or websites.
• No third-party advertising or behavioural-analytics SDKs. Little Nap is not ad-supported.
• No tracking cookies on the website. We don’t load third-party scripts beyond what’s strictly needed to display the page.

How we use it

The short version: we use your information to make the app work for you.

• Provide the service. Store your babies, their sleep sessions, your notes, and make them available on your devices and to the caregivers you share with.
• Personalise prediction and coaching. Use your baby’s own sleep pattern to suggest the next nap or bedtime window and to inform the Sleep Coach’s answers.
• Send the notifications you chose. Sleep-window reminders, overtime checks, handoff-note alerts, weekly summaries, wind-down nudges.
• Handle subscriptions. Route premium features based on your entitlement.
• Reply to you. Answer support emails, investigate bugs, and keep you posted on things that matter.
• Improve the product. Look at aggregate, non-identifying product events to understand which flows work.

We do not profile you for advertising. We do not sell your information. We do not share your information with data brokers.

Who we share with

We disclose personal information only as needed to provide Little Nap, support requested features, manage subscriptions, communicate with you, protect the service, or comply with law.

The categories of recipients are:

• Infrastructure and operations providers — host and help operate the app, keep accounts available, sync data, secure files, and maintain service reliability.
• AI service providers — process Sleep Coach prompts and relevant sleep summaries when you use that feature.
• Payment and subscription providers — process in-app purchases, receipt validation, subscription status, and premium entitlements. We do not receive your payment card number.
• Platform, identity, and notification providers — support app distribution, sign-in options you choose, push notification delivery, and device-level app features.
• Support and security providers — help us respond to support requests, diagnose service issues, prevent abuse, and protect the service.
• Legal, compliance, and safety recipients — if required by law, legal process, or a reasonable request to protect rights, safety, or security.

Some providers process information on our behalf as service providers or processors. Others, such as app stores, payment platforms, or sign-in providers, may process some information under their own terms and privacy policies.

We do not sell personal information. We do not share personal information with advertisers, data brokers, or third-party advertising networks for behavioural advertising.

Caregiver sharing

If you invite another caregiver to a baby, they will be able to see that baby’s profile, sleep history, and handoff notes while the share is active. They can leave new notes and log new sleep sessions. They will not see data for your other babies, your account, or your subscription.

You control who gets an invite code and can revoke a share at any time. Revoking stops the caregiver’s access going forward; notes they’ve already seen may remain on their device.

Children’s privacy

Little Nap is a tool for parents and caregivers. It is not directed to children under 13, and we do not knowingly collect information from children. The information about a child in the app is entered by a parent or caregiver who holds the account.

Because the app is about sleep — not a clinical measurement, not a monitoring device — the data you enter is your observations about your child, not health data in the sense used by medical or fitness apps.

Security

We use industry-standard practices to keep your information protected:

• Traffic between the app and our servers is encrypted in transit.
• Access to your babies’ data is limited to your account and the caregivers you’ve explicitly invited.
• Authentication tokens on your device are kept in secure system storage.
• We don’t store payment card information. Payments are handled by Apple.

No system is perfect. If we discover a security incident that affects you, we’ll tell you without undue delay.

Retention and deletion

Account-linked data is kept for as long as your account is active. If you delete your account, we remove your account record and the personal data tied to it — babies, sleep sessions, notes, caregiver shares, photos, and push tokens — within a reasonable period, typically within thirty days. Some information may linger briefly in encrypted backups before rotating out.

You can delete your account from inside the app at any time: Settings → Delete account. If you can’t sign in, email [email protected] from the address on your account and we’ll handle it for you.

You can also delete individual sleep sessions yourself from inside the app; removing a session also removes any handoff notes and acknowledgments attached to it.

Your rights

Because we’re based in the EU, GDPR applies to everyone using the app. Wherever you live, you have the following rights over your information:

• Access — ask for a copy of the data we hold about you.
• Correction — ask us to fix anything that’s wrong.
• Deletion — ask us to erase your account and the data linked to it.
• Portability — ask for your data in a portable, machine-readable form.
• Objection and restriction — ask us to stop certain uses, or to pause while a question is resolved.
• Withdraw consent — where processing is based on consent, you can take it back.

To exercise any of these, email [email protected]. We don’t charge for these requests.

If you are in the EU or UK and believe we have mishandled your information, you have the right to lodge a complaint with a data protection authority. In Sweden, that’s the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY). If you are in California, the California Consumer Privacy Act gives you a similar set of rights; you can exercise them the same way.

International transfers

Our service providers — including Apple and Google for sign-in and app distribution, and our hosting, AI, subscription, and push-notification providers — may process your information outside the European Economic Area, including in the United States or other regions where they operate.

Where required, we rely on transfer safeguards such as Standard Contractual Clauses, adequacy decisions, and the commitments made by our service providers in their privacy and data-processing terms.

Changes to this policy

If we update this policy, the Last updated date at the top of the page changes. Updates take effect when published. For material updates, we’ll surface a notice in the app so you’re not surprised.

Contact

Questions, requests, or just curious? [email protected] — we’ll reply.