Introduction
Napsy ("we," "our," or "us") is operated by Arrowkite LLC. This Privacy Policy describes how we collect, use, store, and protect your information when you use the Napsy mobile application and Alexa skill (collectively, the "Service"). By using Napsy, you agree to the practices described in this policy.
We built Napsy with privacy in mind. We collect only the minimum data necessary to make the app work, and we never sell your information.
Information We Collect
Account Information
When you create an account or sign in, we collect:
- Email address (via email/password sign-up, Google Sign-In, or Apple Sign In)
- Authentication identifiers provided by Google, Apple, or Amazon (for Alexa linking)
If you use Apple Sign In with the "Hide My Email" feature, we only receive your Apple-provided relay email address.
Nap Data
When you use Napsy to track your baby's naps, we collect:
- Nap start time and end time
- Nap duration
- Whether the nap is ongoing or completed
Baby Profile Information
If you choose to provide it, we collect:
- Baby's date of birth (used to calculate age-appropriate wake window recommendations)
App Settings & Preferences
- Night mode hours (e.g., 11 PM – 7 AM)
- Long nap alert threshold preference
- Notification preferences
Information We Do Not Collect
We do not collect your baby's name, photos, location data, health or medical data, contacts, browsing history, or any device identifiers for advertising purposes.
How We Use Your Information
We use your information solely to provide and improve the Service:
- Provide core functionality — tracking naps, displaying history, calculating wake windows, and sending nap alerts
- Sync across devices — keeping your nap data consistent between the phone app and Alexa skill
- Personalize recommendations — using your baby's age to suggest appropriate wake windows and nap durations
- Authenticate your account — verifying your identity when you log in
- Send notifications — long nap alerts and morning wake notifications, only if you enable them
We do not use your data for advertising, profiling, analytics beyond basic app functionality, or any purpose other than providing the Service to you.
Third-Party Services
Napsy relies on the following third-party services to operate. Each has its own privacy policy:
- Supabase — cloud database and authentication infrastructure. Your data is stored on Supabase's secure servers. Supabase Privacy Policy
- Amazon (Alexa) — if you link your Alexa account, Amazon processes your voice commands and shares your Amazon user ID with us for nap tracking. Amazon Alexa Privacy
- Google Sign-In — if you sign in with Google, Google shares your email and basic profile with us. Google Privacy Policy
- Apple Sign In — if you sign in with Apple, Apple shares your email (or a relay address) with us. Apple Privacy Policy
- Expo / React Native — the app framework. Expo's push notification service is used if you enable notifications. Expo Privacy Policy
We do not share your personal data with any other third parties, and none of the above services receive more data than is necessary for their function.
Data Storage & Security
Your data is stored securely using Supabase infrastructure, which provides encryption at rest and in transit (TLS/SSL). We implement row-level security policies to ensure users can only access their own data. Authentication tokens are stored securely on your device.
While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
Data Retention
We retain your data for as long as your account is active. Nap history is stored indefinitely to allow you to review long-term sleep patterns. If you delete your account, we will delete all associated data within 30 days, except where we are legally required to retain it.
Your Rights & Choices
You have the right to:
- Access your data — your nap history is always visible in the app
- Delete your account and data — contact us at the email below and we will delete your account and all associated data within 30 days
- Opt out of notifications — you can disable all notifications in the app's settings or your device settings at any time
- Unlink Alexa — you can unlink Napsy from Alexa at any time via the app settings or the Alexa app
- Withdraw consent — you can stop using the Service at any time by deleting the app
To exercise any of these rights, contact us at [email protected].
Children's Privacy
Napsy is designed for use by parents and caregivers. The Service is not directed at children under 13, and we do not knowingly collect personal information from children. The nap data and baby profile information we collect is provided by the parent or caregiver, not the child. We collect only the baby's date of birth (if provided) — no names, photos, or other identifying information about the child.
If you believe we have inadvertently collected information from a child under 13, please contact us and we will promptly delete it.
California Residents (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used
- Request deletion of your personal information
- Opt out of the sale of personal information — we do not sell personal information
- Not be discriminated against for exercising your privacy rights
To make a request, contact [email protected]. We will respond within 45 days.
European Residents (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for processing your data is:
- Contract performance — processing necessary to provide the Service you requested
- Consent — for optional features like push notifications and Alexa linking
You have additional rights including data portability, the right to restrict processing, and the right to lodge a complaint with your local data protection authority. Contact us at [email protected] to exercise these rights.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision.
Continued use of the Service after changes become effective constitutes acceptance of the revised policy.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, contact us at:
Arrowkite LLC
Email: [email protected]