Nightfan

Privacy Policy

Nightfan — last updated 23 September 2026

TEKBH, Switzerland ("we") makes Nightfan, an app that plays sleep sounds. This policy says what the app collects, why, and how to make us stop. It is written to be read rather than to be survived.

The short version

• We do not ask for your name, email, address, or phone number. There is no account and no sign-in.
• The sounds you play, the timers you set and the mixes you save stay on your device.
• We collect anonymous usage statistics so we can tell which sounds get used and where people get stuck. These cannot be tied back to you.
• We never sell data, and there is no advertising in the app.
• Everything optional can be switched off in Settings without losing the app.

What stays on your device and never leaves it

Your chosen sounds, mixes and presets; your volume, timer and night-mode settings; your language; which sounds you have downloaded; your bedtime reminder time. These live in the device's own storage. We cannot read them. Deleting the app deletes them.

What we collect

Usage statistics (Firebase Analytics). Anonymous, aggregated events: that a sound was started (and which one), that a timer was set, that the paywall was seen, that a purchase completed, that onboarding finished. Each carries a random installation identifier, the app version, the device model, the OS version and the coarse country from the connection. It does not carry your name or any identifier you have given us, because you have not given us one. Google processes this for us as a data processor; Google's terms are at https://firebase.google.com/support/privacy.

Crash reports (Firebase Crashlytics). When the app crashes we receive the stack trace, the app version, the device model and the OS version. This is what lets us fix it.

Configuration (Firebase Remote Config). The app asks our server what the current settings are — which sounds are on offer, whether a trial is running. This is a request out, not data in.

Notifications (Firebase Cloud Messaging). If you allow notifications, the device is given a push token so we can send you a message. Turning notifications off in your system settings ends this.

Purchases (RevenueCat and the app stores). If you subscribe, Apple or Google process the payment; we never see your card. RevenueCat holds an anonymous subscriber identifier so the app knows what you are entitled to and can restore it on a new device. See https://www.revenuecat.com/privacy.

What we do not collect

No microphone access. No location. No contacts, photos or files. No advertising identifier and no advertising SDK. No third-party trackers beyond those named above. We do not sell or share personal information as those terms are used in the CCPA/CPRA.

Children

Nightfan is designed to be used by a parent or carer, for a child. It is not directed at children under 13 and is not listed in a children's store category. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, write to us and we will delete it.

Legal basis, if you are in Switzerland, the EEA or the UK

We rely on legitimate interests (Article 6(1)(f)) to keep the app working and to understand how it is used in aggregate, and on your consent for notifications. You can object to analytics at any time by turning it off in Settings, which stops collection on that device. We are based in Switzerland, and the Swiss Federal Act on Data Protection (FADP) applies alongside the GDPR.

Your rights

Wherever you live, you can turn off analytics and crash reporting in Settings, turn off notifications in your system settings, clear downloaded sounds in Settings, and delete the app, which removes everything stored on the device. Depending on where you live you may also have the right to ask what we hold, to have it corrected or deleted, and to complain to a regulator. Because the data we hold is anonymous we usually cannot connect a request to a particular installation — but write to us and we will do what we can.

How long we keep things

Analytics events are retained for 14 months and then deleted. Crash reports are retained for 90 days. Push tokens are deleted when the app is uninstalled or notifications are refused.

Where data goes

Our processors (Google, RevenueCat) operate in the United States and elsewhere. Transfers out of Switzerland, the EEA and the UK rely on the European Commission's standard contractual clauses, as recognised by the Swiss Federal Data Protection and Information Commissioner.

Changes

If we change this policy we will update the date at the top and, if the change matters, say so in the app.

Contact

TEKBH, Switzerland
Email: hbh@tekbh.com