NalaPrivacy policy
Nala has no account, no ads and no tracking across other apps or websites. It does send some usage data, crash reports and subscription status to three service providers so I can fix bugs and run the subscription. This page lists all of it.
Nala is made by Valentin Galmand (Entrepreneur Individuel), France. Contact: hello@heyvalentin.club. This policy covers the Nala iPhone app and this website, nala.family.
The short version
- No account, no sign-up, no name, email or phone number asked.
- No ads, and your data is never sold.
- No camera, microphone, contacts, photos or location access.
- No App Tracking Transparency prompt, because Nala does not use the advertising identifier (IDFA) and does not track you across apps.
- Your lights, brightness, sounds and settings stay on your iPhone.
- The app creates a random ID on first launch. Usage events, crash reports and subscription status are linked to that ID, not to your name.
What stays on your iPhone
Your selected light, brightness, custom lights (color, shape), sound and timer choices, bedtime reminder settings and app preferences are stored on the device only. Deleting the app deletes them.
The bedtime reminder is a local notification scheduled on your iPhone. No server sends it.
What the app sends, and to whom
| Provider | Why | What | Where |
|---|---|---|---|
| Amplitude | Understanding which features are used, to improve the app | The random ID; app events (for example "light selected", "timer started", "sound played"); session starts and lengths; device model, iOS and app version; country; your onboarding answers (who the app is for, the main sleep difficulty); subscription status; the Apple Search Ads campaign IDs described below | Amplitude's EU data center |
| Bugsnag | Finding and fixing crashes | The random ID; whether you are a free or Nala+ user; crash logs and the steps that led to them; device model, iOS and app version; the selected light and brightness at the time of the crash | Bugsnag (SmartBear), United States |
| Superwall | Showing the Nala+ subscription screen and checking your subscription | The random ID; subscription status and purchase events; your onboarding answers, used to show the most relevant Nala+ benefits; app version; the Apple Search Ads campaign IDs | United States |
| Apple | Payments, subscriptions and ad attribution | Apple handles every payment. I never see your card or Apple ID. | Apple |
Apple Search Ads attribution
Once per install, Nala asks Apple's AdServices framework whether the app was installed from an Apple Search Ads ad. If it was, Apple returns the campaign, ad group, keyword and country IDs (numbers, not your search). I use them to know which ads are worth paying for. This uses no advertising identifier and does not track you on other apps or sites.
Why I process this data (GDPR)
- Legitimate interest: usage analytics and crash reports, to keep the app working and make it better.
- Contract: managing your Nala+ subscription.
- Consent: notifications, which iOS asks you about first.
How long it is kept
- On your iPhone: until you delete the app.
- Analytics: up to 12 months.
- Crash reports: about 30 days.
- Subscription records: as long as Apple and Superwall need them for billing and legal reasons.
Your rights
You can ask to access, correct, delete or port your data, or object to its processing. Email hello@heyvalentin.club. Because the data is linked to a random ID rather than to your name, include the app version and roughly when you installed it, and I'll do my best to find it. I aim to answer within 7 business days. You can also complain to your data protection authority (in France, the CNIL).
California residents: I do not sell or share personal information for cross-context behavioral advertising.
Children
Nala is used by parents for their children's nights. It asks for no personal information, has no account and no chat or sharing features. I do not knowingly collect personal information from children.
Transfers outside the EU
Bugsnag and Superwall process data in the United States. These transfers rely on the providers' Standard Contractual Clauses or the EU-US Data Privacy Framework.
This website
nala.family is a static site hosted by Vercel. It sets no cookies and has no ads. Like any web host, Vercel keeps short-lived server logs (IP address, browser, pages requested) for security and reliability.
To count visits I use Plausible Analytics, a privacy-friendly tool hosted in the EU. It uses no cookies, stores no personal data and does not follow you across sites: it only gives me totals such as page views, the referring site and the country.
Changes
If this policy changes, the date at the top changes too. Important changes will also be noted in the app's release notes.
Contact
Valentin Galmand (Entrepreneur Individuel), France
hello@heyvalentin.club