Privacy policy
The short version: Nightwool works without an account, shows no ads and has no analytics in the app. The only data that leaves your phone is what's needed to process and confirm a purchase.
Last updated November 1, 2026
Who is responsible
The controller of your personal data is Michal Piják DEV, Na Hrebienku 1498/35, 811 02 Bratislava, Slovakia, Company ID (IČO) 57396655, Tax ID (DIČ) 1126935656, registered in the Trade Register of the District Office Bratislava, No. 110-362285. In this policy "we" and "us" means this business, run by Michal Piják.
For anything about privacy, write to privacy@nightwool.com. We don't have a data protection officer because the law doesn't require one for a business of our size and kind.
The Nightwool app
What stays on your phone
Your saved mixes, volume and tone settings and preferences are stored only on your device. We can't see them. They're deleted when you delete the app. All sounds and images are included in the app, so playing a sound doesn't send anything over the internet.
What we don't do
No account or sign-up. No advertising and no advertising identifiers. No analytics, tracking or crash-reporting tools in the app. We don't sell or share personal data for marketing, and we don't use it to build profiles.
Purchases
Some sounds and features are part of Nightwool Premium. When you buy it, the payment is handled entirely by Apple (App Store) or Google (Google Play). We never see your name, card or billing details. Apple and Google process your data under their own privacy policies: apple.com/legal/privacy and policies.google.com/privacy.
To check whether Premium is active and to let you restore it on a new phone, the app uses RevenueCat (RevenueCat, Inc., USA), which acts as our processor. When the app starts or you make or restore a purchase, RevenueCat receives:
- a random, anonymous app user ID created by the app (not your name, e-mail or Apple/Google account);
- the purchase receipt or purchase token from Apple or Google, with the product, price, currency, dates and subscription status;
- basic technical data such as device type, operating system, app version and when the app was last opened.
RevenueCat stores this data in data centers in the United States. More in RevenueCat's privacy policy: revenuecat.com/privacy. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR): without it we couldn't give you what you paid for. Purchase records are kept as long as needed for the purchase and as required by tax and accounting law.
Notifications
The app doesn't send push notifications from a server. If you start a free trial, the app asks for permission to schedule one local reminder on your device two days before the trial ends. It's created and delivered by your phone; nothing about it is sent to us.
E-mail to support
If you write to us, we use your e-mail address and message to reply and solve the problem (legitimate interest, Art. 6(1)(f) GDPR, or contract, Art. 6(1)(b)). We keep support conversations for up to 2 years after the last message, unless a longer period is needed to handle a claim.
This website
nightwool.com is a static website hosted on a server of Hetzner Online GmbH in Germany. It sets no cookies, has no ads and no third-party trackers, and loads its fonts from our own server, not from Google. The web server is configured not to keep access logs of visitors.
Visitor statistics
To see which pages and articles people find useful, we count visits with our own installation of Umami, running on our server (Hetzner, Germany). It sets no cookies and stores nothing in your browser, and the data isn't shared with anyone or combined with other websites. We record the page you opened, the website you came from, a campaign tag in the link (utm_source, utm_campaign), the country, region and city estimated from your IP address, and the type of browser, operating system and device. We also count a few actions: clicks on "Get notified" and e-mail links, playing a sound sample, reaching the end of an article and signing up for the waiting list (only which form and platform, never your e-mail address).
To tell one visitor from several, the server derives an identifier from your IP address and browser that changes every day; the IP address itself isn't stored, and advertising click IDs (such as gclid or fbclid) are removed in your browser before anything is sent. If your browser sends "Do Not Track", we don't count you at all. The legal basis is our legitimate interest in knowing which pages are useful (Art. 6(1)(f) GDPR); you can object by writing to privacy@nightwool.com.
Launch news and newsletter
If you enter your e-mail under "Get notified", we ask you to confirm it first (double opt-in): you get one e-mail with a link, and only after you click it are you subscribed. We keep your e-mail address, the platform you chose (iPhone, Android or both), the page you signed up on, and the time and proof of your confirmation. We use it to tell you when Nightwool is available and, now and then, to send new articles. The legal basis is your consent (Art. 6(1)(a) GDPR).
The list is managed by Brevo (Sendinblue SAS, France), which sends the e-mails on our behalf under its data processing agreement (part of Brevo's terms); see also Brevo's privacy policy. Brevo is an EU company. If Brevo or its subprocessors handle data outside the EU, the agreement requires EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
Like most e-mail services, Brevo records whether an e-mail was delivered and, using a small image and link redirects, whether it was opened and which links were clicked. We use this only to see that e-mails arrive and which articles readers find useful; it's part of the newsletter you agreed to, and it ends when you unsubscribe.
If you don't click the confirmation link, you aren't added to the list. Every e-mail has a one-click unsubscribe link, and you can also write to us. If you unsubscribe, we stop e-mailing you and remove you from the list; otherwise we keep your address for as long as we send the newsletter. If our e-mail service is briefly unavailable when you sign up, your address is kept on our own server (Hetzner, Germany) until we can send the confirmation, and then deleted there.
Your rights
Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability and to withdraw consent at any time. Because the app has no accounts, we usually can't link app data to you; if you want us to look for something, tell us what you know (for example the date of a purchase) and we'll do our best.
You can also complain to a data protection authority. In Slovakia that's the Úrad na ochranu osobných údajov Slovenskej republiky, dataprotection.gov.sk; you can also go to the authority where you live or work.
Children
Nightwool isn't directed at children and we don't knowingly collect personal data from them. Parents who play sounds for their baby or child use the app on their own device, and no data about the child is collected.
Changes
If we change how we handle data, we'll update this page and the date at the top before the change takes effect. Important changes will also be mentioned in the app's release notes.