Legal

Privacy Policy

Effective date: 14 October 2026 · Contact: hello@nouma.app

Nouma is a baby sleep tracking app made by S&Y Software Factory Sàrl (Geneva, Switzerland). It was built on a simple idea: an app for tired parents should collect as little as possible and keep the parent in control of everything. This policy explains what data exists, where it lives, who processes it, and how to delete it.

The short version

  • Nouma works fully offline without an account. In that mode, your data stays on your iPhone and never reaches our servers.
  • If you create an account (for caregiver sharing or AI features), your data syncs encrypted in transit to our servers.
  • No ads, no analytics brokers, no cross-app tracking, and no App Tracking Transparency prompt. Two advertising SDKs, Meta’s and TikTok’s, count the installs our ads bring — without knowing who you are; both also count the free trials and subscriptions that follow, and nothing more (see “Installs from our ads”). One analytics SDK, TelemetryDeck’s, counts the installs that open the app, and how often — without knowing who you are either (see “Usage analytics”).
  • Deleting your account in the app deletes your data from our servers within minutes, and erases it from your phone too.
  • The app sends crash reports and error diagnostics whether or not you have an account, so we can fix it and keep it fast: what went wrong and its shape — never names, notes or times.

1. Data we handle

Data you enter about your baby

Baby profile (name, birth date, due date, sex, optional photo) and the logs you record: sleep, feeds, diapers, growth, medicine, temperature, moods and notes. You enter this data; we never infer or buy it. It is the heart of the app and it belongs to you.

Account data (only if you create an account)

Your email address, used to sign you in with a 6-digit code, and to identify your household for caregiver sharing. There are no passwords.

Subscription state

Whether your account has Nouma Plus, which product, and when it expires. We never see your card details — payment happens entirely through Apple.

AI features: what is sent, and to whom

Three features send data out of the app, and the app asks your permission before the first one does — you can take that permission back at any time in Settings → Account. Ask sends the message you write, the photos you attach and a short summary of your baby’s recent log to Anthropic (Claude), which writes the answer. The sleep plan sends your baby’s profile — first name, birth date, sex — and the last two weeks of logs to Google (Gemini), which writes the five-day plan; it refreshes by itself while you use the app. The sound studio sends the sound you describe to Google (Gemini), which turns it into a brief, and to ElevenLabs, which renders the audio — nothing about your baby goes with it. A voice message in Ask is sent as recorded — nothing is transcribed on your iPhone — to Google (Gemini), which listens and writes the answer; the recording is kept with the conversation, like a photo, and deleted with it.

Diagnostics

When the app or our API fails, a crash or error report goes to Sentry, our error-tracking provider, so we can fix it: what broke, where, the app version and, if you are signed in, the account id — never names, notes, chat messages or photos. The app sends these crash reports and error diagnostics whether or not you have an account, to fix bugs and the app’s performance; they describe what went wrong by its shape alone, never the names, notes or times you log. No IP address is kept: the app, our API and this website send their reports without one, and our API’s request logs record only the shape of a request (field names and sizes), never what you wrote.

Installs from our ads

To know how many people install Nouma after seeing one of our ads on Facebook, Instagram or TikTok, the app tells Meta and TikTok, each through its own SDK, that it was opened — the first time, which counts as the install, and on later launches. Meta’s signal carries the app’s version, your iPhone’s model, iOS version, language, time zone and screen size, and a random id the SDK makes for this install. TikTok’s carries the app’s version, your iPhone’s model, iOS version, language and country, its network address, a random id the SDK makes for this install and the identifier Apple gives Nouma on your iPhone, which no other developer’s apps share and which resets when you delete our apps. Neither ever carries your name, email, account id or anything you log, and never Apple’s advertising identifier: Nouma never shows the App Tracking Transparency prompt, so both SDKs run in Apple’s no-tracking mode. Apple’s own attribution system (SKAdNetwork) may also send Meta or TikTok an anonymous, aggregated install receipt. The app also tells Meta and TikTok, once each, when you finish setting up the app, start a free trial or subscribe — for a subscription, with the plan and its price — so they can tell which ads bring parents who stay.

Usage analytics

To know how many people use Nouma and keep coming back, the app tells TelemetryDeck, our analytics provider, that it was opened and that a session began — never what you do inside it. Each signal carries the app’s version, your iPhone’s model, screen size, iOS version, language, region, time zone, colour scheme and accessibility settings (text size, bold text, reduced motion), the day and hour, and how often this install has been used — under an identifier Apple gives our app on your iPhone, turned on the phone itself into a one-way hash, so that neither we nor TelemetryDeck can tell who you are. Never your name, email, account id or anything you log, and never Apple’s advertising identifier. TelemetryDeck is a German company; it keeps its servers in the European Union and stores no IP address.

Our website

nouma.app sets no cookie and loads no measurement script until you choose in the banner. If you accept, a tag manager loads our measurement tags: the pages you visit, the site or ad that brought you, and whether you went on to the App Store, under a random cookie id — never your name or account, and never anything from the app, which does not talk to the website. If you decline, nothing loads. Both answers are kept for six months, and the Cookies link in the footer changes yours at any time.

2. Where data lives

On your iPhone: everything, always. The app’s database is the primary copy of your data and the whole app works from it offline. It is included in normal iOS device backups, which are an OS feature under your control.

On our servers (with an account): your baby data and account data are stored in a Postgres database hosted in the European Union, so that every caregiver’s phone can stay in sync. All traffic between the app and our servers is encrypted in transit (TLS).

3. Processors

We use a small number of service providers, each for one job, named here with what they do and what they see. Every one of them is bound by a data processing agreement that holds them to protections equivalent to the ones described on this page: they may use what they receive only to do the job named below, may not train their models on it, and may not use it for advertising or anything else of their own. The exceptions are Meta and TikTok, which each receive the signals described above under their own business terms, to measure our ads and improve their ad systems; they receive nothing else. We do not sell or rent data to anyone.

WhoWhat it does for usWhat it sees
PlanetScaleHosts our Postgres database in the European UnionSynced account and baby data
Anthropic (Claude)Writes the answers in AskYour Ask messages, the photos you attach and a short summary of your baby’s recent log
Google (Gemini)Writes the five-day sleep plan, and turns a sound-studio description into a briefFor a plan: your baby’s profile and the last two weeks of logs. For the studio: the sound you describe — never your baby’s data
ElevenLabsRenders the sounds you create in the studioThe brief written from your description — never your baby’s data
VercelRuns our API, stores the generated sound files, and routes our requests to the AI services above (AI Gateway)What the API handles as it passes through; the audio files the studio makes for you
Apple and RevenueCatSubscription purchase and entitlement managementPurchase receipts and subscription status — never your baby’s data
ResendSends sign-in and account emailsYour email address and the emails we send you
SentryCollects crash and error reports from the app and our APIWhat broke, where, the app version and the account id — never names, notes, chat, photos or IP addresses
MetaCounts the installs our Facebook and Instagram ads bring, and the trials and subscriptions that followThat the app was installed and opened, its version, and your iPhone’s model, iOS version, language, time zone and screen size, with a random id made for this install, and that you finished setting up, started a free trial or subscribed, with the plan and its price — never your name, account id, anything you log, or Apple’s advertising identifier
TikTokCounts the installs our TikTok ads bring, and the trials and subscriptions that followThat the app was installed and opened, its version, and your iPhone’s model, iOS version, language and country, its network address, a random id made for this install and the identifier Apple gives Nouma on your iPhone, and that you finished setting up, started a free trial or subscribed, with the plan and its price — never your name, account id, anything you log, or Apple’s advertising identifier
Google (Tag Manager)Loads and runs the measurement tags on our website — visits, and the ads that bring parents here — only after you accept cookies thereThe pages you visit on nouma.app, the site or ad that brought you, your browser, your approximate location from your IP address and a random cookie id — never your name, your account or anything from the app
TelemetryDeckCounts the installs that open the app, and how oftenThat the app was opened and a session began, its version, your iPhone’s model, screen size, iOS version, language, region, time zone, colour scheme and accessibility settings, under a one-way hash of an identifier Apple gives our app on your iPhone — never your name, account id, anything you log, or Apple’s advertising identifier

If we ever replace one of these with another provider doing the same job under the same limits, we will update this page and say so in the app before the change applies to you.

4. What we don’t do

  • No advertising inside the app, ever.
  • No analytics brokers, no fingerprinting. The two advertising SDKs, Meta’s and TikTok’s, count installs and the trials and subscriptions that follow, and nothing else; the one analytics SDK, TelemetryDeck’s, counts launches and sessions under a one-way hash, and nothing else.
  • No App Tracking Transparency prompt — Nouma does not track you across apps or websites.
  • No selling or sharing of data for marketing.
  • No training of AI models on your data: your conversations are used to answer you, not to build models.

5. Retention and deletion

  • Without an account: we hold none of your data — only the crash and error reports described above, which carry no names, notes or times. Deleting the app deletes the data (subject to your own iOS backups).
  • With an account: your data is retained while the account exists so sync keeps working.
  • Account deletion is built into the app (Settings → Account → Delete account). It deletes your account and all synced baby data from our servers within minutes — not after a grace period, not on request by email, but by yourself, from the app. It also erases the data on your phone: the app returns to its first-open state. What remains for 180 days is a small technical record with no personal data in it — fingerprints of the account’s sign-in tokens and, if caregivers had joined, the household’s id — so that the account’s other signed-in devices learn it was deleted and erase themselves too.
  • A month of the journal, a day’s recap or a week of sleep can be shared as a PDF from the app at any time. For a copy of everything we hold on your account, email us: we answer within 30 days.

6. Your rights (FADP & GDPR)

S&Y Software Factory is based in Switzerland and complies with the Swiss Federal Act on Data Protection (FADP) and, for users in the European Union, the EU General Data Protection Regulation (GDPR). You have the right to access, correct, export, restrict and delete your personal data, and the right to lodge a complaint with a supervisory authority (in Switzerland, the Federal Data Protection and Information Commissioner; in the EU, your local data protection authority). The fastest path for deletion is the app itself; for access, a copy of your data or anything else, email hello@nouma.app and we will respond within 30 days.

7. Children’s data

Nouma is used by parents and caregivers — adults — to record information about their own baby. The baby data you enter is treated as the most sensitive data in the system: it is never used for advertising or profiling, never sold, and it is deleted with your account. The app and its account system are not directed at or intended for use by children.

8. Changes to this policy

If we change this policy in a way that matters — new data, a new processor, a new purpose — we will update this page, change the effective date above, and say so in the app before the change applies to you.

9. Contact

S&Y Software Factory Sàrl
Quai du Mont-Blanc 7
1201 Geneva
Switzerland
hello@nouma.app