← Back to home

Privacy Policy

Last updated: August 16, 2026

This Privacy Policy describes how Nocturne ("we," "us," or "our") collects, uses, and shares your personal information when you use the Nocturne mobile application (the "App") and related services (collectively, the "Services"). Nocturne operates in the United Kingdom.

Please read this Privacy Policy carefully. By using our Services, you agree to the collection, use, and sharing of your information as described in this policy. If you do not agree with our policies and practices, do not use our Services.

1. What information do we collect?

Personal information you provide to us

We collect personal information that you voluntarily provide when you register for the App, use our Services, or contact us. The personal information we collect depends on how you interact with us and the Services, but may include the following:

• Account information. Name, email address, and password when you create an account.
• Scene answers. The text responses you provide when answering the eight questions to build a guided sleep scene.
• Evidence log entries. Text entries you write in your evidence log to record real-life occurrences that relate to your scenes.
• Session play history. Timestamps recording when you play your guided sessions, used to populate your nights constellation.
• Subscription status. Information about your subscription tier, managed through Apple in-app purchases via RevenueCat and processed by Stripe.
• Push notification tokens. Device tokens used to deliver reminder notifications you have opted in to.

Information we do not collect

We do not collect GPS or location data. We do not access your camera or photo library. We do not use Google APIs. We do not collect biometric data.

Information automatically collected

When you use the App, certain information may be collected automatically, including device type, operating system version, and general usage analytics necessary to maintain and improve the Services. This does not include precise location data.

2. How do we process your information?

We process your personal information for the following purposes:

• To provide the Services. We use your scene answers to generate your personalised guided sleep sessions. Your evidence log entries are stored so you can review them. Session play history powers the nights constellation feature.
• To create and manage your account. We use your name, email, and password to authenticate you and maintain your account.
• To process payments. Subscription payments are handled through Apple's in-app purchase system via RevenueCat and Stripe. We do not directly store your payment card details.
• To generate guided sessions. Your scene answers are processed by our AI text processing partner (Anthropic/Claude) to create the narrative for your guided session, and by our voice synthesis partner (ElevenLabs) to narrate the session.
• To send push notifications. If you opt in, we send reminder notifications to support your sleep practice.
• To maintain and improve the Services. We use usage data to diagnose issues, improve performance, and develop new features.
• To respond to enquiries. We use your contact information to respond to your questions and requests.

3. What legal bases do we rely on?

If you are located in the United Kingdom or the European Economic Area (EEA), we rely on the following legal bases under UK GDPR to process your personal information:

• Performance of a contract. We process your account information, scene answers, evidence log entries, and session history because it is necessary to provide the Services you have signed up for.
• Consent. We rely on your consent to send push notification reminders. You can withdraw consent at any time by disabling notifications in your device settings.
• Legitimate interests. We may process limited usage data for our legitimate interests in maintaining, improving, and securing the Services, provided those interests are not overridden by your rights.
• Legal obligation. We may process your information where required to comply with applicable laws and regulations.

4. When and with whom do we share your personal information?

We may share your information with the following categories of third parties:

• Supabase. Provides our database hosting and authentication services. Your account data, scene answers, evidence log entries, and session history are stored on Supabase infrastructure.
• Anthropic (Claude). Your scene answers are sent to Anthropic's Claude API for AI text processing to generate your guided session narrative. Anthropic processes this data in accordance with their API data usage policies.
• ElevenLabs. The generated session narrative is sent to ElevenLabs for voice synthesis to produce the narrated audio for your guided session.
• RevenueCat. Manages subscription status and in-app purchase validation between the App and Apple's App Store.
• Stripe. Processes subscription payments. Stripe receives payment information through Apple's in-app purchase system.
• Apple. As the App is distributed through the Apple App Store, Apple processes in-app purchases and delivers push notifications on our behalf.

We do not sell your personal information. We do not share your personal information with advertisers. We do not share your scene answers, evidence log entries, or session data with any parties other than those listed above, and only to the extent necessary to provide the Services.

5. Do we use cookies and other tracking technologies?

The Nocturne App is a native iOS application. We do not use cookies. We do not use third-party advertising trackers or analytics SDKs that track you across other apps or websites. We may collect basic, anonymised usage analytics to maintain and improve the App.

6. How long do we keep your information?

We keep your personal information for as long as your account remains active and as necessary to provide the Services. Specifically:

• Account information. Retained for the duration of your account. Deleted when you delete your account.
• Scene answers and evidence log entries. Retained for the duration of your account so you can access and review your scenes and evidence.
• Session play history. Retained for the duration of your account to maintain your nights constellation.
• Subscription records. Retained as required for financial record-keeping obligations under applicable law.

When you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required by law to retain certain records.

7. How do we keep your information safe?

We implement appropriate technical and organisational security measures to protect your personal information. These include encryption of data in transit (TLS), secure authentication via Supabase, and access controls limiting who can access your data within our systems.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for keeping your account credentials confidential.

8. Do we collect information from minors?

The Services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly. If you believe we may have collected information from a child, please contact us at help.nocturne@gmail.com.

9. What are your privacy rights?

If you are located in the United Kingdom or the EEA, you have certain rights under the UK GDPR and EU GDPR, including:

• Right of access. You have the right to request a copy of the personal information we hold about you.
• Right to rectification. You have the right to request that we correct inaccurate or incomplete personal information.
• Right to erasure. You have the right to request that we delete your personal information, subject to certain exceptions.
• Right to restrict processing. You have the right to request that we restrict the processing of your personal information in certain circumstances.
• Right to data portability. You have the right to receive your personal information in a structured, commonly used, machine-readable format.
• Right to object. You have the right to object to the processing of your personal information where we rely on legitimate interests.
• Right to withdraw consent. Where we rely on your consent to process your information (such as push notifications), you may withdraw that consent at any time.

To exercise any of these rights, please contact us at help.nocturne@gmail.com. We will respond to your request within one month, as required by law.

Complaints

If you believe we have not handled your personal information in accordance with applicable law, you have the right to lodge a complaint with a supervisory authority. In the United Kingdom, the relevant authority is the Information Commissioner's Office (ICO).

• Website: ico.org.uk/make-a-complaint
• Telephone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

10. Controls for Do-Not-Track features

Some web browsers and mobile operating systems include a Do-Not-Track ("DNT") feature or setting that signals your preference not to be tracked online. Because there is no uniform standard for recognising or honouring DNT signals, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

If a standard for online tracking is adopted in the future that we must follow, we will update this Privacy Policy to inform you of that practice.

11. Do United States residents have specific privacy rights?

If you are a resident of certain US states, including California, Virginia, Colorado, Connecticut, and Utah, you may have additional rights regarding your personal information under state privacy laws such as the California Consumer Privacy Act (CCPA) and similar legislation.

Categories of personal information collected

In the preceding twelve months, we have collected the following categories of personal information: identifiers (name, email address), internet or electronic network activity information (session play history), and other information you provide (scene answers, evidence log entries).

Your rights

Depending on your state of residence, you may have the right to:

• Know what personal information we collect, use, and share about you.
• Request deletion of your personal information.
• Opt out of the sale or sharing of your personal information. We do not sell or share your personal information for cross-context behavioural advertising.
• Not be discriminated against for exercising your privacy rights.
• Correct inaccurate personal information.

To exercise these rights, please contact us at help.nocturne@gmail.com. We will verify your identity before processing your request.

12. Do we make updates to this notice?

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

If we make material changes to this Privacy Policy, we will notify you by updating the date at the top of this policy and, where appropriate, by sending a notification through the App.

13. How can you contact us about this notice?

If you have questions or comments about this Privacy Policy, or wish to exercise your privacy rights, you may contact us by email at:

help.nocturne@gmail.com

14. How can you review, update, or delete the data we collect from you?

You can review and update your personal information directly within the App through your account settings. You can edit your scene answers, manage your evidence log entries, and update your account details at any time.

To request a complete copy of your personal data or to request deletion of your account and all associated data, please contact us at help.nocturne@gmail.com. Upon receiving a verified deletion request, we will delete your personal information from our records within 30 days, subject to any legal retention requirements.