Privacy Policy

1. Introduction

At Nightly Ritual (operated by Apex Digital Minds), we take your privacy extremely seriously. Because our application deals with your personal thoughts and feelings before bed, we have designed our architecture to minimize data retention. This Privacy Policy explains how we collect, use, and protect your information.

2. Data We Collect

• Account Information: If you create an account, we collect your email address for authentication (via Magic Link) and subscription management.
• Session Data: We store the feeling you chose for the night, your voice preference, soundscape choice, and basic session metadata (timestamp, tier) to track your streaks and history.
• Text Input: If you type your thoughts instead of speaking, that text is used to write tonight's story and your task list.
• Usage Data: Basic device and browser information for analytics and app optimization.
• Free Ritual Limits: If you use the app without an account, we store a one-way hash of your IP address (never the address itself) for up to 48 hours to enforce the free ritual limit.
• Your Morning List: The task list from each ritual is saved so it can be shown, and emailed if you ask, the next morning. Without an account, it is deleted after 14 days unless you create one.
• Optional Details: Your first name, your answers to the short first-night questions, and how you slept, if you choose to give them. They shape the app's wording and your history.
• Email Address: If you ask for your morning list by email before creating an account, we keep your email with that list for up to 14 days. Every morning email has a one-click unsubscribe link.

3. We Don't Keep Your Voice Recordings

4. Third-Party Processors

We use trusted third-party services to provide core functionality. These processors only access the data strictly necessary for their function:

• Supabase: Database and authentication (hosted in secure data centers).
• Stripe: Payment processing. We do not store your credit card details.
• OpenAI: Turns your recording into text. OpenAI doesn't use it to train its models and may keep it for up to 30 days only to check for misuse.
• Anthropic (Claude): Writes tonight's story and your task list from your transcript or text.
• Inworld AI: Converts the story into speech audio.
• Resend: Sends sign-in links, the morning email and trial reminders.
• Vercel: Hosts the app and measures anonymous page visits (Vercel Analytics).
• Our own server: Passes your recording or text between the services above to make tonight's ritual.

5. Data Retention & Deletion

Your account data and session history are stored until you request deletion, allowing you to track your streaks over time. You have the right to access, correct, or delete your personal data at any time.

To request full account and data deletion: Email us at privacy@apexdigitalminds.com from the email address associated with your account. We will process your deletion request within 30 days.

6. Cookies & Local Storage

We use browser local storage to manage your active session, track free tier usage (for unauthenticated users), and remember your preferences (like volume or chosen soundscape). We do not use third-party tracking cookies for advertising purposes.

7. Global Privacy Regulations

• GDPR (Europe): Our lawful bases for processing are consent (when you provide input) and legitimate interest (providing the core service). You have the right to data portability, deletion, and to withdraw consent.
• Australia: We handle personal information in line with the Australian Privacy Principles. The services above store and process data outside Australia, mainly in the United States. If you have a privacy concern, email us first; if you're not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
• CCPA (California): We do not sell your personal data. California residents have the right to know what data is collected and to request its deletion.

8. Children's Privacy

Nightly Ritual is for adults aged 18 and over. It is not intended for or directed at anyone under 18, and we do not knowingly collect personal information from them. If we become aware that we have collected such data, we will take steps to delete it immediately.

9. Changes to this Policy

We may update this Privacy Policy as our app evolves. We will notify you of significant changes by updating the "Effective Date" at the top of this page or via email if you have an account.