Nyxtune Privacy Policy

This Policy describes how suplum ("we", "us") handles users' information in the app "Nyxtune" ("the App"). Our overall policy for suplum and its website is set out in our separate Privacy Policy.

1. Information we collect

Depending on the features provided, the App may collect the following information:

• Account data (your email address, the name or display name supplied by Apple or Google when you sign in, the identifier issued when you use Sign in with Apple or Google Sign-In, and the user ID we use to identify you)
• The sleep-related records you enter (bedtime and wake time, time to fall asleep, night awakenings, daytime sleepiness, techniques you practiced, and similar entries) and your progress through in-app learning content
• Subscription status (purchase, renewal, and cancellation history, expiry dates, and identifiers associated with your purchase)
• Information you provide when contacting us (your name or nickname, email address, and the content of your inquiry)
• Crash and diagnostic information. We record it both when the app terminates unexpectedly and when a problem occurs that the app can carry on from (for example a failure to save a record, sync, sign in, or complete a subscription purchase). What is sent is technical information such as the exception's type name, a predefined identifier for where it occurred, the stack trace, the OS and app version, your device type, which environment the build targets, and an identifier issued per app installation. For problems the app itself records, we strip the message text attached to the exception before sending. However, when the operating system terminates the app, the information generated by the OS and the reporting tool — including the kind of exception and its description — is recorded as-is. While you are signed in, a hashed form of your account identifier is attached so that crashes from the same person can be grouped (nothing is attached while you are signed out)

The information above is stored linked to your account (user ID) in the App. We do not build advertising profiles from it, and we do not sell it to other companies.

One exception: crash and diagnostic information recorded while you are signed out carries no account identifier, and is therefore not linked to any account.

You can turn off crash reporting in the app under Settings → Privacy → “Send crash reports”. This setting is on by default. Turning it off stops reports from the next time you open the app, and any reports stored on your device while it is off are discarded rather than sent.

We do not collect special-category personal information (such as beliefs or medical history) without your consent. The sleep records entered in the App are provided voluntarily by you; the App does not ask you to enter diagnoses or details of medical treatment.

2. Purpose of use

We use collected information within the scope of the following purposes:

• Creating and authenticating your account, and syncing your records across devices
• Storing and displaying your records, and generating reviews and suggestions based on them
• Determining access to paid features and managing your subscription status
• Responding to inquiries and bug reports
• Investigating issues and improving quality

We do not use the information we collect for advertising or behavioural targeting.

3. Third-party services

The App uses the following third-party services to provide and analyze features. Each provider's handling of information is governed by its own privacy policy.

• Firebase Authentication (Google LLC) — Authentication data used to sign you in (your email address, the name or display name supplied by Sign in with Apple or Google Sign-In, the identifier issued by each, and the user ID we use to identify you) — Provider's policy
• Google Sign-In (Google LLC) — Only when you sign in with Google: the email address and identifier of that Google account — Provider's policy
• RevenueCat (RevenueCat, Inc.) — The status of subscription purchases, renewals, and cancellations, the related purchase identifiers, and technical information such as app version and device type — Provider's policy
• Firebase Crashlytics (Google LLC) — Technical details of crashes and errors (the exception's type name, stack trace, OS and app version, device type, a per-installation identifier, and device state at the time of the failure, among others; while you are signed in this includes a hashed account identifier). Sleep records, notes, email addresses, and names are not sent — Provider's policy
• Web3Forms (Web3Forms) — The name or nickname, email address, and message you submit through the contact form, processed in order to deliver it to us — Provider's policy
• Cloudflare Workers / D1 / KV / R2 (Cloudflare, Inc.) — Acts as the backend for the App, storing and processing the data listed above; connection metadata such as IP addresses is also handled in access logs — Provider's policy

Payment for subscriptions is processed by the App Store / Google Play; we never receive your card number or other payment credentials.

4. Tracking (ATT)

The App does not perform advertising-related tracking. It does not track you across apps and websites, and does not request App Tracking Transparency (ATT) permission.

5. Disclosure to third parties

Except as required by law, we do not provide personal information to third parties without your consent.

Note: the handling of information that accompanies the third-party services listed above constitutes outsourcing or joint use for the purpose of providing features, and is distinct from the “disclosure to third parties” above. Each provider's handling is governed by its own privacy policy.

6. Where data is stored and cross-border transfers

Records in the App are stored on your device and also on our backend running on Cloudflare Workers / D1 / KV / R2（Cloudflare, Inc.）. The following is stored:

• Sleep logs (bedtime and wake time, time to fall asleep, night awakenings, daytime sleepiness, and other values you enter), records of techniques you practiced, learning-content progress, your account identifier, and your subscription status

Storage and processing take place on the global infrastructure of the third-party services listed above (Cloudflare, Inc., Google LLC, RevenueCat, Inc., and Web3Forms for the contact form), any of which may handle data on servers outside Japan. Each provider handles cross-border transfers under its own framework (such as standard contractual clauses).

7. Retention

We retain data while your account exists and for as long as needed to fulfil the purposes of use. Deleting your account in the app deletes your sleep logs, technique records, learning progress, and account information from our servers. Inquiry content is deleted once your request is resolved and any period we need to keep it has passed.

8. Exporting and deleting your data

You can export your stored records to a file from within the App. An exported file can also be imported back into the App.

You can also delete your account from within the App. Deleting it removes your records and account information from our servers and cannot be undone, so please export anything you need first.

One exception: we keep the identifier (user ID) of the deleted account together with the deletion timestamp. This prevents the account from being resurrected by a sync or subscription notification that arrives after deletion. Only those two items are kept — no sleep records, subscription details, or other content — and they are retained without a time limit because their purpose is to block reuse of that identifier.

Important: deleting your account does not automatically cancel your subscription with the App Store / Google Play. Please cancel it separately in that store's settings.

If you cannot perform these actions in the App, or if you wish to request disclosure, correction, or suspension of use of your personal data, please contact us via the Support page . We will respond promptly after verifying your identity, in accordance with applicable law.

9. Security

We take reasonable security measures to prevent leakage, loss, or damage of the information we collect. Communication between the App and our servers is encrypted (HTTPS), and records on our servers are accessible only from your own authenticated account.

10. Minors

If you are a minor, please use the App with the consent of a parent or guardian.

11. Health-related information

The App is not a medical device. It does not diagnose or treat sleep conditions and does not replace care from a clinician or other professional. The figures and suggestions it shows are reference information derived from the records you enter, not medical diagnosis or advice.

The sleep records you enter are used only for the purposes described above. We do not provide them to healthcare providers, insurers, employers, or similar third parties.

12. Changes to this Policy

We may change this Policy as needed. Changes take effect when posted on this page.

13. Contact

For questions about this Policy, please contact us via our Support page or contact form .