Privacy Policy

This Privacy Policy explains how Masofi d.o.o. ("we", "us", "our") handles information in connection with the Ninna mobile application (the "App"). We are based in Slovenia, and you can contact us at privacy@ninnaapp.com.

We built the App to be private by design: it turns two of your own iPhones into a baby monitor. Your camera and microphone streams are sent directly between your devices in real time and are never recorded or stored by us.

1. Summary

What	Do we collect it?
Your name / email	No — Sign in with Apple is configured to share neither.
Video / audio of your room	No — streamed live between your devices, never stored.
A pseudonymous account identifier	Yes — Apple's opaque user ID. It doesn't reveal who you are, but it does identify your account consistently.
Subscription status	Yes — via Apple/RevenueCat.
Crash reports & basic usage analytics	Yes — to keep the App working and improve it.

2. Information we process

Account data. When you sign in with Apple, we receive an opaque user identifier (a random string). We do not request your name or email. On our servers we store only: this identifier, your account creation date, your subscription tier, and a "last seen" timestamp.

Subscription data. Purchases are processed by Apple. We use RevenueCat to verify and manage your subscription entitlement. RevenueCat receives this same pseudonymous account identifier and purchase information from Apple. We never see your payment card or Apple ID credentials.

On-device data. A session token is stored securely in your device Keychain, and your preferences (mode, alert sensitivity, notification settings) are stored in the device's local storage. These stay on your device.

Live streams. Audio and video are transmitted in real time between your devices through our relay server, encrypted in transit (DTLS-SRTP). The relay passes media through to deliver it; it does not record or persist it.

Alerts. Noise and motion detection runs on your camera device. Only small event messages (e.g. "noise detected" with a timestamp) are sent to your viewer device(s). These are not stored on our servers.

Diagnostics & analytics. To keep the App reliable and understand how it's used, we process:

• Crash and error diagnostics (via Sentry): device model, OS and app version, and technical error data.
• Product analytics (via PostHog): in-app events such as app opened, signed in, paywall viewed, and subscription started. Before you sign in these are tied only to a random identifier generated on your device. After you sign in they are linked to your pseudonymous account identifier, so we can tell whether the same person completed a step rather than counting anonymous events twice.

Network data. Your IP address is processed transiently by our servers and sub-processors to establish connections and to prevent abuse (rate limiting). We do not use it to build advertising profiles.

3. Why we process it (legal bases under GDPR)

• To provide the service (performance of a contract): accounts, streaming, subscriptions.
• Legitimate interests: security, abuse prevention, and improving the App (diagnostics and analytics), balanced against your rights.
• Consent, where required by your jurisdiction (e.g. certain analytics). You can withdraw consent at any time in the App's settings.

Usage analytics and crash reports are controlled separately in Account → Privacy, so you can keep crash reporting on while switching product analytics off. Turning either off takes effect immediately.

4. Sharing and sub-processors

We do not sell your personal data. We share data only with service providers who process it on our behalf:

Provider	Purpose	Location
Apple	Sign in with Apple, App Store payments	EU/US
RevenueCat	Subscription management	US
Hetzner Online GmbH	Server hosting	EU (Germany)
Google Workspace	Support and privacy email	EU/US
Sentry	Crash/error diagnostics	US/EU
PostHog	Product analytics	US/EU

Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses. Our core account data is hosted in the EU.

5. Retention

We keep account data until you delete your account, at which point it is removed from our servers (see Section 7). Diagnostic and analytics data is retained for a limited period per each provider's defaults and then deleted or anonymized.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw consent. EEA/UK users may lodge a complaint with their data protection authority. California residents have rights under the CCPA/CPRA, including the right to know and to delete; we do not sell or "share" personal information for cross-context behavioral advertising.

To exercise any right, use the in-app Delete Account option or contact us at privacy@ninnaapp.com.

7. Deleting your account

You can delete your account at any time: Account → Delete Account. This permanently erases the account data we hold for you. Your App Store subscription is managed by Apple and must be cancelled separately in Settings → Apple ID → Subscriptions.

8. Children

The App is intended for use by parents and caregivers (adults). It is not directed to children, and we do not knowingly collect personal data from children. While the App may show a sleeping child via your own live stream, that video is never recorded or transmitted to us.

9. Security

We use encryption in transit, store secrets only on our servers (never in the App), keep the session token in the device Keychain, and apply server hardening and rate limiting. No method of transmission or storage is 100% secure, but we work to protect your information.

10. Changes

We may update this Policy. We will revise the "Last updated" date and, for material changes, provide notice in the App or by other appropriate means.

11. Contact

Masofi d.o.o.
Gradišče v Tuhinju 1c
1219 Laze v Tuhinju
Slovenia
privacy@ninnaapp.com
masofi.si