Privacy Policy

Last updated: November 6, 2026 · app version 1.1

In short: your baby’s data (their name, their birth date, their photo and all their sleep, feeding, diaper, temperature and medicine entries) is saved on your phone. If you share with your family, your kids’ data, without the photo, is copied to Firebase, from Google, so the people you invited can see it (what’s copied and who sees it). If you don’t share, it doesn’t leave your phone. Your account is managed by Firebase Authentication, from Google. In addition, these services receive data from the app, and here we say exactly which data: RevenueCat, for subscriptions; PostHog, for usage statistics without names or full entries; Meta and TikTok, to measure our ads, and Google Firebase Analytics, on Android only, to measure our ads on Google. We don’t show ads inside the app and we don’t sell data. You can delete your account and your data from the app (how).

Who we are

MoonNap (Arrorró in Spanish) is an app by Everflow Labs, Inc. For any question about your data: hello@everflowlabs.io.

Your account

To use MoonNap, you create an account with Apple, with Google or with your email. The account is managed by Firebase Authentication, a Google service, which receives:

your email (if you sign in with Apple and choose to hide it, a private Apple address that forwards to yours);
the name Apple or Google shares, if they share it;
which service you signed in with, a user ID and the dates you signed up and last signed in;
for security, the IP address and the data of the system you sign in from.

If you sign in with your email, you choose a password, which Firebase stores encrypted; if you forget it, it sends a link to that email address so you can create a new one. The account is for signing in to the app: your baby’s entries aren’t saved in it.

What stays on your phone

This is saved in the app’s storage, on your phone, and works without internet:

What you tell us about your baby: their name, their birth date (or due date), whether they were born early and at how many weeks, whether they’re your first child, their sex, how they’re fed, their height, their weight and their photo, if you choose one.
Their entries: wake-ups, naps, nights and night wakings, with their times, their pauses and the details you note (how they fell asleep, where and how they woke up); breast and bottle feeds, pumping, solids, diapers, temperature, medicines with their dose and all your comments.
What you tell us about yourself: your name, your age range, your relationship to the baby, whether someone else cares for them and what you’d like to achieve.
What you’ve read in the 14-day plan, your recent and favorite sounds, and your settings.

If you don’t share with anyone, neither your baby’s name, nor their birth date, nor their photo, nor their full entries leave your phone: we don’t make a cloud copy. That’s why, if you delete the app or change phones, we can’t recover them. Some individual answers and usage data, without names, are sent to PostHog as statistics; the table below says which.

You choose the photo yourself with your phone’s photo picker, and the app only takes the one you chose.

If you share with your family

Since version 1.1, anyone with the full plan can invite other people who care for their kids, up to 4 in total, so they all see and log the same things. Sharing is optional: the cloud copy starts the first time you open “Invite,” before you send the code, or when you accept an invitation. If you accept one and you already had kids on your phone, you choose whether to add them to the family or keep them only on your phone.

What’s copied:

About your kids: their name, their birth date and the other data you entered, with their settings. Not their photo: it stays on each phone.
Their entries: all of them, including the ones you already had, with who logged them and when they changed.
About you: your name, your relationship to your kids, when you joined the family and your account ID.
About the plan: whether the family has it, until when and which person pays for it. To find out, our server asks RevenueCat about the people in the family, using their account ID.

The rest of what you tell us about yourself, your notifications and your settings aren’t copied.

Where it’s stored: in Cloud Firestore, a Google Firebase service, on servers in the United States, encrypted in transit and at rest.

Who sees it: only the people in your family, who can see, add, change and delete what’s about your kids. The database rules don’t let any other account in. We don’t use this data for advertising or for statistics, and we would only look at it if it were needed to solve a problem you ask us to fix.

How to stop sharing: in “Account details” › Family you can leave whenever you want, and the person who created the family can remove someone else. Whoever leaves keeps a copy on their phone and stops receiving changes. What’s already in the family stays there for the others. When the last person leaves, everything is deleted from the cloud.

Invitations: each code works only once and expires after 48 hours. To stop anyone trying random codes, we store how many wrong codes each account has tried: that counter carries no other data and isn’t deleted with the account.

What each service receives

Service	What for	What it receives
Firebase Authentication (Google)	Your account: signing in to the app and keeping it secure.	What’s detailed under “Your account,” above. It never receives your baby’s data or their entries.
Cloud Firestore and Cloud Functions (Google Firebase), only if you share with your family	So that the people in your family see and log the same things, and to know whether the family has the plan.	What’s detailed in “If you share with your family.” It never receives the photo.
RevenueCat	Validating your full plan subscription and restoring it.	An ID the app generates for your installation, the purchase data reported by Apple or Google (which plan, dates, whether it’s a free trial, the store country and the price), the phone model, the system version and the IP address. On iPhone, also the phone’s identifier for our apps (IDFV), the Apple code that indicates whether you came from an Apple Search Ads ad and, only if you allowed it in Apple’s tracking prompt, the advertising identifier (IDFA). On Android, the Google advertising ID and the Android ID.
PostHog	Knowing which parts of the app are used and where people get stuck, to improve it.	The same installation ID and usage events: which welcome screens were completed and, at the end, some individual answers: what you’d like to achieve, whether it’s your first child, your age range, your relationship to the baby, whether someone else cares for them and whether you added a photo (yes or no, never the photo); which service you created the account with (Apple, Google or email), never your email; what type of entry you added (for example “nap,” “bottle” or “medicine”), without the amount, the temperature, the name of the medicine or the comment; how many minutes a nap, a night or a night waking lasted, and the mood on waking if you marked it; whether a nap started at the estimated time and the age bracket of the schedule (for example, “4 months”), never the birth date; which plan chapter you opened, which sound you played and for how many minutes, whether you allowed notifications, whether you saw the full plan paywall and whether you started a trial or a purchase; since 1.0.1, which of the two versions of the welcome screens you saw (we’re testing which one is easier to understand), whether your first steps happened during the day or at night and how many of that day’s naps you marked as done or skipped; since 1.1, how many kids you have in the app and whether any of them isn’t born yet; whether you created, shared or accepted an invitation, which app you shared it with, whether you added your kids, how many people are in your family and whether someone left or was removed, without names. Also, the time of each event, the phone model, the system and app version, the language, the time zone and the IP address (which PostHog uses to estimate the country). It never receives your name or your baby’s, their birth date, their photo, your email or your comments.
Meta (Facebook SDK)	Measuring which of our ads on Facebook and Instagram lead to installing the app and starting the full plan trial, and letting Meta show those ads to similar people.	That the app was installed and opened, and that the free trial started (on iPhone, Meta records the purchases and trials processed by the App Store). Also, an ID generated by the SDK, the phone model, the system and app version, the language and the IP address. On Android, the Google advertising ID (you can delete or change it in your phone’s settings). On iPhone, the app asks for your permission with Apple’s tracking prompt: only if you choose “Allow” does Meta receive the iPhone’s advertising identifier (IDFA) to know which ad brought you. If you don’t allow it, we don’t use it and attribution continues through SKAdNetwork, Apple’s system that doesn’t identify the person. You can change this whenever you want in Settings › Privacy & Security › Tracking. It never receives your name, your baby’s data or their entries.
TikTok (TikTok Business SDK, since 1.0.1)	Measuring which of our ads on TikTok lead to installing the app and starting the full plan trial.	That the app was installed and opened and that the free trial started (with a code derived from the purchase, which doesn’t let them see its data). Also, an ID generated by the SDK, the phone model, the system version and the app version, the language and the IP address. On Android, the Google advertising ID (you can delete or change it in your phone’s settings). On iPhone, the SDK only starts after you respond to Apple’s tracking prompt and receives the advertising identifier (IDFA) only if you chose “Allow.” It never receives your name, your email, your baby’s data or their entries.
Google Firebase Analytics (Android only)	Measuring which of our ads on Google lead to installing the app and starting the full plan trial.	That the app was installed and opened, that the free trial started, an installation ID generated by Firebase, the Google advertising ID, the phone model, the system and app version, the language and the IP address. On iPhone the app doesn’t use Firebase Analytics: of Firebase, it only uses the account. It never receives your name, your baby’s data or their entries.
Apple and Google (the stores)	Charging for the subscription.	Payment is processed by the store where you bought it, under its own policies. We don’t receive your payment details.

These services store data on servers in the United States and other countries.

The permissions the app asks for

Notifications: to let you know before each nap and bedtime. They’re scheduled on your phone: they don’t come from a server of ours. On Android, while your baby sleeps, a persistent notification shows what time they’ve been sleeping since. You can turn them off in “Account details” or in your phone’s settings.
Photos: only if you tap to add a photo of your baby.
Tracking (iPhone only): Apple’s prompt that asks whether the app can track your activity. You can say no and the app works the same.

The app doesn’t ask for access to your microphone, your camera, your location or your contacts.

What we don’t do

We don’t show ads inside the app. The Meta and TikTok SDKs only measure our own ads.
We don’t sell or rent data.
If you don’t share with your family, we don’t upload your baby’s entries to any server. And we never use them for advertising.
On iPhone, we only use the advertising identifier if you give us permission in Apple’s prompt, and only to measure our own ads.

How to delete your account and your data

From the app: on Home, tap your photo or the person icon (top right) to open “Account details” and, at the bottom, tap “Delete my account.” This deletes your Firebase account and everything the app stores on your phone: your baby’s profile, their entries, your progress in the plan and your settings. If you share with your family, you leave it first. This can’t be undone. Deleting only the app deletes what’s on the phone, but not your account.

Without the app, or if you already deleted it: write to us at hello@everflowlabs.io from your account’s email, with the subject “Delete my MoonNap account.” We’ll delete your account and confirm by email when it’s done. To locate the usage and purchase data, which aren’t linked to your email, we’ll ask you to help us identify your installation.

What happens to each thing:

Your account (Firebase): it’s deleted.
What’s on the phone: it’s deleted when you tap “Delete my account” or delete the app. If you didn’t share with anyone, we never had a copy.
What you shared with your family (Firestore): your name leaves the family. The kids and the entries stay there for the other people, because they belong to the family; the ones you logged stay with your account ID, without your name. If you were the last person, everything is deleted. We also do this if you ask us by email.
Usage data (PostHog) and purchase data (RevenueCat): we delete it when you ask us by email. Apple and Google keep your purchase history under their own rules; we can’t delete that.
Your subscription: deleting the account or the app doesn’t cancel it. It’s canceled from the store (we explain how in Support).
Meta, TikTok and Google: their events don’t carry your name or your email, so we can’t find them through your account. You can view and disconnect that activity in “Your activity off Meta technologies,” in your Facebook or Instagram account, and delete or change the advertising ID in your phone’s settings.

This section is also our data deletion instructions page for Meta.

How long we keep data

Your account: as long as it exists. It’s deleted when you delete it.
Usage data: as long as it helps us understand and improve the app, or until you ask us to delete it.
What’s shared with your family: as long as someone remains in the family.
Purchase data: as long as it’s needed to validate and restore your subscription, or until you ask us to delete it.

Your rights

You can ask us what data we have about you, ask us to correct or delete it, and object to our using it, by writing to hello@everflowlabs.io.

Health

MoonNap isn’t a medical app: it doesn’t diagnose, it doesn’t treat and it doesn’t replace the pediatrician. The temperature and medicines you log are for you to keep track. They stay on your phone, unless you share with your family: then the people you invited see them too.

Children

MoonNap is for adults who care for a baby. It isn’t directed at children and we don’t knowingly collect data from children under 13 as users. Your baby’s data is entered by you, is saved on your phone (and in Firebase, if you share with your family) and we don’t use it for advertising.

Changes

If we change this policy, we’ll post the new version on this page with its date.