Nightcap Privacy Policy
Nightcap is made by Benjamin Jacquet, trading as Novaire Digital (ABN 24 349 309 268), in Australia. This policy explains what Nightcap collects, where it goes, how long it is kept and what you can do about it. Questions or requests: support@novairedigital.com.
The short version
- Your drink log lives on your phone. An account is optional; without one, nothing about your drinking leaves your phone except what you choose to send to our AI (and only after you agree).
- With an account, your log syncs to our servers in Sydney, Australia, after you agree. Your date of birth and your trusted contacts never leave your phone.
- No ads, no ad trackers, and no selling or sharing of your data for advertising. Analytics are off unless you switch them on, and even then they never contain what you drank.
- You can export everything as a file and delete your account and its data from inside the app.
What Nightcap keeps on your phone
| What | Why |
|---|---|
| Drinks you log (name, type, amount, strength, time, price if you add it), water, check-ins, notes for the morning, your custom drinks | The whole app: the estimate, your record, check-ins |
| Body profile: sex used for the estimate, weight, height | The blood-alcohol estimate |
| Date of birth | The age check. It is never sent anywhere. |
| Place, driving limit, mode, weekly limit, currency | Limits, local standard drinks, helplines |
| Trusted contacts (names and numbers you type in) | The "share location" button. They are never sent anywhere. |
| Settings and consent choices | So the app remembers them |
Uninstalling Nightcap deletes this copy. Your phone's own backup (iCloud or Google) may include it, as it does for other apps, under your backup settings.
What leaves your phone, and when
| When | What is sent | To whom | Kept for |
|---|---|---|---|
| You sign in and agree to sync | Your log, water, check-ins, notes, custom drinks and body profile (not your date of birth, not your trusted contacts) | Supabase, our database and sign-in provider, servers in Sydney, Australia | Until you delete it or your account. Deleted entries are removed from our servers within 30 days. |
| You sign in with Apple or Google, or by email code | Your email address or Apple or Google account identifier | Supabase (sign-in); Apple or Google | Until you delete your account |
| You are in a crew | Your display name, avatar, alcohol-free days this month, current streak, water this week, challenge progress | Supabase, visible to your crew | Until you leave the crew or delete your account |
| You switch on sharing in a live session | Your estimated blood-alcohol curve for tonight and whether it is rising (this can reveal when you drank and roughly how much) | Supabase, visible to that session's members | Removed when the session ends, and within 24 hours at most |
| The phone's parser is unsure about something you said or typed, and you have agreed to AI | The words of that one log | Our server, then OpenAI (based in the United States) | Not kept by us. OpenAI does not use API data to train its models and keeps abuse-monitoring logs for up to 30 days. |
| You take a photo to identify a drink, and you have agreed to AI | That photo, reduced in size | Our server, then OpenAI (based in the United States) | Not kept by us; OpenAI as above |
| You use weekly insights (Premium) and have agreed to AI | Up to 12 weeks of numbers, each week with its start date: standard drinks for each day, drinking days, spend in your currency, alcohol-free days and, if you do morning check-ins, your average mood and energy scores (no single drinks, times of drinking, places or notes) | Our server, then OpenAI (based in the United States) | Not kept by us; OpenAI as above |
| Any AI request | Your account identifier, the kind of request, its size and cost (never its content) | Our database | 90 days, to cap use and spending |
| You subscribe or restore | An app user identifier and your purchase history | Apple or Google, and RevenueCat (subscription management, based in the United States) | As long as you have an account with them |
| You switch analytics on | App events from a fixed list (for example "a drink was logged by voice", never what or how much), device model, OS and app version | PostHog, EU region | Under PostHog's retention settings; switch it off any time |
| The app crashes | The error, device model, OS and app version, and recent screens without their details | Sentry, EU region | Under Sentry's retention settings |
| Notifications | Reminders are scheduled on your phone. If you are in a crew, a push token so we can tell you a session started | Expo's push service (based in the United States), Apple or Google | Until you sign out or delete your account |
Nightcap never sends your location anywhere. When you tap "Share location", the phone reads its position and puts a map link in a text message that you send yourself.
Voice, camera and microphone
- Voice logging uses your phone's own speech recognition (Apple or Google). Where your phone can, it runs on the phone; otherwise Apple's or Google's speech service processes the audio under their terms. Nightcap does not record or keep audio.
- The camera is used only while you take a photo of a drink to identify it.
AI, and your consent
The first time something would go to our AI provider, Nightcap asks first and explains what is sent. Saying no keeps everything else working: voice goes through your phone's own speech recognition, and you can always tap what you had. You can change your mind in Profile > Data and privacy. AI requests go through our server, never straight from the app, and are sent with OpenAI's response storage switched off.
Why we use your information (legal bases)
- To provide the app you asked for: logging, the estimate, sync, crews and subscriptions.
- With your consent: syncing your drink information (it is health information), live-session sharing, AI processing and analytics. You can withdraw consent at any time; it does not affect what was done before.
- Our legitimate interest in keeping the app working: crash reports without drink details, abuse prevention and spending caps.
- Legal obligations: tax records for purchases (held by Apple, Google and RevenueCat).
Sending information overseas
Our database is in Sydney. OpenAI, RevenueCat and Expo are based in the United States; PostHog and Sentry hold Nightcap's data in the EU. We choose providers that commit to protecting it, and we send each only what its job needs.
How long we keep it
- Your synced data: until you delete it or your account. Deleted entries leave our servers within 30 days; deleted data can remain in our hosting provider's encrypted backups until those backups expire on their normal cycle.
- Live-session shares: removed when the session ends, and within 24 hours at most.
- AI usage records (no content): 90 days. Rate-limit counters: 30 days.
- Reports you make about other users: 12 months.
Your choices and rights
- See and take your data:Profile > Export my data saves a file with everything.
- Correct it: edit any entry, your profile or your settings in the app.
- Delete it:Profile > Delete account deletes your account and its data from our servers, then this phone's copy. Without the app: https://novairedigital.com/nightcap/delete-account.
- Switch things off: analytics, AI, live-session sharing and every notification, each on its own.
- Ask us: support@novairedigital.com. We answer within 30 days. If you are not happy with our answer you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), the UK Information Commissioner's Office (ico.org.uk), Ireland's Data Protection Commission (dataprotection.ie) or New Zealand's Privacy Commissioner (privacy.org.nz).
Age
Nightcap is for adults who are of legal drinking age where they live (18 in Australia, New Zealand, the UK and Ireland; 21 in the United States; 21 in Canada until each province's age is confirmed). The age check uses the date of birth you enter, which stays on your phone. If we learn that someone under age has an account, we delete it.
Security
Data travels encrypted. On our servers, every row is locked to its owner by database rules, and the AI keys never leave our server. No system is perfectly secure; if something goes wrong that puts your information at risk, we will tell you and the regulator as the law requires.
Changes
If we change this policy in a way that matters, we will say so in the app before it applies.
Contact
Benjamin Jacquet, trading as Novaire Digital (ABN 24 349 309 268), Australia. Email: support@novairedigital.com.