Privacy Policy

Last updated: October 26, 2026

HeyNap is an app for parents and caregivers. It tracks a baby's sleep, feeds, diapers, health and growth, and plans naps and bedtime. It is published by DIACONU MOBILE APPS SOCIETATE CU RASPUNDERE LIMITATA ("Diaconu Mobile Apps", "we", "us"). On Google Play, our developer name is PostMuse.

This policy covers the HeyNap app on iOS and Android and the website heynap.app. It explains what information we collect, where it is stored, who processes it for us, and the choices and rights you have. We are the data controller for the personal data described here.

1. What we collect

1.1 What you enter in the app

To plan your baby's day and keep a record of it, the app asks for and stores:

• About you and your baby: your first name, your baby's name, birthday or due date, and sex if you choose to give it.
• Sleep: wake-ups, naps, bedtimes and night wakings, with their times and where your baby slept.
• Feeds and diapers: nursing, bottles (amount and type of milk), solids, pumping, and diapers.
• Routine: baths, time outside, vitamins and supplements.
• Health: temperatures, medicines and doses, symptoms, vaccines and doctor visits.
• Growth: weight, height, head size and teeth.
• Notes you add to any entry, and your settings and plan preferences (units, clock, nap and bedtime choices).

Some of this is health information about your child, which the law treats as sensitive. Where it is stored depends on whether you use an account:

• Without an account: it is stored only on your device. It doesn't reach us or any of our service providers. Your device's own backups (iCloud or Google) may include it, depending on your device settings.
• With an account: it is stored on our servers in the European Union and on every device signed in to the account. You give your explicit consent to this when you create an account or turn on sync, and you can withdraw it at any time by deleting your account (section 6).

1.2 Your account

If you create an account, we collect your email address, or the identifier that Sign in with Apple or Sign in with Google provides (Apple lets you hide your real email address), and your name if you give it. If you share your baby's log with another parent or caregiver, we store the invitation and their account's identifier, so that both of you can see and add to the same log.

1.3 Purchases

Subscriptions and purchases are made through the App Store or Google Play. Apple or Google handle the payment; we never receive your card details. Our purchase provider, RevenueCat, receives a random app user identifier (or your account identifier, if you have an account), the products you buy, transaction identifiers, and your subscription's status, so the app knows what you have unlocked on each device.

1.4 Usage data and crash reports

The app sends technical and usage data to Google Firebase (Analytics and Crashlytics) and to Amplitude:

• Device information: device model, operating system and version, app version, language, region and time zone.
• Approximate location: country and region, worked out from your IP address. We never collect precise (GPS) location.
• Usage events: how the app is used, for example which screens are opened, that an entry of a certain kind (a nap, a feed) was logged and when, that a reminder was turned on, or that a subscription was started. Events may include your baby's age in weeks or months.
• Identifiers: random identifiers that these services create for your app installation.
• Crash reports: the state of the app when it crashed, and the steps just before.

These events never include your baby's name, your notes, or the details of health entries (temperatures, medicines, symptoms, vaccines). We use this data in aggregate, to understand how the app is used and to fix problems. You can turn it off at any time with Share usage data in the app's settings. We don't use the advertising identifier and we don't track you across other companies' apps or websites.

1.5 Notifications

Reminders about naps and bedtime are scheduled on your device. If you have an account and allow notifications, we may also store your device's push token, to tell you about things that happen on another device, such as a caregiver logging a nap.

1.6 When you contact us

If you email us, we receive your email address and whatever you choose to send, and we use it only to answer you.

1.7 The website

heynap.app is hosted by GitHub Pages. GitHub records visitors' IP addresses in its server logs for security; see GitHub's privacy statement. The website sets no cookies and runs no analytics.

1.8 What we don't collect

HeyNap doesn't access your contacts, photos, camera, microphone or precise location, and it doesn't use your device's advertising identifier.

2. How we use it, and on what legal basis

For people in the EU, the EEA and the UK, these are our purposes and their legal bases under the GDPR:

You can object to processing based on our legitimate interest, and withdraw any consent you gave, at any time: in the app's settings or by writing to us. Withdrawing doesn't affect what was done before.

3. Service providers

These companies process data for us, under contracts that limit them to providing their service:

Accounts and synced logs are stored with a cloud hosting provider on servers in the European Union. We will name the provider here before accounts become available in the app.

4. Who else sees your data

• People you invite: if you share your baby's log, the people you invite can see and add to it until you or they end the sharing.
• When the law requires it: we disclose data if a valid legal request obliges us to, and only what it requires.
• If the company changes hands: if HeyNap is sold or merged, your data moves with it, under this policy, and we'll tell you before that happens.

We don't sell your personal data or share it for advertising.

5. How long we keep it

• On your device: until you delete the entry, the log, or the app.
• Your account and synced logs: for as long as you have the account. When you delete it, we delete them within 30 days, and from our backups within 90 days.
• Usage data: up to 24 months. Crash reports: up to 90 days.
• Purchase records: as long as tax and accounting law requires.
• Emails: for as long as needed to help you, then up to 2 years.

6. Getting a copy, and deleting your data

To get a copy of everything you have logged, use Download my data in the app's settings. It saves a file in a common format that you can keep or move to another service.

• Delete any entry in the app, from its editor.
• Without an account, deleting the app deletes everything on that device (copies in your device's backups follow your backup settings).
• With an account, delete it from the app's settings. This deletes your account and the logs stored with us. If you share a baby's log with others, it stays with them only if they own it.
• You can also write to us to delete what we hold, including usage data linked to your app's identifiers. The Support page explains how.

7. Security

Data sent between the app and our servers or service providers is encrypted in transit, and data stored with us is encrypted at rest. Your baby's health information is never used for advertising or sold, and it is never used for anything but providing HeyNap to you. Access is limited to what each person needs to do their job. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

8. Children

HeyNap is meant for adults: parents and other caregivers. It is not directed at children, and we don't knowingly collect personal data from anyone under 16. The information about your baby is entered by you, as their parent or caregiver, and stays under your control as described above. If you believe a child has given us personal data, write to us and we'll delete it.

9. Your rights

9.1 EU, EEA and UK

You have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. You can also complain to a data protection authority: ours is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), or you can contact the authority where you live.

9.2 California and other US states

You have the right to know what personal information we collect and how we use it, to access, correct and delete it, and not to be treated differently for using these rights. We don't sell or share personal information for cross-context behavioral advertising, and we use sensitive information (such as your baby's health information) only to provide the app.

9.3 How to use them

Write to us at the address in section 13. We answer within 30 days, and may ask you to confirm that the request is yours. Without an account, most of your data is only on your device, so we can act only on what we hold: purchase records and usage data.

10. International transfers

We are based in Romania, and accounts and synced logs are stored in the European Union. Some of our service providers, such as those for analytics, crash reports and purchases, process data in the United States and other countries. When data leaves the EU or EEA, we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.

11. Not medical advice

HeyNap gives general guidance on sleep timing. It is not a medical device and doesn't diagnose anything. See our Terms of Use.

12. Changes to this policy

We update this policy when HeyNap changes. The date at the top shows the latest version. If a change affects how we use your data in a significant way, we'll tell you in the app before it takes effect and, where the law requires it, ask for your consent.

13. Contact us