Privacy Policy

At NightSwap we take your privacy (and your sleep) seriously. This policy explains what data we collect on the waitlist, why, for how long, and what rights you have.

1. Data controller

• Owner: [[RELLENAR: name or company name]]
• Tax ID: [[RELLENAR: NIF]]
• Address: [[RELLENAR: postal address]]
• Contact email: hello@nightswap.app

2. What data we process

• Email (required) and, if you use “Continue with Google”, your first name and your Google account identifier. We never store Google access tokens or passwords.
• Website language and approximate country (only when provided by our server or content delivery network; we do not use IP geolocation services).
• Survey answers (optional): your stage (expecting or baby’s age), who gets up at night, whether and how much you would pay, and a free-text answer.
• Referral data: your referral code, who invited you and how many people joined with your link.
• Visit source (campaign UTM parameters, if any).
• Technical security data: an irreversible salted hash of your IP address to prevent abuse. We never store your IP in clear text and delete this hash after 30 days.
• Consent: date and version of the text you accepted.

The question about pregnancy or your baby’s age may be considered health-related data. It is completely optional: if you answer it, you give us your explicit consent to process it for the sole purpose of designing the product (Art. 9(2)(a) GDPR). You can withdraw it at any time.

3. Why we use it and our legal basis

Purpose	Legal basis
Managing your spot on the waitlist, your position and your referrals.	Your consent (Art. 6(1)(a) GDPR).
Emailing you about the NightSwap launch (confirmation, welcome, position updates, launch and, where applicable, perks or codes).	Your consent (Art. 6(1)(a) GDPR).
Analysing survey answers in aggregate to decide what to build and at what price.	Your consent (Art. 6(1)(a) and, for pregnancy data, Art. 9(2)(a) GDPR).
Preventing spam, referral fraud and attacks on the website.	Legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).

We do not sell your data, we do not use it for third-party advertising and we make no automated decisions with legal effects on you.

4. How long we keep it

• If you do not confirm your email, we delete your signup after 30 days.
• If you confirm, we keep your data while the waitlist exists and up to [[RELLENAR: period after launch, e.g. 12 months]] after launch, or until you unsubscribe or ask us to delete it.
• The salted IP hash is deleted after 30 days.
• If you unsubscribe, we stop emailing you immediately; you can also ask for full deletion.

5. Who we share it with (processors)

• Web hosting and database: [[RELLENAR: hosting company name, e.g. BanaHosting]], with servers in the European Union.
• Email delivery: our hosting’s mail server (in the EU) [[RELLENAR: or the transactional provider used, e.g. Brevo (France)]].
• Google (Google Ireland Ltd. / Google LLC), only if you choose “Continue with Google”, to verify your identity. Google may process data outside the EU under the EU-US Data Privacy Framework and standard contractual clauses.

All processors handle data on our instructions under a data processing agreement.

6. Your rights

You can exercise your rights of access, rectification, erasure, restriction, portability and objection at any time, and withdraw your consent without affecting the lawfulness of prior processing. Email us at hello@nightswap.app from the address you signed up with. To stop receiving emails, just use the link included in each one.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.

7. Children

The waitlist is intended for adults. We do not knowingly collect data from children under 14.

8. Security

We use HTTPS encryption, strict security headers, secrets kept outside the code, two-factor admin access and an audit log.

9. Changes to this policy

If we make a significant change, we will email you before it takes effect.