This Privacy Policy explains how [Insert Company Legal Name] ("Rockabye," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the Rockabye iPhone, iPad, and Apple Watch app, the Rockabye widget, and the website at rockabye.app (together, the "Service"). It applies to everyone who uses the Service, anywhere in the world.
This Policy is written in English. If we provide a translated version for convenience, the English version controls in the event of any conflict.
We design Rockabye to work with as little personal information as possible. Here is exactly what we collect and why:
| Category | Examples | Why we collect it |
|---|---|---|
| Profile / personalization data | First name, language, gender, spiritual/cultural tradition, theme & background preference, cards-per-day setting | To open each affirmation with your name and shape its tone and grammar to your language, gender, and tradition |
| Wellness self-report data | Mood check-in selections, streak history, which emotion you pick before a breathing session | To show your mood history and streak, and to route you to the right encouragement phrases |
| Purchase data | Subscription/entitlement status, purchase date | To unlock Rockabye+ features; actual payment details (card numbers, etc.) are handled entirely by Apple and never reach our servers |
| Device & technical data | Device type, OS version, app version, crash logs, approximate timezone | To schedule your cards correctly (06:00–23:30 local time), fix bugs, and keep the app working across iOS versions |
| Notification token | Apple Push Notification (APNs) device token | To deliver your scheduled affirmation notifications |
| Website data (rockabye.app only) | Email address, if you submit the "Notify me at launch" form; preferred language | To notify you when the app launches in your region/language |
We do not require you to create a username/password account; your profile lives on your device and, where applicable, in an Apple-provided "App Group" container shared only between the Rockabye app, its widget, and its Watch app on your own devices.
We use the information described above only to: (a) provide, personalize, and improve the Service; (b) schedule and deliver your affirmation cards and notifications; (c) process subscriptions and restore purchases; (d) maintain the security and integrity of the Service; (e) diagnose technical issues and improve reliability; (f) communicate with you about the Service, including changes to these policies; and (g) comply with legal obligations.
If you are located in the European Economic Area or United Kingdom, our legal bases for processing your information are: performance of a contract (providing the personalized affirmations and breathing flow you've requested), consent (for optional features and the website email sign-up, which you can withdraw at any time), and legitimate interests (for security, fraud prevention, and improving the Service), balanced against your rights and freedoms.
We disclose information only in the following limited circumstances:
We do not otherwise share your personal information with any third party.
Profile data needed to personalize your affirmations is stored locally on your device (and synced only between your own devices via Apple's App Group mechanism, where applicable), so that it isn't necessary for us to hold a central copy on our servers for the app to function. Where we do operate backend infrastructure (for example, for notification delivery or anonymous diagnostics), we use industry-standard safeguards, including encryption in transit (TLS) and access controls limiting who at our organization can access any data we hold.
No method of storage or transmission is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify you and any applicable regulator as required by law.
Regardless of where you live, you can always:
We will never charge you a fee to exercise these rights, and we will never retaliate against you (for example, by degrading the Service) for exercising them.
We retain personal data only for as long as necessary for the purposes described in this Policy: profile data persists on your device until you delete the app or change it yourself; backend diagnostic and purchase records are retained for the period necessary for security, accounting, and legal compliance purposes, after which they are deleted or anonymized.
The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, contact us at [email protected] and we will investigate and delete it as appropriate.
We may process and store information on servers located outside your country of residence, including in the United States. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on legally recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses, to protect your information.
The rockabye.app marketing website uses only the minimal cookies or local storage necessary for basic functionality (such as remembering your selected language) and, where applicable, anonymous, aggregate analytics to understand site traffic. The website does not use third-party advertising cookies. The Rockabye app itself does not use browser cookies.
If you are a California resident, the California Consumer Privacy Act (as amended) gives you the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising these rights. As stated throughout this Policy, we do not sell or share personal information for cross-context behavioral advertising, so there is no "opt-out of sale/share" needed. Residents of other U.S. states with comprehensive privacy laws (for example, Virginia, Colorado, Connecticut) have similar rights, which you can exercise using the contact details in Section 16.
If you are located in the EEA, UK, or another jurisdiction with similar protections, you have the right to access, rectify, erase, restrict, or port your personal data, to object to processing based on legitimate interests, to withdraw consent at any time, and to lodge a complaint with your local data protection authority. Our contact details are in Section 16.
We may update this Policy from time to time to reflect changes to the Service or applicable law. If we make material changes, we will notify you through the app or by updating the "Last updated" date above. We encourage you to review this Policy periodically.
Questions, requests, or concerns about this Policy or your personal information can be sent to [email protected]