Nightlight privacy policy

Last updated: 30 September 2026

Nightlight is made by Nebula Colors, a small family studio. This policy explains what the app does with your information. The short version: your baby's log is kept on your phone. If you choose to share it live with a partner, it travels encrypted so that only your phones can read it. There are no accounts, no ads, no analytics and no trackers, and we never sell or share anything about you or your family.

What stays on your phone

Everything you log: feeds, sleep, diapers, pumping, medicine, temperature, growth, notes, your baby's name and birthday, your reminders and your settings. It's stored in the app's private storage on your phone.

  • Android's own device backup can include it, as it does for other apps, if you've turned backup on. Settings says so.
  • Reminders are set and shown by your phone. There's no push service.
  • The home-screen widget, if you add it, shows the last feed on your home screen.
  • Deleting the app, or "Delete everything" in Settings, removes it from the phone.

What leaves your phone

Unless you share live with a partner, nothing: the app sends your log nowhere.

When you share the doctor's page or the CSV export, it goes only where you send it, through your phone's share sheet. Bringing in a CSV from another baby app reads only the file you pick, on your phone.

Sharing live with a partner

If you invite a partner, your two phones keep the same log.

  • Every change is encrypted on your phone before it's sent, with a key only your phones have. Our relay server passes the sealed changes between your phones. It can't read them: it sees no names and no entries, only a random number for your family, a random id for each phone, and when changes were sent.
  • The secret in an invite link comes after the "#", so it never reaches our server. The sealed invite works for one day. It's deleted as soon as your partner uses it, and an unused one is cleared out after it expires.
  • The recovery link in Settings works the same way: what comes after the "#" stays on the phone that opens it.
  • Like any server, the relay sees the phones' IP addresses when they connect. We don't store them. Our host, Cloudflare, handles the connection under its own privacy policy.
  • Starting over with a new link (for a lost phone), or "Delete everything", deletes your family's sealed changes from the relay. If your phone is offline when you do this, the relay deletes them after a year with no changes. A family nobody has written to for a year is deleted automatically.

What we don't do

  • No account or sign-in.
  • No advertising and no advertising identifiers.
  • No analytics, crash-reporting or tracking software.
  • No selling, renting or sharing of personal data.
  • No medical advice. Nightlight keeps a record; it doesn't diagnose or recommend anything. Growth percentiles are estimates from the WHO Child Growth Standards.

Children

Nightlight is made for parents and caregivers. It records information about a baby that the parent enters. That information stays on the parent's phone, or travels encrypted between the family's own phones. We don't collect personal information from anyone, including children.

Your choices

You can stop sharing, or delete everything, from Settings at any time, or uninstall the app.

Changes

If this policy changes, we'll update the date above and describe the change in the app's release notes.

Contact

Questions: support@nebulacolors.com, NEBULA COLORS LLC, 6625 134th Pl SE Unit 303, Newcastle, WA 98059, USA.