Privacy Policy

1. Who is responsible

The data controller is Alessio Romano Robert, the natural person who owns Siestita. Full identification and address details are in the legal notice, inside the terms and conditions.

For any privacy question, or to exercise your rights, write to hola@siestita.app. We have not appointed a Data Protection Officer: it is not mandatory in our case and every enquiry is handled through that address.

2. What data we process

• Your account data. When you sign in with Google or Apple we receive your name, your email address and an account identifier. We never see or store your password.
• Your baby’s profile. The name (or nickname) and date of birth. If they were born prematurely and you tell us the due date, we also process that to compute their corrected age.
• Your baby’s sleep records. The naps, nights and wake-ups you log in the app.
• Your baby’s daily events (optional). Tags you can mark to make sense of their nights (travel, daycare, teething, routine change…), including any you write yourself as free text.
• Your own sleep (optional). If you explicitly allow it, we read your sleep segments from Apple Health (iOS) or Health Connect (Android) — read-only, sleep data only — to show you how your rest relates to your baby’s. You can revoke this permission at any time from Health/Health Connect settings or from the app.
• Your conversations with Selene (optional, Premium). If you switch on the AI assistant, we process the messages you write to it, its replies and the summary of your baby’s sleep that the app prepares for each message. It is an optional feature that requires your express consent: without it, none of this exists. Details in section 10.
• Family. If you invite another caregiver, we process their email and their link to the baby’s profile so you both see the same records.
• Time zone and preferences. The time zone of your device and of the baby’s profile, needed to know which local day each record belongs to, plus your reminder settings.
• Your subscription status. If you subscribe to Premium, see section 6.
• Support. If you write to us, we process your email address and the content of your message in order to reply.
• Minimal technical data. Server logs (e.g. request date and status) needed to run the service securely. When you sign in we also use your IP address, and only there, to rate-limit login attempts and stop brute-force attacks; it is stored as part of a counter and deleted automatically within 24 hours. The rest of the app does not use it.

The app contains no advertising, uses no third-party analytics SDKs and does not track your activity across other apps or websites.

3. Your baby’s data

Your baby is a data subject too, even though they do not use the app. Their data is entered and controlled by their caregiver. By creating their profile you declare that you are their parent, guardian or legal representative, or that you are authorised by someone who is, and that you may therefore decide on the processing of their data.

Some of that information — their sleep patterns and, if you provide it, their prematurity — is health-related information: a category given special protection by the GDPR. We process it with your explicit consent as their representative (Arts. 9(2)(a) and 6(1)(a) GDPR), which you give by creating their profile and logging their sleep, and which you can withdraw at any time by deleting the data or the account.

This data is used solely for the app’s features: showing you their history, computing their predictions, sharing them with the caregivers you invite and, only if you switch it on, answering your questions through Selene (section 10). Never for advertising, never to build commercial profiles, and never sold or disclosed to third parties.

The daily events you can mark are context tags (travel, daycare, teething…). If you write a free-text tag, its content is up to you: we recommend not recording medical information there that you do not need. If you switch on Selene, the tags of the last few weeks form part of the summary sent to OpenAI (section 10).

Siestita is an app for adult caregivers. It is not directed at children as users and we do not knowingly collect data from any minor signing up on their own.

4. Why we use the data, and the legal basis

• Providing the service (logging sleep, predicting the next nap, syncing between caregivers, managing your subscription): performance of a contract (Art. 6(1)(b) GDPR).
• Processing your baby’s health data (sleep and, if provided, prematurity): your explicit consent as their legal representative (Arts. 6(1)(a) and 9(2)(a) GDPR).
• Reading your sleep from Apple Health / Health Connect: your explicit consent (Arts. 6(1)(a) and 9(2)(a) GDPR), which you can withdraw at any time.
• Talking to Selene, the AI assistant (sending your messages and a summary of your baby’s sleep to OpenAI, section 10): your explicit and specific consent as the baby’s legal representative (Arts. 6(1)(a) and 9(2)(a) GDPR), given in the app before your first message and withdrawable at any time. Withdrawing it deletes your conversations.
• Security and abuse prevention: our legitimate interest in keeping the service running (Art. 6(1)(f) GDPR).
• Legal obligations (accounting and tax duties arising from payments): Art. 6(1)(c) GDPR.

We never use your data, or your baby’s, for advertising, and we never sell or rent it to third parties.

5. Apple Health and Health Connect

Access to Apple Health (HealthKit) and Health Connect is optional, read-only and limited to sleep. The data we read is used exclusively for the app features that show your rest alongside your baby’s; it is not used for advertising or marketing, not sold, and not shared with third parties other than our infrastructure providers, who store it on our behalf; it is never sent to OpenAI and plays no part in the AI assistant (section 10). This use complies with Apple’s HealthKit guidelines and with the Google Play / Health Connect limited use policy for health data.

Your sleep is yours alone: the other people in your family never see your sleep data. They only see the baby wake-ups that you explicitly confirm.

6. The Premium subscription

If you subscribe to Premium, the payment is processed by Apple or Google, not by us: we never see or store your card details. From their platform we receive and store, linked to your family, the transaction identifier, the product purchased, the subscription status and its expiry date, so we know whether Premium features should be active. Apple and Google automatically notify us of renewals, cancellations and refunds.

Legal basis: performance of a contract (Art. 6(1)(b)) and, for records that must be kept for accounting or tax purposes, legal obligation (Art. 6(1)(c)).

6.1 If you request a refund from Apple

When someone requests a refund for a subscription, Apple may ask us for consumption data about what they bought — in short, how much you have used the Premium features — so it can decide with better information. Apple may only take that information into account if you allow it.

That is why we ask you in the app before sending anything, and we tell Apple whatever you decided. If you would rather not allow it, that is fine: Apple will still resolve your refund, just without our data. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

7. Where it is stored, and who processes it for us

Data lives in two places: on your device (a local cache so the app works offline, with credentials protected in the system’s secure storage) and on our servers. All communication is encrypted (HTTPS).

We work with these processors, acting under contract and only on our instructions:

• Supabase — database and authentication.
• Railway — hosting for our API.
• Cloudflare — delivery of the website’s assets.
• Google and Apple — identity (sign-in), notification delivery and subscription management.
• OpenAI — the language model behind Selene. Only if you switch on the assistant; details below.

7.1 OpenAI, the provider behind the AI assistant

When you write to Selene, your message and the summary described in section 10 travel to OpenAI to generate the reply. Under its Data Processing Addendum, when the customer is established in the European Economic Area the processor is OpenAI Ireland Ltd. (Ireland); the service is provided with the involvement of its parent OpenAI OpCo, LLC (United States) and its sub-processors.

• Pseudonymised. OpenAI does not receive your name, your email or any identifier of your account: only a derived code that cannot reveal who you are. It does receive your baby’s first name, because it makes the conversation natural; you can use a nickname.
• No training. Under the terms of the OpenAI API, your data is not used to train or improve its models.
• No persistent storage. We ask OpenAI not to keep the conversations. OpenAI may retain the data for up to 30 days solely to detect abuse, after which it is deleted.
• Contract. Processing is subject to the OpenAI Data Processing Addendum, which incorporates the European Commission’s standard contractual clauses; its list of sub-processors is at platform.openai.com/subprocessors.

8. International transfers

Some of those providers are US companies and may process data outside the European Economic Area. When that happens, the transfer relies on the safeguards set out in Chapter V of the GDPR: standard contractual clauses approved by the European Commission and, where the provider is certified, the EU–US Data Privacy Framework. In OpenAI’s case, the processing involves access to the data from the United States and relies on the standard contractual clauses (Decision 2021/914) incorporated into its Data Processing Addendum. You can request a copy of those safeguards by writing to hola@siestita.app.

9. How long we keep it

• Your account and your records: for as long as the account exists.
• Conversations with Selene: for as long as your account exists, or until you delete them or withdraw consent from the app (in both cases they are removed immediately). The sleep summary attached to each message is deleted automatically after 30 days; the assistant’s usage counters, which contain no text, after 90 days (daily) and 13 months (monthly).
• Technical security logs: a maximum of 90 days.
• Billing and subscription data: for the period required by accounting and tax rules, even after you close the account.
• Support emails: up to one year after the last reply.

If you delete your account from Settings, your profile and your link to the family are removed. If you were the only caregiver, your babies’ profiles and all their records are removed too. If another caregiver remains in the family, the baby’s data is theirs as well and stays in their account; any wake-ups you had confirmed are unlinked from your identity. For everything to be deleted, each caregiver must delete their account, or ask us by email.

10. Predictions and Selene, the AI assistant

Predictions are computed on your own device, using statistics over your baby’s data and the typical patterns for their age. No generative AI is involved in them. The baby’s sex is not used as a variable.

Selene is different: it is an optional assistant, included in Premium, that you can talk to about your baby’s sleep. It does use generative AI — a language model from OpenAI — and only works online. Before your first message we ask for your explicit and specific consent; until then nothing is sent, and the rest of the app works exactly the same without it. The app permanently reminds you that you are talking to an artificial intelligence.

With each message you send, the app prepares and transmits to OpenAI:

• your message and the latest messages of the current conversation;
• your baby’s first name, corrected age, whether they were born preterm and their time zone;
• a summary of their sleep: the last 30 days, day by day (naps, night, wake-ups and the event tags of those days), and monthly medians for the three months before that;
• the observations and associations the app already shows you, the window the engine is predicting at that moment and how accurate it has been lately.

Your name, your email, your own sleep from Apple Health / Health Connect and data about other caregivers are never sent. Your conversations are private: the other people in your family do not see them. On our servers, the messages and that summary are stored encrypted at the application level (AES-256-GCM) with a key that does not live in the database.

Selene converses: it does not diagnose, does not predict — predictions remain the job of the engine on your device — and makes no decisions. We make no automated decision producing legal effects on you or your baby (Art. 22 GDPR). You can withdraw consent at any time from Settings: doing so deletes all your conversations.

11. Cookies

This website uses no cookies and no analytics or tracking tools. That is why you will not see a consent banner: there is nothing to consent to.

12. Your rights

You can exercise your rights of access, rectification, erasure, portability, objection and restriction at any time:

• Export your data: from the app itself (Settings), in a machine-readable format.
• Delete your account and all data: from the app itself (Settings → Delete account).
• Withdraw consent for health data: from Settings → Health, or by revoking the permission in Apple Health / Health Connect.
• Withdraw consent for Selene or delete your conversations: from Settings → Selene. Withdrawing it deletes all conversations.
• Any other request: write to hola@siestita.app.

If you believe we have mishandled your data, you have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es) or with your local supervisory authority.

13. Security

We apply reasonable technical and organisational measures: encryption in transit, additional application-level encryption of your conversations with Selene (AES-256-GCM, with the key kept outside the database), credentials in the system’s secure storage (Keychain/Keystore), isolation of each family’s data within the database itself, restricted server access and data minimisation — we only ask for what the app needs to work.

14. Changes to this policy

If we change this policy we will update the date on this page and, for significant changes, we will notify you in the app before they take effect.

15. Contact

For any question about this policy or your data: hola@siestita.app.