Privacy Policy
Last updated: September 29, 2026
Unofficial translation. If anything differs, the Spanish version prevails.
This policy explains what personal data we process when you visit nocturo.app and when you use the Nocturo app for iOS and Android, why we use it and what rights you have. It is written in accordance with the EU General Data Protection Regulation (GDPR) and with Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Holder: Nocturo, by Ignacio Domínguez
- Address: professional address, available on request at privacidad@nocturo.app
- Privacy contact: privacidad@nocturo.app
2. What data we process
On the website (nocturo.app)
- Waitlist. If you sign up, we store your email, the language of the site, the form you signed up from, the network or site you came from (for example, Instagram) and the date on which you accepted this policy. We use it only to tell you when the app launches.
- Website analytics. We use Vercel Web Analytics to count visits and page views in aggregate. It uses no cookies and does not build a profile of you.
- Fonts. The fonts are loaded from Google Fonts, so your browser sends your IP address to Google when you open the site.
- No cookies. The website uses no cookies and stores no data in your browser.
In the app
- Account. You sign in with Sign in with Apple or Google. We receive an account identifier from Apple or Google and your email, if you share it (with Apple it may be a private relay address). We also store your language, your sign-up date and the date of your last activity.
- Use of the service. Playback progress, completed episodes, unlocked cards, favorite cases and category votes. Your onboarding preferences (interests, format) are stored on your device only.
- Purchases and subscriptions. Apple (App Store) or Google (Google Play) charge you; we never see your card details. Through RevenueCat we receive your subscription status and your transactions: product, dates, amount and purchase identifiers.
- Product analytics. We use PostHog, hosted in the United States, to record usage events (screens viewed, episodes played, onboarding steps) tied to your user identifier. We do not record the screen or your sessions. You can switch it off in Profile → Privacy and Security.
3. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Create and maintain your account, store your progress and collection, and give you access to what you have bought | Performance of a contract (Art. 6.1.b GDPR) |
| Manage subscriptions and purchases, and keep the required accounting records | Performance of a contract and legal obligation (Art. 6.1.b and 6.1.c GDPR) |
| App analytics to understand what works and improve the product | Legitimate interest (Art. 6.1.f GDPR). You can switch it off at any time in the app, under Profile → Privacy and Security → Usage analytics. |
| Aggregate website visit statistics | Legitimate interest (Art. 6.1.f GDPR) |
| Service security and prevention of abuse | Legitimate interest (Art. 6.1.f GDPR) |
We do not make automated decisions with legal effects about you, and we do not sell your data.
4. Who we share it with
Only with providers that process it on our behalf and follow our instructions:
- Apple and Google: sign-in and charging purchases in their stores.
- RevenueCat (United States): subscription and purchase management.
- PostHog (United States): app analytics.
- Sentry (servers in the EU): error logging for the app and the server, with no account data.
- Vercel (United States): website hosting and aggregate analytics.
- Google Fonts (United States): website fonts.
- Google Cloud (Belgium, EU): server for the app and the waitlist.
- Neon (Frankfurt, EU): database.
- Cloudflare (United States): storage and delivery of audio and images.
When a provider is outside the European Economic Area, the transfer is covered by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.
5. How long we keep it
- Your account data, for as long as you keep the account. You can delete it from the app, under Profile: your account, your progress, your collection, your favorites and your votes are all deleted.
- Purchase records are kept, unlinked from your account, for the periods required by tax and accounting rules.
- Your waitlist email, until we tell you about the launch and at most 12 months after you signed up, or until you ask us to delete it.
- Analytics events, for one year.
6. Your rights
You can request access to your data, its rectification or erasure, restriction of processing, portability, and you can object to processing based on legitimate interest. Write to privacidad@nocturo.app from your account email or explaining how we can identify you. We reply within one month.
If you think we haven't handled your request properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
7.Minors
Nocturo is not aimed at anyone under 14, and we do not knowingly process their data. If you are a parent, guardian or tutor and believe a minor has given us their data, write to us and we will delete it.
8. Changes to this policy
If we change anything material, we'll announce it in the app or on the website before it takes effect. The date above shows the latest version.