Privacy

The short version: nothing about you leaves your phone.

Last updated 2 October 2026

No account, no sign-up

Niente has no login and no user accounts. There is nothing for us to know you by, because there is no us — the app runs entirely on your device.

No network

The app never contacts a server to work. Every sound, every picture and every spoken session is inside the app itself. It works in airplane mode, and it works in ten years if nobody keeps a service running. The one exception is the anonymous count described below, and it only happens if you switch it on. Buying, subscribing and restoring talk to the App Store, through Apple’s own system on your phone — see Purchases.

What stays on your phone

Your mixes, your favourites, the timer you prefer, when your sessions usually start, and whether the full version is open — by trial, subscription or purchase, and for a subscription, until when. All of it is a file in the app’s own folder. Deleting the app deletes it.

Reminders

If you allow them, reminders are scheduled by the app itself, on your device. There is no push server and no push token — nobody outside your phone knows one was sent, or whether you opened it.

Purchases

Purchase and subscription run through the App Store. Apple tells the app whether the full version is open and, for the subscription, until when — nothing else. We never see your name, your payment details or your Apple Account.

Apple processes the payment and is your contracting party for it (see the imprint); Apple’s privacy policy applies to it. The app receives the signed transaction and checks it on the device.

Separately, Apple sends our server a signed notice for every purchase and subscription event (start, renewal, cancellation, refund) — the App Store Server Notifications. Your phone is not involved. Of it we keep the kind of notice, the plan, whether an offer such as the free week applied, the country of the App Store, price and currency, which version of the intro or purchase screen was shown, and the time rounded to the hour. The transaction numbers Apple includes are discarded on arrival; your name, your Apple Account and your payment details are not in it to begin with. It is stored on the same server as the count below.

Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is knowing how free weeks, subscriptions and purchases develop and which purchase screen is clearer. Because nothing in it leads back to you afterwards, a single notice can neither be found nor deleted later.

Usage statistics inside the app

The app keeps a local count of what happens inside it — “finished the intro”, “a session ran to the end”. That count carries no identifier of any kind: no device ID, no install ID, not even a session key. Times are rounded to the hour, and the event names come from a closed list built into the app: no free text can ever leave it.

Since version 1.4 that list also includes your answers in the intro: which goals you picked, your bedtime as a rough band (before 10, before 11, later, or “it varies”), and what you said keeps you awake at night — thoughts, noise from outside, snoring, waking up, lying awake. Each answer is counted on its own, never as a combination and without any identifier, so it says how many people chose “waking up”, never who did.

Since version 1.3 that list includes purchase events: a purchase or subscription was started, completed, cancelled or restored, the free week turned into a subscription, a subscription ran out, and which of two versions of the purchase screen this installation was shown (drawn at random on the phone). These events carry no amount, no product receipt and no transaction number. They answer questions like “how many who start the free week stay”, never “did this person pay”.

Nothing is sent unless you say yes. The app asks once during the intro, right after the first taste of sound — if you skip it there, it asks once more on Tonight — and the answer can be changed at any time under “Settings › Privacy”. With sharing off, the count stays on the device. With it on, the same events go to a server we run ourselves (Aptabase, self-hosted, on the machine described under Hosting) — not to an advertising network and not to an analytics company.

Even then nothing identifies you. There is no identifier in the data, and the client IP address is replaced with a fixed placeholder before the receiving software ever sees it, so it cannot group events by sender either. Each event also carries the app version, the iOS version and the language setting — not the device model. Under “Settings › Privacy” you can see everything that was counted, and erase it.

Legal basis: Art. 6 (1) (a) GDPR — your consent. Withdrawing it stops any further sending immediately. Because the data contains nothing that points back to you, there is nothing that could be retrieved or deleted afterwards on our side.

Children

The app collects no personal data. The anonymous count only runs if you switch it on, and nothing in it points to a person — so the app is as safe for a child as for anyone.

This website

These pages are static: no fonts, no third-party resources, no form, nothing to type in. We do count visits, with Rybbit — open-source software running on our own server, described under Hosting. It sets no cookies and stores nothing on your device, so there is no consent banner to click away.

What it records is the page you opened, the referring site, and coarse information such as browser, operating system, screen size and country. To tell one visit from another without cookies, it derives a daily value from your IP address and browser identification; that value is salted, the salt is replaced every day, and the IP address itself is not stored. Nothing here is linked to what happens inside the app.

Shared mixes. When someone shares a mix from the app, they send a link to niente.duplia.app/mix/. The mix itself sits after the “#” in that link — the part a browser never sends to a server. It therefore appears neither in the server logs nor in the visit count, and that page is not counted at all; it reads the mix on your device and shows it there.

Legal basis: Art. 6 (1) (f) GDPR; our legitimate interest is knowing whether these pages do their job. You can object at any time using the address below, or by enabling “Do Not Track” in your browser, which this setup respects.

Hosting and server logs

The website runs on our own server at Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany. When you open a page, the web server processes technically necessary data: IP address, date and time of the request, the page requested, the amount of data transferred, browser type and operating system. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and stable operation of the site. Log data is deleted after a short time and is not combined with any other data.

Your rights

In the app, no personal data is processed, and Apple’s purchase notices are reduced to a count on arrival — so there is nothing to request, correct or delete on our side. What is on your device you can erase yourself, at any time, by removing the app.

For purchases and subscriptions, the payment data lies with Apple, not with us. You can see and request it through your Apple Account, for instance at privacy.apple.com.

On this website, processing is limited to the server logs and the visit count described above. For those you have the rights under Art. 15 to 21 GDPR: access, rectification, erasure, restriction, portability and objection. An informal message to hello@duplia.app is enough. You may also lodge a complaint with a data protection authority; ours is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Germany.

Changes

We update this statement whenever the app or the website changes. The version published here is the one that applies. The same text is inside the app under “Settings › Privacy”, readable without a network connection.

Controller

Full provider identification in the imprint.