Privacy Policy

Last updated: June 19, 2026

Your privacy matters to us. This policy explains what data Nagisa collects, how it is used, and your rights as a subscriber.

1. Who We Are

Nagisa is a sleep and wellness audio application operated by an independent developer based in Nairobi, Kenya. For privacy questions or data requests, contact nagisa.support@gmail.com or visit our Contact page.

2. Account Creation & Authentication

Nagisa does not use traditional passwords. Your account is created automatically when you subscribe through Paddle using your email address. To sign in on a new device, you enter that same email; we verify it in real time against Paddle's records and grant access only if an active or trialing subscription exists.

We maintain a device registry (up to 3 devices per account) to manage sign-in sessions. Device identifiers are stored server-side only for access control — not for advertising or profiling.

3. Paddle as Merchant of Record

Paddle is our authorised reseller and acts as the Merchant of Record for all Nagisa transactions. This means:

All payment data (card numbers, billing addresses) is collected and stored exclusively by Paddle. We never see or store your payment details.
Paddle is independently responsible for payment security and PCI-DSS compliance.
Paddle processes your personal data under their own Privacy Policy: paddle.com/legal/privacy.
Charges appear on your bank statement as "Paddle" or "Paddle.net".

4. What Nagisa Collects

We collect the minimum data necessary to provide the service. From Paddle, after a completed purchase, we receive:

Email address — to identify your subscription and allow sign-in on any device.
Paddle Customer ID — a unique reference for subscription management via the Paddle customer portal.
Subscription status and next billing date — to verify your access on each app session.

We do not collect your name, postal address, card details, or payment information. We do not run third-party advertising trackers or behavioural profiling.

5. Audio Usage & Sleep Session Data

Nagisa records listening activity locally on your device to power features such as favourites, listening history, play counts, daily listening duration, weekly session counts, and the weekly review. This includes:

Which soundscapes you play and how often.
Session dates and approximate listening duration.
Your favourite tracks and offline download preferences.
Timer and playback settings.

This data is stored exclusively in your browser's localStorage. It never leaves your device and is never transmitted to our servers. There is currently no cross-device sync.

6. Analytics

Nagisa does not use third-party analytics services (such as Google Analytics, Mixpanel, or similar). We do not track page views, user journeys, or behavioural patterns. Server logs on Vercel may temporarily record technical request data (IP address, user agent) for security and debugging, in accordance with Vercel's Privacy Policy.

7. Cookies & Local Storage

Nagisa uses localStorage to store your subscription access token, favourites, listening history, and preferences on your device. This is essential for the app to function, including offline playback.

We do not use tracking or advertising cookies. Paddle's checkout overlay may set session cookies strictly necessary to complete payment; these are governed by Paddle's Privacy Policy.

You can delete locally stored data at any time by clearing your browser's site data for nagisa-app-lac.vercel.app. Signing out clears only your access token, not your listening history.

8. How We Use Your Data

To verify your subscription is active on each app load.
To allow sign-in on up to 3 devices and maintain the device registry.
To provide access to the Paddle Customer Portal for subscription management.
To respond to support, refund, or account enquiries.

We do not sell your data, run advertising, build user profiles, or share your data with any third party other than Paddle (for subscription purposes) and Cloudflare (for audio delivery).

Third-party processors

Paddle — payment processing as Merchant of Record. Paddle's Privacy Policy.
Vercel — hosts the Nagisa web application and serverless functions. Vercel's Privacy Policy.
Cloudflare — delivers audio tracks from R2 object storage. Cloudflare's Privacy Policy.

9. Data Retention

We retain your email address and subscription reference for as long as your subscription is active, and for a reasonable period thereafter for accounting and legal compliance.

Listening data is stored solely on your device. We hold no server-side copy. You control deletion by clearing browser site data.

10. Your Rights

Depending on your location, you may have rights under applicable privacy laws (including GDPR for EU/UK residents and CCPA for California residents):

Right to access the personal data we hold about you.
Right to correct inaccurate data.
Right to erasure ("right to be forgotten").
Right to restrict or object to processing.
Right to data portability.

To exercise these rights regarding data Nagisa holds, email nagisa.support@gmail.com. For data held by Paddle, contact Paddle via their privacy policy page.

11. Data Security

All communication between your device, our servers, and Paddle is encrypted via HTTPS. Subscription verification is performed in real time via Paddle's API. Listening data never leaves your device. We apply data minimisation — collecting only what is strictly necessary.

12. Children's Privacy

Nagisa is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us immediately and we will delete it.

13. Changes to This Policy

We may update this policy from time to time. The "Last updated" date reflects the most recent revision. Continued use after changes constitutes acceptance of the updated policy.

Questions? Email nagisa.support@gmail.com or visit Contact.