Baa

legal

Privacy Policy

Baa is built so your sleep stays yours. This policy explains exactly what the app stores, what leaves your phone, and why.

Updated 2026-09-28

This Privacy Policy applies to the Baa iPhone app and this website, operated by Ant Intellect (“we”, “us”). Questions: khangruni@gmail.com.

The short version

  • Your nights, morning check-ins, notes, clues, experiments and learnings are stored on your iPhone.
  • Apple Health access is read-only (sleep only). Health data never leaves your phone and is never used for advertising or sold.
  • We don't ask for your name, email or phone number to use the app. You get an anonymous account ID.
  • We use a few service providers for analytics, crash reports and subscriptions. They receive anonymous usage events and subscription status — never your sleep times, durations or notes.
  • You can delete everything on your phone in one tap, and ask us to delete the anonymous record held by our providers.

1. Data stored only on your iPhone

The app keeps the following in its private storage on your device: the nights you log or import (bedtime, sleep start, wake time, duration, time in bed, awakenings), your morning check-ins and optional tags, the factors, wake reasons and notes you add, your investigation, clues, experiments and learnings (your “Sleep Playbook”), your onboarding answers, and your reminder settings. This data is not uploaded to our servers. If you delete the app or use Settings → Delete all sleep data, it is erased. Because it is stored only on your device, it is not backed up by us and does not move to a new phone.

2. Apple Health

If you choose to connect Apple Health, Baa requests read-only access to Sleep Analysis. The app reads sleep samples to build your nightly records on your device. We never write to Apple Health, never send Health data to our servers or any third party, and never use it for advertising, marketing or data mining. You can revoke access any time in the iPhone Settings app → Health → Data Access & Devices.

3. Data that leaves your phone

We use the following service providers. Each receives only what is listed:

Google Firebase (Authentication, Firestore, Analytics, Crashlytics, Remote Config)

  • Anonymous account. A random account ID is created when you first open the app. It is not linked to your name or email.
  • Account record. Stored under that ID: install date, first-open time, when you finished onboarding, which version of our A/B tests you see, whether you have Premium (plan, renewal and expiry dates, and the store), and simple counters (number of nights logged, check-ins, and learnings). No sleep times, durations or notes.
  • Usage analytics. Events about how the app is used, such as screens viewed, the option you chose during onboarding (for example “I wake up tired”), which morning feeling you tapped, which factor you logged (for example “caffeine after 2 PM: yes”), experiments started or finished, and paywall views and purchases. Events never include sleep times, durations or free-text notes. Analytics also receives standard device information (device model, OS version, language, approximate country).
  • Crash reports (Crashlytics): technical details about crashes to help us fix bugs.
  • Remote Config: used to assign A/B test variants (for example, which onboarding or paywall version you see).

RevenueCat

Processes in-app purchases on our behalf. It receives your anonymous account ID, your purchase and subscription history from the App Store, and the A/B test variant you saw on the paywall. Payment details are handled entirely by Apple; we never see your card.

Attribution and advertising (only with your permission)

The app may include Adjust and Meta (Facebook) SDKs to measure whether our ads lead to installs and purchases. On iPhone, these only use the advertising identifier if you allow tracking in Apple's App Tracking Transparency prompt. If you choose “Ask App Not to Track”, no tracking takes place. Health and sleep data are never shared with these partners.

Apple

Purchases, subscriptions and refunds are processed by Apple under Apple's privacy policy. Reminders are local notifications scheduled on your device; we do not use a push notification server.

4. This website

This site is hosted on Netlify, which keeps standard server logs (such as IP address and browser) for security and reliability. Fonts are loaded from Google Fonts. We do not run advertising trackers on this site.

5. Why we use data (legal bases)

  • To provide the app and your purchases (performance of a contract).
  • To understand and improve the app, fix crashes, and run A/B tests (our legitimate interests).
  • For ad attribution, only with your consent (App Tracking Transparency).

We do not sell your personal information and do not use your data for profiling or automated decisions about you.

6. How long we keep data

On-device data stays until you delete it or the app. The anonymous account record and analytics are kept while you use the app and deleted on request; analytics data is retained according to our providers' standard retention settings (by default up to 14 months for Firebase Analytics).

7. Your choices and rights

  • Delete on-device data: Settings → Delete all sleep data in the app.
  • Revoke Apple Health access, notifications or tracking permission in the iPhone Settings app.
  • Request access to, or deletion of, the anonymous account record: email khangruni@gmail.com. Depending on where you live (for example under the GDPR or CCPA), you may also have rights to correct, restrict, or object to processing, and to complain to your data protection authority.

8. International transfers

Our service providers may process data in the United States and other countries, under safeguards such as standard contractual clauses.

9. Children

Baa is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their data. If you believe a child has used the app, contact us and we will delete the related record.

10. Security

Data on your phone is protected by iOS. Data sent to our providers is encrypted in transit. No method is perfectly secure, but we collect as little as possible so there is little to protect.

11. Changes

If we change this policy, we will update the date above and, for significant changes, tell you in the app.

12. Contact

Ant Intellect · khangruni@gmail.com