Privacy Policy

TL;DR

We collect only what’s needed to run Winkle and improve it. We never sell your data.

1. Who We Are

Winkle is operated by Winkle Sleep, LLC, based in New York, USA.

Under the GDPR, Winkle Sleep, LLC is the data controller for your personal data.

Questions? Contact us.

2. Information We Collect

• Account details: Your email address (for login via Firebase Authentication).
• Child details: First name and date of birth (to provide age-based insights).
• Event data: Sleep and meal events you track in the app.
• Analytics data: Usage analytics (via Google Analytics) to help us improve performance. We analyze this in an anonymized or aggregated way.

3. How We Use Your Information

• Provide insights about your child’s sleep and meals.
• Keep your account secure and the app functional.
• Improve Winkle by analyzing anonymized trends.

Legal bases (GDPR): performance of a contract (running the app); your consent (analytics); our legitimate interest in improving performance and security.

4. Sharing of Information

We do not sell or trade your personal data.

We use trusted third-party processors to operate the app:

• Google Firebase (authentication & data storage; Firestore in the “nam5” US region).
• Google Analytics (usage analytics in anonymized/aggregated form).

These providers may process data in the United States. For transfers from the EEA/UK, Google makes use of Standard Contractual Clauses (SCCs) approved by the European Commission to safeguard international data transfers.

5. Data Security

We use industry-standard security measures. Firebase Authentication and Firestore apply encryption and strict security controls to help protect your data from unauthorized access, alteration, disclosure, or destruction.

6. Data Retention

We keep your personal data for as long as you maintain an account. When you delete your account (in Settings), your personal data is deleted. We may retain anonymized, aggregated data to help improve the app.

7. Your Rights

Under GDPR, you can:

• Access the data we hold about you.
• Request correction or deletion of your data.
• Restrict or object to certain processing.
• Request a copy of your data (data portability).
• Withdraw consent at any time (for example, for analytics).
• Lodge a complaint with your local data protection authority.

To exercise these rights, delete your account in the app’s Settings or contact us. If you wish to withdraw consent for analytics, contact us and we’ll assist.

8. Children’s Data

We collect a child’s first name and date of birth only to provide age-appropriate guidance. This information is provided by parents or legal guardians—not directly by children.

9. Consent & Account Deletion

By using Winkle, you consent to this Privacy Policy. You can withdraw consent for analytics and/or delete your account and associated data at any time. For help, please contact us.

10. Changes to This Policy

We may update this policy from time to time. We’ll post changes here and update the “Last updated” date above. If changes are significant, we’ll notify you in the app where appropriate.