PRIVACY POLICY
Last updated: 11th February 2026
Imago Creative Pty Ltd ("we", "us", "our") respects your right to privacy and is committed to safeguarding the privacy of our customers and Application users. We adhere to the Australian Privacy Principles established by the Privacy Act 1988 (Cth). This policy sets out how we collect and treat your personal information.
This Privacy Policy applies when you:
- Visit our Website at https://www.nappeace.com
- Download and use our mobile Application (Nap Peace)
- Engage with us in other related ways, including customer support
1. ABOUT THIS POLICY
1.1 Definitions
Personal information means information we hold which is identifiable as being about you. This includes information such as your name, email address, and any data you enter about your child.
Sensitive information includes health-related information. Information about your child's sleep patterns, first name, and birth date may be considered sensitive information and is treated with enhanced care.
1.2 Applicable Laws
This policy is designed to comply with:
- Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) — applicable to all users.
- General Data Protection Regulation (GDPR) — applicable to users in the European Economic Area (EEA).
- California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) — applicable to California residents.
2. INFORMATION WE COLLECT
2.1 Information You Provide
When you use Nap Peace, we may collect the following information that you voluntarily provide:
Account Information:
- Name
- Email address
- Password (stored securely in encrypted form)
Child/Baby Information, including but not limited to:
- Your child's first name or nickname
- Your child's date of birth
- Sleep patterns (sleep times, wake times, nap durations)
- Time of last feeding
- Time of last diaper change
Important: All information about your child is collected with your consent as the parent or legal guardian. This information is used solely to provide the app's functionality and is treated with the highest level of care.
2.2 Information Collected Automatically
When you use our application, we may automatically collect:
Device Information:
- Device type, model, and manufacturer
- Operating system and version
- Unique device identifiers
- IP address
Usage Information:
- App usage patterns and feature interactions
- Error reports and diagnostic information
- Time and date of access
Location Information:
- We may collect general location information (such as country or city) based on your IP address to determine your timezone
- We do not collect precise GPS location unless you explicitly enable this feature
2.3 Push Notifications
We may request permission to send push notifications regarding your account or App features (such as sleep reminders). You may opt out at any time through your device settings.
3. HOW WE USE YOUR INFORMATION
We use the information we collect to:
| Purpose | Lawful Basis (GDPR) | APP Reference |
|---|---|---|
| Provide, maintain, and improve the app | Performance of contract | APP 6.1 |
| Create and manage your account | Performance of contract | APP 6.1 |
| Provide sleep tracking and scheduling features | Performance of contract | APP 6.1 |
| Generate personalised insights and recommendations | Consent | APP 6.1 |
| Respond to your enquiries and provide support | Performance of contract | APP 6.1 |
| Send administrative communications (e.g., policy updates) | Legal obligation | APP 6.2(b) |
| Send marketing communications (with your consent) | Consent | APP 6.1 |
| Analyse usage to improve our services | Legitimate interest | APP 6.1 |
| Comply with legal obligations | Legal obligation | APP 6.2(b) |
4. DISCLOSURE OF YOUR INFORMATION
4.1 Third-Party Service Providers
We may disclose your personal information to third-party service providers who assist us in operating the app, including:
- Cloud hosting and data storage providers
- Authentication service providers
- Analytics services
- Customer support tools
- Payment processors (for subscription management)
These service providers are contractually obligated to:
- Enter into Data Processing Agreements (DPAs) with us where required by applicable law
- Use your information only for the purposes of providing services to us
- Maintain appropriate security measures
- Not disclose your information to other parties
4.2 Legal Requirements
We may disclose your personal information if required to do so by law, including:
- To comply with a legal obligation, such as a court order, subpoena, or warrant
- To cooperate with law enforcement or regulatory agencies
- To protect our legal rights, property, or safety, or that of our users or the public
4.3 Business Transfers
If we undergo a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and ensure the receiving party is bound by this Privacy Policy or a substantially similar policy.
4.4 With Your Consent
We may share your information with third parties when you have provided explicit consent to do so.
5. INTERNATIONAL DATA TRANSFERS
5.1 General
Our servers may be located in countries outside of Australia, including the United States. Your personal information may be transferred to, stored, and processed in these countries.
5.2 Transfers from Australia
Where we transfer personal information outside of Australia, we take reasonable steps to ensure that the overseas recipient handles your information in accordance with the Australian Privacy Principles (APP 8).
5.3 Transfers from the EEA
For users in the European Economic Area, we ensure that any transfer of personal data outside the EEA is protected by:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Other appropriate safeguards as required by GDPR
6. DATA RETENTION
We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
| Data Category | Retention Period |
|---|---|
| Account information | Duration of account + 2 years after deletion (retained for fraud prevention, legal claims, and regulatory compliance) |
| Child/baby data | Duration of account; deleted upon account closure |
| Usage and analytics data | 2 years from collection |
| Support correspondence | 3 years from last interaction |
When you delete your account:
- Your personal data and child data will be deleted from our active systems within 30 days
- Archived backups may retain data for up to 90 days before permanent deletion
- Anonymised, aggregated data may be retained indefinitely for research and improvement purposes
7. DATA SECURITY
7.1 Security Measures
We are committed to ensuring that your information is secure. We have implemented appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect, including:
- Encryption of data in transit and at rest
- Secure authentication mechanisms
- Regular security assessments
- Access controls limiting personnel access to personal information
7.2 Your Responsibilities
The security of your account also depends on you. Please:
- Keep your password confidential
- Use a strong, unique password
- Log out of your account when using shared devices
- Notify us immediately if you suspect unauthorised access to your account
7.3 Data Breach Notification
In accordance with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988, if we become aware of a data breach that is likely to result in serious harm to you, we will:
- Notify the Office of the Australian Information Commissioner (OAIC)
- Notify affected individuals as soon as practicable
8. CHILDREN'S PRIVACY
8.1 Purpose of Child Data Collection
Nap Peace is designed to help parents and guardians track their baby's sleep patterns and related activities. To provide this service, we collect information about your child that you voluntarily provide.
8.2 Parental Consent
By using Nap Peace and entering information about your child, you confirm that:
- You are the parent or legal guardian of the child
- You consent to the collection and processing of your child's information as described in this policy
- You understand that this information is used solely to provide the app's functionality
8.3 Data Minimisation
We only collect child data that is necessary to provide the app's features. We do not:
- Collect information directly from children
- Share identifiable child data with third parties for marketing purposes
- Use child data for purposes unrelated to the app's functionality
8.4 Age Restrictions
We do not knowingly collect personal information from children under the age of 16 acting on their own behalf. If we become aware that a child under 16 has provided us with personal information without parental consent, we will take steps to delete such information.
9. YOUR PRIVACY RIGHTS
9.1 Rights Under Australian Law (Privacy Act 1988)
Under the Australian Privacy Principles, you have the right to:
- Access — Request access to personal information we hold about you (APP 12)
- Correction — Request correction of inaccurate or incomplete personal information (APP 13)
To exercise these rights, please contact us using the details in Section 12. A small administrative fee may be payable for access requests in certain circumstances.
We reserve the right to refuse access or correction in circumstances permitted by the Privacy Act 1988, such as where it would unreasonably impact the privacy of others.
9.2 Rights Under GDPR (EEA Users)
If you are located in the European Economic Area, you have additional rights including:
- Right of Access — Obtain a copy of your personal data (Art. 15)
- Right to Rectification — Correct inaccurate personal data (Art. 16)
- Right to Erasure — Request deletion of your personal data ("right to be forgotten") (Art. 17)
- Right to Restriction — Request restriction of processing in certain circumstances (Art. 18)
- Right to Data Portability — Receive your data in a structured, machine-readable format (Art. 20)
- Right to Object — Object to processing based on legitimate interests or direct marketing (Art. 21)
- Right to Withdraw Consent — Where processing is based on consent, withdraw at any time (Art. 7)
9.3 Rights Under CCPA/CPRA (California Residents)
If you are a California resident, you have the right to:
- Right to Know — Know what personal information we collect, use, and disclose
- Right to Access — Request a copy of your personal information
- Right to Delete — Request deletion of your personal information
- Right to Correct — Request correction of inaccurate personal information
- Right to Opt-Out — Opt-out of the sale or sharing of personal information
- Right to Non-Discrimination — Not be discriminated against for exercising your rights
California Disclosure: We do not sell your personal information.
9.4 How to Exercise Your Rights
To exercise any of your privacy rights:
- In-App: Use the account settings within the Nap Peace app
- Email: Contact us at hello@nappeace.com
- Mail: Write to us at the address in Section 12
We will respond to your request within:
- 30 days (Australian and EEA requests)
- 45 days (California requests)
We may request verification of your identity before processing your request.
10. COOKIES AND TRACKING
10.1 Mobile Application
The Nap Peace mobile Application may use local storage and similar technologies to:
- Remember your preferences
- Maintain your session
- Improve Application performance
10.2 Website
Our website may use cookies to:
- Enable website functionality
- Analyse website traffic
- Remember your preferences
You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality.
10.3 Do Not Track
Our mobile Application tracks your usage within the Application to provide personalised features and improve our services. This tracking is essential to the Application's functionality. We do not currently respond to "Do Not Track" browser signals.
11. COMPLAINTS
11.1 How to Complain
If you have any complaints about our privacy practices, please contact us first using the details in Section 12. We take complaints seriously and will respond within 30 days.
11.2 Australian Users — OAIC
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
11.3 EEA Users — Data Protection Authority
If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority. Contact details for EEA data protection authorities can be found at: https://edpb.europa.eu/about-edpb/board/members_en
12. CONTACT US
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Imago Creative Pty Ltd ACN: 694 572 999
- Email: hello@nappeace.com
- Website: https://www.nappeace.com
- Mail: 1 Kapok Ct Parkwood WA 6147 Australia
For EEA Users: If you are located in the European Economic Area and have questions about how your data is processed, please contact us at the email address above. As an Australian-based company, we are not required to appoint an EU Representative under GDPR Article 27 unless we regularly and systematically monitor, or process special categories of data of, EEA individuals on a large scale. We will appoint a representative if and when required by applicable law.
13. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our website
- Sending an email notification (for material changes)
Your continued use of the app after changes are posted constitutes acceptance of the updated policy.
The "Last updated" date at the top of this policy indicates when it was last revised.
14. OPT-OUT
You can stop all collection of information by the application by uninstalling it using the standard uninstall process on your device. You may also request opt-out or account deletion via email at hello@nappeace.com.