Ferber
Download

Legal

Privacy policy

Version
2.0
Effective
Last updated

Ferber has no accounts, no sign-up and no ads. Your night history and settings stay on your iPhone. The app does send a limited amount of anonymous data to a few service providers so we can understand how the app is used, fix crashes, measure our marketing and handle your purchase. None of it is linked to your name or email, none of it is used to track you across other companies' apps or websites, and we do not sell it. This policy explains the specifics.

Who this policy applies to

This policy covers Ferber (listed on the App Store as Ferber: Baby Sleep Training), an iPhone app made by Lucky Future Ltd, and the website at ferberapp.com. Lucky Future Ltd is a private limited company registered in the United Kingdom and is the controller of the data described here.

What stays on your iPhone

The following is stored only in the app's local storage on your phone. We do not receive it:

  • Your baby's name, if you choose to add one. It is optional and is never shown on the Lock Screen, the widget, Live Activities or notifications.
  • Your baby's age and the sleep challenges you picked (a summary of these is also sent as analytics, see below).
  • Each night's history: intervals, check-ins and timings.
  • Your settings, including interval, haptic, reminder and notification preferences.

Notifications, including the optional bedtime reminder and check-in alerts, are scheduled locally on your device. Your iPhone's standard iCloud or computer backup may include the app's data, protected by your Apple ID. We do not have access to it.

What the app sends, and to whom

The app does not collect your name, email, phone number, contacts, precise location, or your device's advertising identifier (IDFA). It does not show Apple's "Allow tracking" prompt because it does not track you in Apple's sense of the word. The app generates a random install ID when it is first opened. This ID is not tied to your identity and is reset if you delete and reinstall the app.

Product analytics: PostHog

PostHog Inc. (USA, US-hosted cloud) helps us understand how the app is used so we can improve it. It receives:

  • The random install ID.
  • In-app events, such as screens viewed, onboarding steps, night started or completed, check-ins reached, night number and duration, paywall viewed, and purchase started, completed or failed (with price and currency).
  • Your baby's age bracket (for example, "6 to 8 months") and the sleep challenges you picked.
  • Device model, iOS version and app version.
  • Approximate location (country and city) derived from your IP address.

PostHog does not receive your baby's name. We do not use session recording.

Crash and error reports: Sentry

Functional Software Inc., trading as Sentry (USA), receives a report if the app crashes or hits an error: the stack trace, device model, iOS version, app version and the random install ID. Sending personal information is switched off, and reports do not contain your baby's name or your night history.

Install attribution: AppsFlyer

AppsFlyer Ltd. (Israel and USA) tells us whether an ad campaign, if any, led to an install, and measures purchases for campaign reporting. It uses Apple's privacy-preserving SKAdNetwork, plus the random install ID, device and iOS information, and your IP address. The app does not collect the advertising identifier (IDFA).

Purchases: RevenueCat and Apple

RevenueCat Inc. (USA) manages the one-time in-app purchase for us. It receives App Store receipt and transaction data, your purchase history for Ferber, an anonymous app user ID, and the PostHog and AppsFlyer anonymous IDs so a purchase can be matched to analytics and campaign reporting.

Apple processes your payment. We never see your card details, billing address or the email address on your Apple ID. Apple also provides the App Store and delivers notifications to your device. Apple's own privacy policy covers what Apple does with that information.

What the website collects

ferberapp.com is hosted on Cloudflare and uses Cloudflare Web Analytics, which is cookie-free and does not track individuals. We see aggregate page-view counts and referrer information. We do not run Google Analytics, Facebook Pixel, or any other cross-site tracker on the site.

The site does not use cookies for tracking. Some standard server-set cookies may appear briefly during a page load (Cloudflare's bot-check cookie, for example), but no cookie is used to identify you across pages or sessions for analytics or advertising.

What we do not do

  • We do not sell your data.
  • We do not show ads in the app, and the website contains no ad scripts.
  • We do not track you across other companies' apps or websites, and we do not collect the advertising identifier (IDFA).
  • We do not link the app's data to your identity. We never ask for your name or email in the app.
  • We do not use your night history to train AI models. We never receive it.

Why we use this data (legal bases)

  • Product analytics, crash reporting and install attribution: our legitimate interests in keeping the app working, understanding which parts help parents, and knowing which of our marketing is worth doing. We keep this data anonymous and limited to protect your interests.
  • Purchases and restores: performance of our contract with you, so the program you bought is unlocked and stays unlocked.
  • Support email: our legitimate interest in answering you, and your request.

How long we keep it

Analytics, crash reports and attribution data are kept only as long as needed for the purposes above, then deleted or aggregated so they no longer relate to an install. Purchase records are kept as long as needed to keep your purchase working and to meet accounting and legal requirements. Data on your phone stays until you delete the app.

Email correspondence

If you email [email protected], [email protected], [email protected], or [email protected], we receive the email and store the conversation in our help-desk software (Help Scout). Older threads are deleted on a rolling basis. To delete a thread sooner, reply and ask.

Children's data

Ferber is about your baby, but it is used by parents and caregivers. We do not knowingly collect personal information from children. The only information about your baby that leaves your phone is the age bracket and the sleep challenges you picked, sent as anonymous analytics. Your baby's name, if you add one, never leaves your phone. If you have a concern, contact [email protected].

Your rights and choices

Under UK GDPR, EU GDPR, the California Consumer Privacy Act, and similar laws, you may have rights to access, correct, delete, or object to the processing of personal information about you.

  • Data on your phone. You can edit your baby's name, age and settings in the app. Deleting the app deletes all of it.
  • Analytics and crash data. Analytics are on by default, and there is currently no in-app switch to turn them off. Deleting the app stops all collection. To ask a question, object, or request deletion, email [email protected]. Because this data is keyed to a random install ID rather than your name or email, we may need that install ID (or the approximate date you installed and your device model) to find the records.
  • Purchase data. Apple holds your payment details. For purchase records held by RevenueCat, email us and we will help.
  • Email correspondence. Reply to any thread asking for deletion.

You also have the right to complain to a data protection authority. In the UK, that is the Information Commissioner's Office (ico.org.uk).

Where data is processed

  • App data: on your iPhone.
  • Product analytics: PostHog, USA.
  • Crash reports: Sentry, USA.
  • Install attribution: AppsFlyer, Israel and USA.
  • Purchases: RevenueCat, USA, and Apple.
  • Website hosting and analytics: Cloudflare global network.
  • Email: Help Scout, USA.

Where data is transferred outside the UK or EU, we rely on appropriate safeguards such as standard contractual clauses, the UK International Data Transfer Addendum, or an adequacy decision.

Security

On-device data is protected by your phone's encryption. Data sent to our service providers is transmitted over TLS. We do not run our own database of users, and we do not hold names, emails or payment details from the app.

Changes to this policy

If we make a material change (a new service provider, a new category of data, or a change in how we use it), we will update this page, the version number and the date above before the change takes effect.

Contact

Privacy questions: [email protected]. Postal address on request: Lucky Future Ltd, registered in England and Wales.