Koa Privacy Policy

Effective date: September 4, 2026

Koa is a baby sleep app made by an independent developer. This page explains what Koa does with information, in plain language. The short version: nursery audio never leaves the phone, your data lives in your own Apple iCloud, and the only thing that reaches our server is what Ask Koa needs to answer you.

Nursery audio

While a sleep session runs, Koa uses the microphone to measure loudness and rhythm in the room and classify it as Quiet, Fussing, or Crying.

Only the resulting sleep states and session summaries (for example "crying for 4 minutes at 2:13am") exist after the sound has passed.

Your sleep data and iCloud

Sleep sessions, Sleep Reports, and your baby's profile (name, age, bedtime, and your onboarding answers) are stored on your device. Session status and alerts sync through your own Apple iCloud account (CloudKit) so that phones you invite can receive them. We do not run a database of your sleep data and cannot read your iCloud.

If you invite another phone with a connection link, that phone can see Koa's live status messages (such as "Crying has kept going") and receive alerts. To stop sharing, delete Koa's data from your iCloud storage in iOS Settings, or contact us and we will walk you through it.

Apple Health

If you connect Apple Health, Koa reads your sleep, resting heart rate, and heart rate variability to show you a plain-words morning read of your own recovery. This data is processed on your phone and is never persisted outside the Health screen, never synced, and never sent to any server, including ours. Koa never writes to Apple Health.

Ask Koa

When you send a question in Ask Koa, the following is sent to our server, which relays it to our AI provider (OpenAI) to generate the reply: your question and recent chat turns, your baby's first name and age, summaries of recent Sleep Reports (timings, wake-ups, settling counts, crying minutes), your stated onboarding preferences, and your self-reported morning check-in. No audio, no Apple Health data, no contact details, and no identifiers beyond what is listed are included.

Our server holds no accounts and keeps no database of your conversations; it relays requests to generate the answer, keeping request addresses briefly in memory only to limit abuse. The AI provider processes the request under its API data policies. We do not sell this data and do not use it for advertising.

Account (optional)

You can use Koa without an account. If you sign in with Apple or Google, we store your account identifier, and where provided your name and email, to keep your account connected. Google sign-in is operated through Google Firebase Authentication. You can sign out or delete your account at any time in Settings, which removes the account and its identifiers.

Purchases

Subscriptions are processed by Apple. We never see your payment details.

Notifications

Koa sends local notifications (alerts, reminders) from your device, and push notifications between your paired phones through Apple's push service carrying only Koa status messages.

Advertising and analytics

Koa contains no advertising.

Koa uses third-party tools to understand how the app is used and to fix what is broken:

None of these receive your baby's name, sleep times, health data or audio. Audio is analysed on your device and is never recorded or uploaded.

Children

Koa is made for parents and caregivers and is not directed at children. Information about your baby is entered by you and handled as described above.

Data retention and deletion

Everything Koa stores on your device is removed when you delete the app. iCloud data lives in your own iCloud account under your control. Account deletion is available in Settings. For anything else, contact us.

Contact

femdavid09@icloud.com

Changes

If this policy changes, the effective date above changes with it.