Quiet nights.
Quiet data.

Who we are

This policy covers the shsh iPhone app and this website, shsh.ksak.app. shsh is made by Raf Tadevosyan IE, who is responsible for the personal information described here ("we", "us"). Contact us at support@raftad.com with any privacy question or request.

shsh is available on the App Store in many countries. This policy applies wherever you use it. Some sections describe rights that apply only under the laws of certain places.

What stays on your phone

shsh stores these in the app's private storage on your iPhone, and nowhere else:

• Your sound settings: the sounds you play, their volumes, your timer and fade-out choices, and the mixes you save, with the names you give them.
• Your answers during setup and app settings, such as cry detection sensitivity.
• The evenings you used shsh, kept as dates only, so shsh can choose a good moment for a reminder or a rating request.

shsh may read your battery level on the phone to suggest plugging in before a night of listening. It isn't sent anywhere. If you back up your iPhone to iCloud or a computer, iOS may include shsh's data according to your Apple settings.

Cry detection

Cry detection is part of Plus. It only works after you allow microphone access, and only while shsh shows that it's listening. iOS displays its microphone indicator during that time.

While listening, shsh passes the live microphone sound to Apple's sound classifier, which runs entirely on your iPhone and recognises the sound of crying. The sound is analysed in memory and then discarded. shsh never records, stores or sends audio, to us or anyone else. The only thing shsh keeps from listening is the fact that crying was heard, and when.

When crying is heard, shsh can play your sound again and, if you linked phones, alert them, as described next.

Linked phones

Linking is optional. It lets the phone near your baby alert another phone, for example a partner's, when crying is heard. Linked phones talk through the shsh server, which we run for this purpose only. If you never link phones, shsh doesn't contact our server.

When you link phones, our server stores:

• For each phone: a random ID with a secret key (stored only as a hash), the name you give the phone (such as "Nursery" or a first name), its Apple push token so alerts can reach it, which household it belongs to, and when it last connected.
• For the household: what the phone near your baby is doing (playing, listening, or soothing after crying), the name of the sound or mix it's playing, when its timer ends and since when it's been listening.
• Events: when crying was heard, when someone tapped "I'm on it", and when sound started, stopped or its timer ended, each with its time and the phone that sent it.
• Link codes: the 6-digit code you share to link a phone. It works for 10 minutes and is deleted within a day.

Every phone in a household can see its members' names, the current status and that night's events. The server doesn't store IP addresses. It uses them briefly, in memory, to limit abuse such as repeated sign-ups or guessed codes. The server is hosted by netcup in Germany, and connections to it use HTTPS.

Notifications

Crying alerts and other messages between linked phones are delivered by the Apple Push Notification service. Apple receives the notification text, such as the phone's name and the time crying was heard, to deliver it. Alerts may appear on the lock screen. You can hide previews or turn them off in Settings → Notifications on your iPhone.

If you start a free trial, shsh schedules a reminder on your phone two days before it ends. That reminder is created and delivered on your phone, without our server.

Subscriptions and purchases

Apple processes every payment through your Apple Account. We never receive your card details or Apple Account password. One Plus subscription covers the whole household: linked phones don't need their own.

RevenueCat helps shsh check whether your subscription is active, restore it on a new phone, offer returning subscribers a discount, and show us subscription reports. It processes:

• a random, anonymous customer ID created by shsh
• Apple transaction and subscription details: product, price and currency, storefront country, trial, purchase, renewal, cancellation and refund dates, and whether a purchase was a test
• app version, iOS version, device model and the technical details of the connection, such as IP address

RevenueCat never receives your mixes, phone names or cry events, and we don't connect the anonymous ID to them. We use subscription information to provide the subscription you bought, restore access, fix billing problems, prevent misuse, and understand sales, renewals and refunds.

Deleting shsh doesn't cancel your subscription and doesn't delete records held by Apple or RevenueCat. See Apple's privacy policy and RevenueCat's privacy policy.

No analytics in the app

shsh contains no analytics, crash reporting or advertising tools. After a few nights, shsh may show Apple's own rating prompt, which Apple handles. If you chose to share analytics with app developers in your iPhone's settings, Apple may send us crash reports and usage statistics that don't identify you.

Support and this website

When you email us, we receive your email address and whatever you send. We use it to answer you, and keep the conversation for as long as needed to resolve it and handle any follow-up.

This website has no cookies, no analytics, no advertising and no forms. Fonts and images are served from this site. Our hosting provider processes standard request information, including IP address and browser details, to deliver the pages and protect them from abuse.

Service providers and international transfers

These providers act on our behalf or under their own terms, and some may process information in the United States and other countries. Where the law requires it, they use recognised safeguards for international transfers, such as standard contractual clauses or adequacy decisions. Contact us to ask about the safeguards relevant to you.

We don't sell your personal information, and we don't share it for targeted advertising. We may disclose information we hold if the law requires it, or to deal with fraud or a security problem.

How long information is kept

Your choices

• Microphone: cry detection only starts after you allow it. Turn microphone access off any time in Settings → shsh. Sound still plays without it.
• Linked phones: link phones only if you want alerts. In Profile → Linked phones, any phone can remove itself or another phone from the household.
• Delete everything: Profile → Delete all data removes your mixes and settings from this phone, and deletes this phone and the events it sent from our server. If it's the last phone in the household, the household is deleted too.
• Notifications: turn alerts or previews off in Settings → Notifications on your iPhone.
• Subscription: manage or cancel in Settings → your name → Subscriptions.
• Subscription records: email us the order ID from Apple's receipt to ask for access to, or deletion of, the records linked to your purchase.

Your rights

Depending on where you live, for example in the UK, the European Economic Area, Switzerland, California and other US states, Brazil, Canada or Australia, you may have the right to:

• know what personal information we hold about you and get a copy
• have it corrected or deleted
• restrict or object to how we use it, including use based on our legitimate interests
• receive it in a portable format
• withdraw consent at any time, without affecting earlier processing
• not be treated differently for using these rights

Email support@raftad.com to make a request. We'll reply within the time the law requires. shsh has no accounts, so we may ask you to send the request from the app's phone or describe your household so we can find the right records. You can always delete them yourself with Delete all data.

Legal bases (UK, EEA and Switzerland)

We run linked-phone alerts and subscriptions to perform our contract with you, at your request. We handle support, security, abuse prevention and website delivery under our legitimate interest in running a reliable service, and keep some records to meet legal obligations.

If you're unhappy with how we've handled your information, please contact us first. You can also complain to your local data protection authority, such as the UK Information Commissioner's Office or the supervisory authority in your EU country.

We don't make decisions about you that are based solely on automated processing and that have legal or similarly significant effects.

Children

shsh is made for parents and other adults who care for babies. It isn't directed at children under 13, and we don't knowingly collect personal information from children. Cry detection notes only that crying was heard, and when. If you think a child has sent us personal information, contact us and we'll delete it.

Security

shsh's data on your phone is protected by your iPhone's own security, including encryption when you use a passcode. Each linked phone proves who it is with a secret key kept in the iPhone's Keychain, and our server stores only a hash of it. Connections to our server, Apple and RevenueCat use HTTPS. Share link codes only with people you trust.

Changes to this policy

When this policy changes, we'll update the date at the top. If a change needs a new choice or your consent, shsh will ask you in the app before it applies.