MidnightInsomnia
Effective date: February 22, 2026 · Last updated: February 22, 2026
MidnightInsomnia is a real-time chat application exclusively available during midnight hours (00:00–04:59 in your local timezone), designed for night owls and insomniacs. This Privacy Policy explains how we collect, use, and protect your information when you use the app.
Data controller: Zorbey Torunoglu
Contact: [email protected]
This policy applies to all versions of MidnightInsomnia (Android and iOS) and the server infrastructure that supports the app.
Age restriction: MidnightInsomnia is rated 17+ and is not intended for anyone under the age of 17.
| Category | Data | Stored Where | Persisted? |
|---|---|---|---|
| Account | Firebase UID, authentication method (anonymous, Google, or Apple), anonymous status flag | MongoDB | Yes |
| Profile (premium) | Display name, avatar ID | MongoDB | Yes |
| Subscription | Premium status, premium expiration date | MongoDB | Yes |
| Timestamps | Account creation date, last seen, last visit date | MongoDB | Yes |
| Usage stats | Total messages sent, reactions given/received, nights visited, current streak, longest streak | MongoDB | Yes |
| Achievements | Achievement identifiers with unlock status | MongoDB | Yes |
| Chat messages | Message content, sender info, emoji reactions | Server memory only (max 50) | No — lost on server restart |
| Timezone | Timezone string (e.g. "Europe/Berlin") | Session memory only | No |
| Device storage | Firebase token, notification preference | Device (DataStore) | Local only |
| Firebase Analytics | App usage events, device info, session data | Google servers | Per Google policy |
| RevenueCat | Purchase transactions, entitlements | RevenueCat servers | Per RevenueCat policy |
Our server does not store your email address. Firebase Authentication may provide your email to the app client-side, but the server only extracts your Firebase UID and anonymous status from authentication tokens.
| Legal Basis | Data & Purpose |
|---|---|
| Contract performance (Art. 6(1)(b)) | Account data, usage stats, achievement tracking, premium subscription features |
| Legitimate interest (Art. 6(1)(f)) | Server logging (console-only, not persisted to files), analytics for app improvement |
| Consent (Art. 6(1)(a)) | Midnight reminder notifications (opt-in); Firebase Analytics (device-level opt-out available via your device settings) |
| Service | Data Shared | Purpose | Privacy Policy |
|---|---|---|---|
| Firebase Authentication (Google) | Auth tokens, UID | User authentication | firebase.google.com/support/privacy |
| Firebase Analytics (Google) | App usage events, device info | Analytics & performance monitoring | firebase.google.com/support/privacy |
| RevenueCat | Purchase transactions, entitlements | Subscription management | revenuecat.com/privacy |
| Google Sign-In | Google account info (during auth flow) | Authentication option | policies.google.com/privacy |
| Apple Sign-In | Apple ID info (during auth flow) | Authentication option | apple.com/legal/privacy |
| Hetzner Online GmbH | All server-side data (hosted infrastructure) | Server hosting (Frankfurt, Germany) | hetzner.com/legal/privacy-policy |
We do not sell your personal data.
Our server is located in Frankfurt, Germany (within the European Economic Area). However, some third-party services may process data outside the EEA:
These transfers are protected by Standard Contractual Clauses (SCCs) and, where applicable, the EU-U.S. Data Privacy Framework.
| Data | Retention Period |
|---|---|
| Account & profile data | Retained while your account exists; deleted upon account deletion request |
| Chat messages | Not retained — held in server memory only (max 50 messages), lost on server restart |
| Server logs | Console/stdout only; not persisted to files |
| Firebase Analytics data | Per Google's retention settings (default 14 months) |
| RevenueCat data | Per RevenueCat's retention policy |
| Device-local data | Until you uninstall the app or clear app data |
CCPA categories collected: Identifiers (Firebase UID), Internet or other electronic network activity information (usage statistics), and commercial information (subscription status).
Email [email protected] with your request. If possible, include your Firebase UID to help us locate your data. We will respond within 30 days.
To request deletion of your account and all associated data, email [email protected].
Upon receiving your request, we will:
Chat messages do not require deletion as they are ephemeral and only exist in server memory.
MidnightInsomnia is rated 17+ and is not intended for children under the age of 17. We do not knowingly collect personal data from anyone under 17. If you believe a child under 17 has provided us with personal data, please contact us at [email protected], and we will promptly delete that data.
MidnightInsomnia offers optional midnight reminder notifications to let you know when the chat window opens. These notifications are:
On Android, the app requests the following permissions solely for this feature:
POST_NOTIFICATIONS, SCHEDULE_EXACT_ALARM, and
RECEIVE_BOOT_COMPLETED.
We may update this Privacy Policy from time to time. Changes will be posted at this same URL with an updated "Last updated" date. Your continued use of MidnightInsomnia after any changes constitutes acceptance of the updated policy.
For material changes, we will attempt to notify you through the app.
If you have any questions about this Privacy Policy or your personal data, contact us at:
Zorbey Torunoglu
[email protected]