Nedimo

Privacy Policy

Last updated 11 September 2026  ·  Effective 11 September 2026

Nedimo is a library of original sleep stories that we write and narrate before you ever open the app. To run it we keep your email address, your saved favourites and preference scores. Nothing you do in the app is sent to an AI. We don't sell your data, we show no ads, and we don't track you across other apps or websites. You can delete your account from inside the app, or at app.nedimo.com/delete-account-request without signing in.

Nedimo is intended for adults aged 18 and over. It does not offer child accounts or a parental-consent registration flow. See our age and children's privacy notice.

Who we are

Nedimo is built and run by a very small team — most days, one person. When this policy says "we" or "the Nedimo team", that's who it means.

Nedimo is operated by the Nedimo team, based in Greece. The Nedimo team is responsible for your data — the controller, in the language of the GDPR. Our verified contact details are also shown on our App Store and Google Play listings.

Write to the Nedimo team at nedimo.app@gmail.com. A person reads it.

What we collect, and why

Your account

Your email address, the display name you choose, and an internal account ID. If you sign in with Apple or Google, we receive the identifier they give us and the email you agreed to share.

We use this to create your account, sign you in, keep your library attached to you, and email you about your account or a service problem. In the EU and UK the legal basis is performance of our contract with you. We keep it while your account exists, and delete it within 30 days of you closing it.

An email address is required to create an account — without one we can't remember where you got to or let you sign back in on another device. Everything else you give us is optional.

Age eligibility

You must be at least 18 to use Nedimo. The current sign-up form does not collect your date of birth or age band, and we do not claim to verify your age.

Your library and what you listen to

Which stories you start and finish, where you paused, how long a session lasted, the stories you save as favourites, anything you've downloaded for offline listening, the categories and voices you browse, the screens you opened, and your app version and device model.

We use this to resume playback where you stopped, to sort your library and suggest stories like the ones you finish, and to understand which kinds of stories people actually complete so we make more of those. PostHog product analytics runs only after you opt in. Your internal account ID is attached when you are signed in, so these events are linked to your account. You can withdraw consent in Analytics settings; declining does not affect access to stories. OneSignal notification interaction data and automatic crash reporting are described separately below. We retain account-linked usage data while needed for the purposes described here; you can request deletion by email.

Crashes and errors

Sentry starts automatically in the production app to report crashes and errors. Reports can include error messages, stack traces, technical breadcrumbs, an installation identifier, device model, OS and app version, and application-session diagnostics. We do not deliberately attach your account name or email. An installation identifier can still link reports from the same installation, so we do not describe these reports as anonymous. Performance tracing and session replay are not enabled.

We use these technical reports to keep the service reliable and investigate failures, on the basis of our legitimate interest in maintaining and securing the app. This reporting is separate from optional product analytics: declining analytics does not switch it off. You can contact us to object to this processing or request deletion. Diagnostic reports are retained while needed to investigate failures and monitor reliability, subject to provider retention settings.

Payments

The current release is free and does not offer in-app purchases or subscriptions. We do not collect card details or purchase history from this release.

Notifications

We use OneSignal for push notifications. Its SDK initializes when the native app starts and can register an installation before you grant notification permission. It processes a OneSignal user ID, subscription and device identifiers, push token when available, device and app information, session activity and notification interactions. When you sign in, we associate the subscription with your internal account ID.

We use this information to register and deliver notifications and understand delivery and notification interactions. Notification delivery requires your device permission, which you can withdraw in device settings or the app. Turning off notifications stops delivery; it does not by itself delete the OneSignal registration. Contact us to request removal of that registration. We rely on your consent for notification delivery and our legitimate interest in operating and maintaining the notification service for its technical registration and delivery records. We do not use OneSignal for cross-app advertising tracking.

Sleep feedback and preferences

Your listening history, sleep preferences and morning answers are stored on your device. The app learns preference and sleep-effectiveness scores from this activity. Story-world scores and favourites can be sent to our account service with your account ID, including scores derived from whether a story helped you sleep. We treat these sleep-related scores as health-related information, not anonymous analytics. They support your saved library and personalised story suggestions. These features are optional; you can skip morning feedback and contact us to request removal of account-linked scores.

What we don't collect

Who else sees your data

We do not sell your personal data and we do not share it for advertising.

Company What they get Why Where
Convex Account data, favourites and preference and sleep-effectiveness scores Runs the account and catalogue service United States
Amazon Web Services (AWS) Published audio and artwork; technical delivery requests such as IP addresses Hosts the website and web app; stores and delivers the audio catalogue Stockholm, European Union
PostHog Cloud EU Usage events, installation identifier and internal account ID when signed in Product analytics, only after opt-in; no session replay or GeoIP enrichment European Union
Sentry Crash and error reports, technical device and session information, installation identifier Automatic crash reporting and service reliability United States
OneSignal Account, installation and subscription identifiers; push tokens, device information, session and notification interactions Notification registration, delivery and delivery analytics United States and service subprocessors
Apple, Google Sign-in identifier and email when you choose their sign-in service Authentication Worldwide

These services process data to provide the features described above. Their privacy notices explain their own processing. We may also disclose data where the law requires it, to protect someone's rights or safety, or in a merger — in which case we'll tell you before your data becomes subject to a different policy.

Our AI tools are not on this list, and that's deliberate. We use them to write and narrate the library before it reaches the app, from our own material. They never receive anything about you or from you.

How the stories are made

Every Nedimo story is written and narrated by AI — by us, in advance. Nothing is being generated while you listen. You're playing a finished recording, the same one everyone else hears.

How long we keep things

Data Kept for
Account details Life of the account, then deleted within 30 days
Your library and listening history Life of the account, then deleted within 30 days
Usage and analytics While needed to evaluate and improve the service, subject to provider retention settings; deletion can be requested
Crash and diagnostic data While needed to investigate failures and monitor reliability, subject to provider retention settings
Notification registration While needed to provide notifications; removal can be requested by email

Deleted records may remain in restricted backups until those backups expire under the storage provider's retention schedule. We do not use those records for normal service operations.

Where your data lives

Your account data is stored in the United States, while published audio and European analytics data are stored in the European Union. Where a provider processes personal data outside the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. Ask us at nedimo.app@gmail.com if you'd like the details.

Security

Data is encrypted in transit using TLS, and encrypted at rest by Convex and Amazon Web Services. Access to live data is limited to the people who need it and protected by two-factor authentication.

No method of storage or transmission is completely secure, and we won't pretend otherwise. If a breach affects your data and puts you at risk, we'll tell you and the relevant authority as the law requires.

Your rights

If you're in the EU, EEA, or UK

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, object to our use of it, or send it to another service. Where we rely on your consent you can withdraw it at any time — withdrawing is as easy as giving it, and it doesn't affect anything we did beforehand.

Email nedimo.app@gmail.com and we'll respond within one month. We may ask you to confirm the request from the email address on the account, so we don't hand your data to someone else.

You can also complain to your data protection authority. In Greece that's the Hellenic Data Protection Authority, dpa.gr. In the UK it's the ICO, ico.org.uk. Elsewhere in the EEA it's the authority for your country.

If you're in the United States

If you live in California, Colorado, Connecticut, Texas, Virginia, or another state with a comprehensive privacy law, you can ask to know what we hold, access it, correct it, delete it, and take it elsewhere. You can opt out of targeted advertising and of any sale or sharing of your data — though we do neither. You can limit our use of sensitive personal information. You can appeal if we refuse a request, and we won't treat you differently for making one.

Email nedimo.app@gmail.com.

Anywhere else

Whatever country you're in, email nedimo.app@gmail.com and ask for a copy of your data or its deletion, and we'll do it.

Deleting your account

In the app: Settings → Account → Delete account. Or at app.nedimo.com/delete-account-request without signing in.

Your account, your saved library, your downloads and your listening history are removed within 30 days, from our active account service. Backup copies expire separately as described above. Truly aggregated statistics that no longer identify you may be retained. Account deletion does not automatically erase records held by every SDK provider; contact us to request removal of associated PostHog, Sentry or OneSignal records.

The stories themselves stay in the app for everyone else. They were never about you and there's nothing personal in them to remove.

Children

Nedimo is intended for adults aged 18 and over, and is not directed to children. We do not offer parent-managed child accounts or a child-specific analytics mode. A parent accepting our terms does not make someone under 18 eligible to use the service.

If you believe someone under 18 has created an account or provided personal information, email nedimo.app@gmail.com. We will investigate and arrange deletion of the account and associated personal information. Our age and children's privacy notice explains how to contact us.

Changes to this policy

We'll post updates on this page and change the date at the top. For material changes we'll tell you in the app before they take effect. Where a change needs your consent, we'll ask for it — we won't treat your continued use as agreement.

Contact

The Nedimo team  ·  nedimo.app@gmail.com

Nedimo is operated by the Nedimo team, based in Greece.