Shush privacy policy

Effective date: 4 September 2026

This policy covers the Shush iPhone app. The nerv.no website has its own policy.

Who we are

Shush is made by NERV AI AS (org. no. 935 486 483), Norway. We are the data controller for the app. Contact: support [at] nerv.no.

The short version

• Shush has no accounts, no sign-in, and no analytics.
• Shush does not collect your name, email, contacts, location, photos, microphone audio, or any information about your baby.
• The only data that leaves your phone is what is needed to process your subscription.
• We never sell data, and we do not use data for advertising or tracking.

Data we process, and why

Subscription and purchase data

Shush is sold as an auto-renewable subscription through Apple's App Store. To know whether your subscription is active, the app uses RevenueCat, a purchase-management service.

What is processed: an anonymous app user identifier generated on your device, your purchase and renewal history for Shush, and the App Store receipt. This is not linked to your name, Apple ID, or email; we cannot see who you are from it.

Why: to unlock the app after purchase, to restore purchases on a new device, and to see anonymous totals such as how many subscriptions are active.

Legal basis: performance of a contract (GDPR Art. 6(1)(b)).

Processors: RevenueCat, Inc. (United States; covered by their Data Processing Agreement and the EU Standard Contractual Clauses) and Apple Inc. (App Store billing, under Apple's privacy policy). We do not enable any third-party attribution or advertising integrations in RevenueCat.

Retention: for as long as your subscription exists and for the period afterwards that Apple's receipt data is kept by RevenueCat, then deleted under RevenueCat's retention policy. You can ask us to delete the anonymous record at any time; see "Your rights".

Sound playback and Siri

Sounds are bundled in the app and play on your device. Siri phrases are handled by iOS on your device using Apple's App Intents; Shush receives only the command (for example "start" or "stop"), never audio. Apple's handling of Siri requests is governed by Apple's privacy policy.

Crash reports

If your iPhone is set to share diagnostics with app developers (Settings > Privacy & Security > Analytics & Improvements), Apple may send us anonymised crash reports. We do not add any crash-reporting service of our own.

What we do not do

• No analytics SDK, no advertising SDK, no social-media SDK.
• No microphone or camera access. The app never listens.
• No location, contacts, calendar, photos, or health data.
• No push notifications.
• No data about your child. Shush does not ask for or store a name, birth date, or anything else about the baby.

Children

Shush is made for parents and caregivers and is not directed to children. We do not knowingly collect personal data from anyone under 16.

Your rights

Under the GDPR you can ask for access to, correction of, or deletion of personal data we hold, object to processing, or ask for a copy in a portable form. Because the only record we hold is an anonymous purchase record, to act on it we need the anonymous app user ID shown under Settings in the app. Write to support [at] nerv.no. We answer within 30 days.

You can also complain to the Norwegian Data Protection Authority (Datatilsynet).

Managing and cancelling your subscription

Subscriptions are managed by Apple, not by us. Open Settings > your name > Subscriptions on your iPhone, or see Apple's guide. Refunds are handled by Apple at reportaproblem.apple.com.

Changes

If this policy changes, the new version is published at this address with a new effective date. If a change affects what data is processed, the app will tell you before the change applies.

Contact

NERV AI AS, Norway. support [at] nerv.no.