This policy explains what personal information Nights Watch by Kaat ("Nights Watch", "we", "us", "the service") collects, why, and what rights you have over it. Nights Watch is part of Kaat, the all-in-one events app: a shared study calendar is simply a special kind of event, which is why Nights Watch is offered under Kaat. The service is operated by [Axiom Studio Limited] ("the operator"), based in Nigeria, and reachable at [privacy@kaat.app]. It is available at nights-watch.kaat.app. For the purposes of applicable data-protection law, the operator is the data controller.
We designed Nights Watch to collect as little as it can while still working. We do not sell your data, we do not run advertising, and we do not use third-party tracking or analytics cookies.
| Data | Why |
|---|---|
| Email address | To create and secure your account (sign-in), to send you group invitations, and — only if you opt in — to send occasional product news. |
| Display name (a nickname you choose) | To identify you to your own study group on shared leaderboards. |
| Sign-in provider data (if you use Google or Apple) | When you choose Google or Apple to sign in, we receive your email address and basic profile identifier from them. We do not receive your password. |
| Study activity — your check-ins (which session, and when), reminder preferences, group memberships, and role | To run the calendar, count attendance and streaks, and show your group's leaderboard. |
| Calendars you create — group name, schedule (days, times, date range, breaks) | To store and share the calendar you built, and — in aggregate and de-identified — to understand overall usage of the service. |
| Marketing preference — whether you opted in, and when | To respect your choice and to prove consent if asked. |
| Notification token (only if you enable reminders) | A device push-subscription token, so we can send the reminders you asked for. |
| Technical and security data — IP address, browser/device type, and timestamps | Processed by our hosting and authentication providers to deliver the service, keep it secure, and prevent abuse such as spam or automated attacks. |
Where the GDPR, the Nigeria Data Protection Act, or similar laws apply, we rely on:
We do not sell your personal data. We share it only with the service providers that make Nights Watch work, each acting as our processor under contract:
We may also disclose information if required by law, or to protect the rights, safety, or property of our users or the operator.
Nights Watch is operated from Nigeria and our providers may process data in other countries, including the United States and the European Union. Where data crosses borders, we rely on our providers' safeguards (such as standard contractual clauses) to protect it.
We keep your account and study data for as long as your account is active. If you delete your account, we delete or de-identify your personal data within a reasonable period, except where we must retain something to meet a legal obligation or resolve a dispute. Aggregate, de-identified usage statistics that no longer identify you may be retained.
Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, to object to certain processing, and to withdraw consent. To exercise any of these, email [privacy@kaat.app]. You can unsubscribe from marketing emails at any time using the link in any such email, or by turning the preference off in the app. You also have the right to complain to your data protection authority — in Nigeria, the Nigeria Data Protection Commission; in the EU/UK, your local supervisory authority.
Nights Watch uses only essential browser storage: a session token to keep you signed in, and local storage on your device to hold a draft calendar you're building, your reminder preferences, and an offline copy of your own check-ins. We do not use advertising or third-party analytics cookies.
Nights Watch is not directed to children under [16]. If you are under the age of majority in your country, you may use the service only with the consent of a parent or guardian. If we learn we have collected data from a child without appropriate consent, we will delete it.
We protect data in transit with encryption (HTTPS), avoid storing passwords by using one-time codes and social sign-in, and restrict access to each group's data to its own members through database-level access rules. No system is perfectly secure, but we work to keep your information safe and to address issues promptly.
We may update this policy from time to time. We'll change the "last updated" date above and, for significant changes, make a reasonable effort to notify you.
Questions or requests: [privacy@kaat.app], [Axiom Studio Limited], [postal address], Nigeria.