Legal

Privacy Policy

Last updated: 12 April 2026

This policy explains what personal data No All-Nighters collects, why we collect it, and what rights you have over it. We try to collect as little as possible. If anything here is unclear, email admin@noallnighters.com.

1. Who we are

No All-Nighters is operated as an independent project based in the United Kingdom. For the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, No All-Nighters is the data controller for the personal data we process about you.

2. What we collect

When you use No All-Nighters, we may process the following personal data:

• Account information: if you sign in with Google, we receive your email address, display name, and profile picture URL from Google.
• Task data: the titles, due dates, durations, and completion status of tasks you create, plus your configured daily time slots.
• Billing information: if you subscribe, Paddle processes your payment details. We do not store or ever see your card number. We do receive a Paddle customer ID and subscription status (e.g. "trialing", "active", "canceled").
• Technical data: standard request logs (IP address, user agent, timestamp) captured by our hosting providers for security and diagnostics. We do not use analytics or tracking cookies.

3. Why we process it

• To provide the service: store your tasks, schedule them, and sync across your devices.
• To manage your subscription and give you access to paid features.
• To contact you about account, billing, or security matters.
• To protect the service from abuse and comply with legal obligations.

Our lawful bases under UK GDPR are: contract (to provide the service you signed up for) and legitimate interests (to keep the service secure and functional).

4. Who we share it with

We use a small number of trusted processors to run No All-Nighters:

• Google Firebase: authentication, cloud database (Firestore), and serverless functions. Data is stored in Google's US and EU data centres.
• Paddle: payment processing and merchant of record for all subscriptions. Paddle is responsible for PCI-DSS compliance and for collecting any applicable sales tax or VAT.
• Netlify: static hosting of the web app.

We do not sell your data. We do not share it with advertisers. We do not use it to train AI models.

5. International transfers

Some of our processors may store data outside the United Kingdom. Where they do, we rely on standard contractual clauses or equivalent safeguards approved under UK GDPR to protect your data.

6. How long we keep it

We keep your task data for as long as your account is active. If you delete your account or cancel your subscription, your data is deleted within 30 days. Billing records are retained by Paddle for the period required by applicable tax law.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict or object to certain processing
• Receive your data in a portable format
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk)

To exercise any of these rights, email admin@noallnighters.com from the address on your account and we will respond within 30 days.

8. Cookies and local storage

No All-Nighters uses browser localStorage to save your tasks when you are not signed in. This is essential to the service and is not tracking. We use Google Analytics (GA4) to collect anonymous, aggregated usage data such as page views and session duration. GA4 may use cookies to distinguish unique visitors. We do not use advertising cookies or trackers. When you sign in, Google's auth library sets cookies needed to keep you authenticated.

9. Children

No All-Nighters is intended for users aged 13 and above. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of the page will reflect any changes. Material changes will be announced inside the app.

11. Contact

Data protection questions or requests: admin@noallnighters.com.