Privacy Policy

Effective September 23, 2026 · Applies to the NightFlow Trip app for iPhone and this website

The short version

1. Who we are

NightFlow Trip (“the app”, “we”, “us”) is a planner for night train travel: routes, packing lists, reminders for stops along the way, and a sleep log. This policy explains what information the app handles, where it goes, and the choices you have.

Questions about privacy: mail@maskedverdict.cfd.

2. Data kept only on your device

The app has no accounts and no cloud storage of its own. Everything you create is saved in the app's private storage on your iPhone and is never sent to us or to our analytics provider:

WhatExamples
TripsDeparture and arrival stations, dates, nights aboard, berth type, climate, trip status
Packing listsChecklist items, what you've packed, your default kits and saved templates
StopsBorder checks, water stops and other stops with their times, and whether a reminder is on
Sleep logNight ratings, what disturbed you, your morning notes, levels and pins earned
Conductor historyYour past questions and the replies you received
ProfileThe name you choose to be called in the app (optional)

We cannot see, access or recover this information. If your device is backed up through iCloud or to a computer, the app's data may be part of that backup, which is handled by Apple under Apple's Privacy Policy.

3. The Night Conductor (OpenAI)

The Conductor answers questions about comfort, packing and etiquette on night trains. It is optional: apart from the analytics described in section 5, it is the only feature that sends your content over the internet.

When data is sent

Only after you accept the notice shown the first time you open the Conductor tab, and only when you press send. If you never use the Conductor, nothing leaves your device.

What is sent

  • The text of the question you send and the earlier messages in that same conversation;
  • If you choose to link the conversation to a trip: that trip's route, dates, number of nights, berth type, climate and the stops you listed.

Your name, sleep ratings, notes, other trips and anything else in the app are not sent.

Who receives it

The request goes directly from your device to OpenAI, L.L.C., whose gpt-4o-mini model writes the reply. OpenAI processes it under its own terms and privacy policy. We do not operate a server in between and do not receive or keep a copy of your questions. Conductor questions are never passed to AppsFlyer.

Please don't include sensitive personal information (such as passport numbers or health details) in your questions.

4. Stop reminders

If you allow notifications, the app schedules local notifications ten minutes before the stops you switch on. They are created and delivered by iOS on your device. No push service or third party is involved. You can turn reminders off in the app's Settings or in iOS Settings at any time.

5. Analytics & attribution (AppsFlyer)

The app uses the AppsFlyer SDK, provided by AppsFlyer Ltd., to measure app installs and usage and to understand which campaigns or sources bring people to the app. AppsFlyer processes this data on our behalf under its privacy policy.

What AppsFlyer may collect

  • Device and app information: device model, iOS version, app version, language and country settings;
  • Network information: IP address (used to estimate an approximate location such as country or city) and carrier;
  • Identifiers: Apple's identifier for vendors (IDFV) and an AppsFlyer ID; the advertising identifier (IDFA) only if you allow tracking;
  • Install and attribution data: when the app was installed or opened and the ad or source that led to the install, if any;
  • Basic in-app events, such as app launches and sessions.

AppsFlyer does not receive your trips, stations, packing lists, stops, sleep ratings, notes, your name or your Conductor conversations.

Your tracking choice

When the app starts, iOS shows Apple's App Tracking Transparency prompt. If you tap Allow, the IDFA may be shared with AppsFlyer to attribute installs to advertising campaigns across other companies' apps and websites. If you tap Ask App Not to Track, the IDFA is not accessed and attribution relies only on non-identifying or aggregated methods (such as Apple's SKAdNetwork). You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.

We do not show ads in the app and do not sell your personal data.

6. Apple services

The app is distributed through the App Store. Downloads, purchases, crash reports you choose to share with developers, and the in-app “Rate NightFlow Trip” prompt are handled by Apple under Apple's Privacy Policy. Apple may share aggregated, anonymous statistics (such as download counts) with us.

7. This website

This website uses no cookies, analytics or tracking. Fonts are loaded from Google Fonts, which means your browser connects to Google's servers and Google may receive your IP address (see Google's Privacy Policy). The contact form on this site is a visual demo and does not transmit anything; if you email us, we use your address and message only to reply to you.

8. Deleting your data

  • In the app: Settings → Erase everything removes every trip, checklist, sleep entry, conversation and pin, and cancels pending reminders.
  • Individually: delete any trip, night entry or Conductor conversation from its own screen.
  • Uninstall: deleting the app removes all of its data from your device, because no other copy exists with us.

For questions you already sent to the Conductor, OpenAI's retention rules apply; you can contact OpenAI directly regarding data they hold. Analytics data is retained by AppsFlyer under its own retention policy; see section 9 to request its deletion.

9. Your rights

Depending on where you live (for example under the GDPR in the EU/UK or the CCPA/CPRA in California), you may have the right to access, correct, delete or port your personal data, to object to or restrict processing, and to withdraw consent. Your trips and notes never leave your device, so those rights are exercised directly in the app as described above. For analytics data held by AppsFlyer, write to us with your request and we will forward it to AppsFlyer; you can also contact AppsFlyer directly at privacy@appsflyer.com. The legal basis for sending Conductor questions to OpenAI and for IDFA-based tracking is your consent, which you can withdraw at any time (by not using the Conductor, or in iOS tracking settings); basic install analytics rely on our legitimate interest in measuring and improving the app. You can reach us at mail@maskedverdict.cfd and you may also lodge a complaint with your local data protection authority.

10. Children

The app is written for adult travellers and is not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children.

11. Security

Your data stays in the app's sandboxed storage and benefits from iOS data protection. Conductor requests to OpenAI and analytics data sent to AppsFlyer travel over encrypted HTTPS connections. No method of storage or transmission is completely secure, but keeping your data on your device greatly limits exposure.

12. Changes & contact

If the app ever starts handling information differently, this policy will be updated first and the effective date above will change with it. Significant changes will also be reflected in the app's in-app privacy notice.

Contact: mail@maskedverdict.cfd