Privacy Policy

This Privacy Policy explains how Thalor Labs Pty Ltd (ACN 702 519 113), trading as ThalorLabs (“we”, “us” or “our”), handles personal information in the Nala iPhone app and on this website. We are an Australian company registered in New South Wales.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

The short version: Nala has no accounts. Your sessions, your settings, your coins and your history are stored on your phone and we never see them. Two things reach us: what you type into the suggestion or bug-report box and choose to send, and anonymous counts of how the app is used — never who used it — which you can switch off in Settings.

Nala keeps its state in the app’s own storage on your device: your cat’s name and pronoun, your session length, sound and haptics settings, your coin balance, the items you have unlocked and equipped, your session history and your streak.

We have no copy of any of it. There is no account to sign in to, no server that holds your history, and no way for us to look up a person’s data — because we do not have it. The counts described in section 4 record that a session was finished; they do not build up a copy of your history, and they are not attached to you.

If you have iCloud Backup switched on, your device backup may include this data, as it does for every app. That backup is between you and Apple; it is encrypted and we cannot read it. Deleting the app deletes the data on the phone.

Nala does not sync between devices. A new phone starts fresh unless you restore it from a backup.

A suggestion or a bug report from Settings, and only when you send it. We receive the text you wrote. A bug report also carries the app version and your device model (for example “iPhone 15 Pro”) so the problem can be reproduced. The other thing that reaches us, the anonymous usage counts, is described in section 4.

We do not attach your name, your email address or any identifier, because the app has none. If you type your contact details into the message so that we can reply, we receive those too — that is your choice, and we use them only to reply.

Reports are sent to our own servers, which run in Amazon Web Services’ Sydney region (ap-southeast-2). If that service is unavailable, the app falls back to opening a draft email to us instead, and your mail provider carries it in the ordinary way.

Nala counts how the app is used, so we can tell which parts help and which get in the way. This is on by default and there is a switch to turn it off: Settings › Help improve Nala.

What a count is: the name of something that happened, a small number of fixed labels describing it, and the date it happened on. For example “a session was finished, length 25” or “the paywall was opened from the length picker”. Not the time of day — the date only.

What we never count: anything you type. Not your cat’s name, not the text of a suggestion, not a custom session length. The list of things that can be counted is fixed in the app’s code and nothing else can be sent, so there is no field an unexpected value could arrive in.

These counts carry a random number generated on your device when you install the app. It is not your name, your email, your phone’s identifier or your Apple Account, and it is not shared with anyone — it exists only so that ten sessions from one person are not mistaken for one session from ten people. Nothing anywhere links it back to you, and we could not identify you from it if we tried.

Counts are collected on your phone and sent in a batch the next time you open the app, to the same servers in Sydney. Deleting the app deletes them along with everything else.

Turning the switch off stops the counting immediately, deletes anything waiting to be sent, and forgets the random number. If you turn it back on later, a new random number is generated — the old one is gone and the two cannot be connected.

This is not “tracking” as the App Store uses the word. We do not follow you across other companies’ apps or websites, we do not use advertising identifiers, and Nala will never show you the “Ask App Not to Track” prompt, because there is nothing to ask about.

Premium is bought through Apple. Apple processes the payment; we never see your card number, and we receive no name or address from a purchase. Apple gives us aggregated sales and download reports that do not identify individual customers.

We use RevenueCat to tell the app whether Premium is active on a device. RevenueCat receives a randomly generated, anonymous app user ID it creates for the install, the App Store transaction and receipt information for the purchase, and basic device and platform details such as the country of the store and the app version. It does not receive your name or your Apple Account credentials.

RevenueCat processes this information on servers in the United States. Their privacy policy is published at revenuecat.com/privacy.

The free tier never asks for a purchase to work, and coins are earned by finishing sessions — they cannot be bought.

No accounts. No email sign-up. No password, because there is nothing to sign in to.

No third-party analytics SDK. The usage counts in section 4 go to our own servers in Australia and to nobody else — there is no Google, Facebook or analytics company in the app.

No advertising, no advertising identifiers, and no tracking as the App Store defines it. Nala does not ask for permission to track you across apps or websites, because it never does.

No third-party trackers, social login buttons or embedded pixels in the app or on this site. This site sets no cookies.

No reading of anything you write. The counts in section 4 record that something happened, never its contents.

We do not sell personal information, and we do not disclose it for anyone else’s marketing.

Nala asks for notification permission the first time you start a session, never during onboarding. The notification at the end of a session is scheduled by your phone, on your phone. There is no push server, so nothing about your sessions leaves the device in order to notify you.

You can turn notifications off in iOS Settings at any time; the timer itself keeps running.

Apple — distributes the app and processes purchases, under its own privacy policy.

RevenueCat — tells the app whether Premium is active, as described above.

Amazon Web Services — hosts the service that receives suggestions and bug reports, in Sydney, Australia.

We may also disclose information where we are required or authorised to by law, or to protect our legal rights.

Suggestions and bug reports are stored in Australia. Purchase information is handled by Apple and RevenueCat, which process information overseas, including in the United States. Where that happens we take reasonable steps to ensure the information is handled consistently with the APPs.

We keep a suggestion or bug report while we are acting on it and for as long as it is useful as a record of why the app changed — usually a small number of years — and then delete it.

Usage counts are kept as aggregate figures — how many, not who — and we keep them while they are useful for deciding what to build. Because they identify nobody, there is nothing in them to delete on request; switching the feature off stops any more being made.

Everything else about your use of Nala lives on your phone, so you control how long it is kept. Deleting the app deletes it.

Data on your phone is protected by iOS and your device passcode. Reports you send reach us over an encrypted connection and are held in access-controlled cloud storage.

No system is perfectly secure, but the strongest protection here is structural: there is almost nothing about you for us to lose.

Nala is rated 4+ and is safe for children to use: it has no ads, no links out to social media and nothing to buy without a parent’s Apple Account. We do not knowingly collect personal information from children. The usage counts in section 4 identify nobody, child or adult, and can be switched off in Settings. The only way to send us anything is to type it into the feedback box, and we ask that children do not send their contact details.

You can ask us what we hold about you, ask us to correct it, or ask us to delete it, by emailing support@thalorlabs.com. In practice the answer is usually “only the message you sent us”, which we will show you or delete on request.

The usage counts are the one thing we cannot look up for you, because they are not linked to a person: there is no way for us to find “your” counts, which is the point of them. Switching the feature off in Settings stops any more being collected and deletes what has not yet been sent.

If you are unhappy with how we have handled your personal information, tell us first and we will try to resolve it. If you are still unhappy, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If we change what the app collects, we will change this page and update the date at the top before the new version of the app is released. Material changes will also be noted in the App Store release notes.

Thalor Labs Pty Ltd (ACN 702 519 113), New South Wales, Australia. Email support@thalorlabs.com.