Last Updated: July 16, 2026
Data Controller: Euphora Labs, TOO
Registered Address: Krylova 44, Karaganda, Kazakhstan
Contact: contact@euphoralabs.com
UK Representative (Article 27 UK GDPR): Ilya Tsymbal, Room 1603F, Block A, White Rose View, 16 Merrion Way, Leeds LS2 8PT
EU Representative (Article 27 EU GDPR): In the process of being appointed. This policy will be updated with their details.
Your content is stored only on your device and never on our servers. It is protected by your device's built-in data protection, which encrypts files at rest. Your most sensitive data (your Big Five results and personality portrait) is additionally encrypted with AES-256-GCM, with the key held in the iOS Keychain (which may sync through iCloud Keychain if you enable it, so your data can be restored on a new device). We cannot access or read your data.
Stored on your device:
When the app generates personalized texts, data is sent from your device through our backend to Anthropic for AI processing. Depending on the moment, this may include:
This data transits our backend servers but is not stored on them. It is forwarded to Anthropic for processing and discarded from our servers immediately after the response is returned.
When you subscribe, Apple processes your payment. RevenueCat manages your subscription status on our behalf. Data processed includes:
We do not receive or store your payment card details, billing address, or Apple ID.
We use PostHog (EU hosting) to collect anonymous usage signals (e.g., "app opened", "goal created"). Each device is identified by an anonymous identifier generated locally; we do not create user profiles. IP addresses are processed by PostHog only to derive approximate region and are not stored with analytics events. No personal content or identifiable information is collected.
We measure which ad campaigns bring new users using anonymous device identifiers and basic app events. No tracking permission is requested and the advertising identifier (IDFA) is never accessed.
The website at nightmare.app/test hosts an optional personality test. Your answers to the 10 questions are processed entirely in your browser and never leave your device.
What we store on Upstash Redis (EU):
The random code: to transfer your scores to the iOS app without retaking the test.
Anonymous usage counters: to understand how the test is used.
The random code cannot be used to identify you and is not linked to any other data we hold. Using the code in the app is optional: you can always skip it and take the identical test directly in the app instead.
The data described under "Data Processed for AI Phrasing" is necessary to generate your personalized texts. If it is not available, the app continues to function, but those texts cannot be generated.
We do not sell or rent your personal data. Anonymous, aggregated ad-measurement signals may be shared with advertising platforms solely to measure campaign performance. No third party uses your data for AI model training.
Your data may be transferred to and processed in countries outside your country of residence:
Under UK GDPR, EU GDPR, and applicable data protection laws, you have the right to:
Since your data is stored locally on your device, you can access, edit, export, or delete it directly in the app (Settings > Backup & Export or Settings > Delete All Data).
To exercise any right or ask questions: contact@euphoralabs.com. We respond within one month.
The app includes a personality assessment based on the Big Five (OCEAN) model: a short version taken during onboarding and a deeper calibration completed inside the app. Your scores reflect tendencies, not a clinical assessment or a fixed label. They are stored locally on your device, and when the app generates personalized texts, they are included in the data sent to Anthropic to personalize the tone and framing.
Personalized texts in the app are generated by artificial intelligence (Anthropic Claude). The app's decisions are made by deterministic logic on your device; AI is used to phrase the resulting texts. AI output may contain inaccuracies, errors, or inappropriate content. AI output does not constitute professional advice of any kind.
Nightmare is not therapy, medical advice, diagnosis, or mental health treatment. The AI is not a licensed professional. Do not use it for crisis situations, diagnosis, or treatment decisions. If you need support, contact a qualified mental health professional or emergency services: 999 (UK), 988 (US), 112 (EU).
Nightmare is for users aged 13 and older.
We do not knowingly collect personal data from anyone under 13. If you are under 13, please do not use Nightmare. If a parent or guardian informs us that their child under 13 has used the app, we will delete any data we can associate with that child's device. Parents can also remove all local data themselves by using the "Delete All Data" button in the app's Settings.
You may use Nightmare. Some countries require a parent or guardian's permission for users under a certain age. By using Nightmare, you confirm that you have any parental permission required in your country.
The privacy protections described throughout this policy apply equally to users of all ages. This includes on-device data protection, no advertising or data sales, anonymous analytics only, and no required accounts or personal information.
If you are a parent or guardian and have questions about your child's data, you can:
Email us at contact@euphoralabs.com.
We do not sell your personal information. We do not share personal information for targeted advertising. We do not use sensitive personal information for purposes beyond what is disclosed in this policy.
Under applicable US state privacy laws (including the California Consumer Privacy Act, as amended), you have the right to:
We will not discriminate against you for exercising these rights.
To exercise your rights: contact@euphoralabs.com
If you have concerns about how we handle your data:
We may update this policy. Material changes will be reflected by an updated "Last Updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
Euphora Labs, TOO
Address: Krylova 44, Karaganda, Kazakhstan
Email: contact@euphoralabs.com