Effective 17 August 2026 · Last updated 17 August 2026
The short version. Everything you record in Nightcap — your drinks, your estimated levels, the people you add, their names and body details, and your self-check answers — is stored on your phone and never sent anywhere.
The app does send anonymous usage analytics about which screens and features are opened, and it shows ads. Neither of those ever carries a drink, a level, a body measurement, a name, or a self-check result.
Nightcap ("the app") is published by Explicit Media Productions ("we", "us"), of Cape Town, South Africa. The app's package identifier is za.co.explicit.nightcap.app.
For any privacy question, or to exercise the rights described in section 9, contact support@explicit.co.za.
We are the responsible party under South Africa's Protection of Personal Information Act (POPIA), and the data controller under the EU and UK General Data Protection Regulation where those apply to you.
Nightcap has no user account and no server of its own. The following is written to your phone's app storage and is never transmitted to us or to anyone else:
All of it lives in a single record on the device. Deleting the app, or clearing its storage in Android settings, deletes it permanently. We cannot recover it, because we never had it.
The app uses Google Analytics for Firebase to understand which parts of it people use. It reports the name of the screen you are on, and a fixed, closed list of events. That list is exhaustive — the app is built so that no event can be added without being written down here:
| Event | What it means | What is sent with it |
|---|---|---|
disclaimer_accepted | The opening disclaimer was accepted | Nothing |
country_confirmed | The country gate was completed | Nothing |
country_changed | The country was changed in Settings | The country code, e.g. ZA |
menu_opened | The navigation drawer was opened | Nothing |
switcher_opened | The person switcher was opened | Nothing |
person_switched | A different person was selected | Nothing — no name, no identifier |
profile_opened | A body profile was opened | Nothing |
profile_renamed | A person was renamed | Nothing — not the name |
profile_colour_changed | A person's colour was changed | Nothing |
profile_field_changed | A body profile field was edited | Which field — weight, height, age, basis or tolerance. Never the value. |
games_toggled | The games preference was switched | on or off |
notifications_toggled | The notification preference was switched | on or off |
notification_permission | The Android permission prompt was answered | granted or denied |
recipe_opened | A cocktail recipe was opened | The recipe's identifier |
game_opened | A party game was opened | The game's identifier |
quiz_started | The self-check was started | Nothing |
quiz_completed | The self-check was finished | Nothing — deliberately not the score. The self-check is adapted from a clinical screening instrument, and we treat its result as health information that should not leave your phone. |
Because the app uses Google's analytics and advertising software, some information is collected by Google itself whenever the app is used. This is not chosen by us and cannot be switched off while those features are present:
Nightcap displays banner advertising supplied by Google AdMob. To do that, Google may read your device's advertising identifier and use it, together with the information above, to select and measure ads.
If you are in the European Economic Area or the United Kingdom, the app shows you Google's consent form the first time it runs and asks whether ads may be personalised. If you decline, the app does not request ads at all — it does not fall back to unpersonalised ads, it simply shows none.
This version of the app does not provide a way to reopen that form and change your answer later. Until it does, you can withdraw your consent by resetting or deleting your advertising identifier in Android's settings, or by clearing the app's storage, which causes the form to be shown again on the next launch.
What Google does with advertising data is governed by Google's own policies rather than this one — see How Google uses information from sites or apps that use our services.
To state it plainly, because it is the point of how the app is built. None of the following ever leaves your device, in any event, parameter or crash report:
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Understanding which features are used, so the app can be improved | Legitimate interests — improving a product we provide, using data that does not identify you |
| Showing advertising, which funds the app | Consent, where the consent form is shown; otherwise legitimate interests in showing non-personalised ads |
| Keeping the app working and diagnosing faults | Legitimate interests |
Under POPIA, we process this information on the basis of our legitimate interests and, for advertising where the consent form applies, your consent.
We do not sell your information and we do not share it with anyone for their own marketing.
The analytics and advertising information described in section 3 is processed by Google LLC and its affiliates as our service provider, which may involve transfer to and storage in countries outside South Africa, the EEA and the UK. Google's handling of that data is described in the Google Privacy Policy. Where personal information is transferred out of the EEA or UK, Google relies on the European Commission's standard contractual clauses.
We may also disclose information where we are legally required to, or to establish or defend legal claims.
Information stored on your device is kept until you delete it, clear the app's storage, or uninstall the app. The app itself removes logged drinks once they fall outside the period it displays.
Analytics information is retained by Google according to the retention period set on our analytics property, after which it is deleted automatically. Advertising data is retained under Google's own policies.
Because your drinking history, body details and self-check answers never leave your device, they are protected by your device's own security — its lock screen, encryption and app sandboxing. Information sent to Google is transmitted over encrypted connections.
No system is perfectly secure, but the strongest protection here is structural: the most sensitive information the app handles is never transmitted at all, so it cannot be exposed by a breach of ours.
Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected or deleted, to object to or restrict its processing, to receive it in a portable form, and to withdraw consent.
In practice:
To make a request, email support@explicit.co.za. If you are in South Africa and are not satisfied with our response, you may complain to the Information Regulator. If you are in the EEA or UK, you may complain to your local data protection authority.
Nightcap is rated 17+ and is intended only for adults of legal drinking age. It is not directed at children, and we do not knowingly collect information from them. If you believe a child has used the app and information has been collected, contact us and we will act on it.
Nightcap produces estimates for entertainment and education. It is not a breathalyser and not a measuring instrument, and nothing it shows should be used to decide whether anyone is fit to drive, to work, or to care for another person. This is not a privacy matter, but it is important enough to repeat wherever the app is described.
If we change how the app handles information, we will update this page and change the "last updated" date above. Where a change is significant, we will say so in the app.
[LEGAL ENTITY NAME]
[POSTAL ADDRESS]
support@explicit.co.za