THE SHORT VERSION
- Your Health information and private reflections stay on your iPhone.
- Your account and explicit sound favorites use our account service.
- No advertising trackers. No sale of your personal information.
01About this notice
Effective date: 30 September 2026.
Publication note. Sleepanion is the product name. The legal identity and address of the service operator are awaiting confirmation. This notice describes the current data practices; the operator details will be added when confirmed. For privacy enquiries, use support@sleepanion.com.
This notice covers sleepanion.com, the Sleepanion iPhone app, its account service, and information you choose to send to support. Apple, Google, your email provider and any destination you choose for an export also have their own privacy practices. Merely reading this notice does not give us permission to use your information for unrelated purposes.
02Information that stays on your iPhone
Your bedtime and morning check-ins, optional private notes, listening history, preferences, sound feedback and local recommendations are processed on your device. They are not sent to the account service when you sign in. Local app records are held in protected storage; the app-owned record and audio-recovery folders are excluded from system backups and are not mirrored through CloudKit.
If you connect Apple Health, Sleepanion reads available sleep-analysis records and calculates descriptive summaries on the device. Raw Health samples and derived sleep summaries are held in memory for the current session, rather than in our account database. Sleepanion does not upload them, write your reflections to Health, or delete the original Health records.
Local records are associated with this iPhone, not a cloud diary. Signing into a different account or device does not transfer them. Signing out does not erase them. The local interface-language preference is retained when you erase wellness records so that the app remains readable.
03Information received by our services
| Information | Source and purpose | Where it goes |
|---|---|---|
| Account identity | Apple or Google supplies a provider identifier and, when available, a verified email address and display name. We use these to create and manage your sign-in account. Apple private relay addresses are supported. | Cloudflare Workers and D1 account service; the active app session is stored in this iPhone’s Keychain. |
| Sign-in and session credentials | Provider tokens, a nonce and a single-use authorisation code verify sign-in. Opaque app access/refresh tokens maintain your session. Provider credentials needed for revocation are encrypted in the backend. | The chosen identity provider and account service. Revocation credentials are not returned to the app. |
| Sound favorites | When you tap or remove a heart, the sound identifier and your choice are sent with your authorised account. This supports one favorite per account and aggregate counts. | Cloudflare D1. Other people receive totals, not your identity or a list of your choices. |
| Security metadata | Request IP addresses and verified provider identifiers are used to create keyed security digests; token/code digests help reject replay attacks. The operational tables do not store raw IP addresses, ID tokens or authorisation codes. | The account service. Cloudflare separately processes infrastructure request information. |
| Website requests | To deliver and protect this website, the host receives technical request information such as IP address, requested URL, request time, browser/network information and response status. | Cloudflare. This website has no advertising pixels, marketing analytics, embedded third-party media or submission forms. |
| Support correspondence | Your email address, message, any details or attachments you send, and replies are used to help with your request and maintain necessary correspondence. | The support mailbox and the email services involved in delivery. No app records are attached automatically. |
The app does not include advertising, a runtime chatbot, a microphone-based sleep recorder or a third-party crash-reporting SDK. We do not receive your payment-card details. Health information, private notes, check-in answers and detailed listening history are not part of account or favorite requests.
04Why information is used
Account information lets us authenticate you, keep access secure, process explicit favorite choices and carry out account deletion. Security metadata helps prevent abuse and replay attacks. Website request information enables delivery and protection of the site. Support correspondence is used to answer the request you make.
Where applicable law requires a legal basis, the relevant purposes are providing the account functions you request, legitimate interests in keeping the service secure, and meeting legal obligations where they apply. Optional Health access and notifications remain under your control through your choices and device permissions. You can withdraw an optional permission. The precise legal bases, including any additional condition required for sensitive data, remain subject to confirmation for the operator and relevant jurisdiction.
We do not use your Health information or diary for advertising, sell your personal information, or share it for cross-context behavioural advertising. Recommendations are generated locally to suggest listening options. They do not make decisions with legal or similarly significant effects about you.
05Health, reminders and purchases
Apple Health is optional
We request read access only to sleep-analysis information after you choose to connect Health. You can change access in Apple’s Health or privacy settings. An empty result may mean there are no available records or that access is limited; it is not treated as proof that you denied permission. Journeys and your own reflections can work without Health data.
Reminders are local and optional
Bedtime reminders and companion prompts require your choices and notification permission. They are scheduled on your device; there is no notification server or remote push token. A Health-linked prompt checks for a recent night on the device. Notification wording excludes sleep metrics and private notes. A favorite-sound title appears only if you separately enable that option, and may be visible on your Lock Screen.
Apple manages purchases
If a membership is offered, Apple handles payment and subscription records. Sleepanion uses verified App Store entitlement information to decide access. We do not receive your card number. Your App Store subscription and Sleepanion sign-in account are separate.
07Retention and recovery copies
| Data | Current retention approach |
|---|---|
| Local reflections, history and feedback | Remain on this iPhone until you erase the app-owned data or otherwise remove it. An app/account sign-out does not erase them. |
| Health copies and summaries | Held in memory and replaced or cleared during use or when the process ends. Original Health records follow Apple Health’s controls. |
| Audio recovery | A local recovery checkpoint is eligible for up to 24 hours and is cleared on completion, stop or local reset. Resuming requires your action. |
| Account and favorites | Retained for the account lifecycle. Removing a heart removes the active server favorite; successful account deletion removes the live identity and linked favorites. |
| Sessions | Access credentials expire after 15 minutes. A refresh-session family lasts up to 30 days. Expired families are removed by scheduled cleanup. Revocation can end access sooner. |
| Short-lived security records | Rate-limit buckets expire within two minutes; code replay proofs and deletion retry receipts/tombstones expire after 24 hours. ID-token replay proofs expire shortly after the token. Expired rows are removed by hourly cleanup, so expiry is not an immediate physical deletion promise. |
| Interrupted sign-in evidence | A keyed record of an unresolved provider exchange may remain until reconciliation or an explicitly disclosed manual-deletion outcome, so the service does not falsely claim provider access was revoked. |
| Exports | The app removes its temporary export when the share sheet closes. Copies you or a recipient save remain under that recipient’s control. |
| Support and hosting records | Used for the request, follow-up and necessary security or legal purposes. The fixed support-mailbox retention period and production hosting-log retention are not yet confirmed. |
Deleting live rows does not immediately erase historical recovery copies. Cloudflare D1 maintains point-in-time recovery history. The production plan’s recovery period has not yet been confirmed, so there is no fixed deletion-from-backup deadline stated here. Encrypted deleted credentials may remain in restricted recovery history for that period. Cloudflare explains its D1 recovery system.
08Security and international processing
The app uses HTTPS for account requests, device-only Keychain storage for its session and encrypted backend storage for provider revocation credentials. Local files use iOS data protection. Sensitive information is excluded from ordinary app logging and the release logger does not emit development lifecycle events. These measures reduce risk; no device, transmission or storage system can be guaranteed completely secure.
Cloudflare, Apple, Google and email services can operate internationally, so account, website or correspondence information may be processed outside your country. Your local Health data and diary are not uploaded by Sleepanion as part of those flows. Specific hosting locations, contracting entities and applicable transfer safeguards are not yet confirmed. We do not promise country-specific hosting or represent that a particular international-transfer agreement is in place.
09Your practical controls
- Change or withdraw Health access and notification permission in your iPhone settings.
- Remove a sound’s heart to remove the corresponding active server favorite.
- Choose You → Export my Sleepanion data for an app-record export. Review private notes before sharing it.
- Choose You → Erase data on this iPhone for local app records.
- Choose You → Account and access → Delete account for your remote account.
- Manage any App Store subscription separately through Apple.
These actions affect different information. See account deletion and local erasure for the full comparison. This website uses no first-party cookies or persistent browser storage; see Cookies & storage.
10Rights around the world
Your rights depend on the law that applies, its scope and any lawful exceptions. Contact support@sleepanion.com with your request and country or region so the applicable process can be identified. We may need proportionate information to verify account ownership. Do not send passwords or identity tokens. An authorised representative may need evidence of their authority. Requests are handled subject to applicable legal deadlines and exceptions. Any permitted extension or refusal should be explained, along with the relevant complaint route. You will not be penalised for making a lawful request.
European Economic Area and United Kingdom
Where applicable, you may request access, correction, erasure, restriction or portability, object to certain processing, and withdraw consent without affecting earlier lawful processing. You may complain to the appropriate supervisory authority. Rights are subject to their legal conditions. Read the European Commission’s rights guidance and the UK ICO’s explanation.
United States
Where a state privacy law applies, rights may include knowing/accessing, correcting, deleting or obtaining a copy of personal information, appealing a refused request and opting out of specified processing. California rights can also include limits on certain sensitive-information uses and protection from discrimination. Sleepanion does not sell or share personal information for behavioural advertising, so there is no such processing to opt out of in this release. We do not activate it when a Global Privacy Control signal is absent. See the California Attorney General’s CCPA guidance.
Thailand
Where the PDPA applies, you may have rights to access/copies, correction, portability, objection, restriction, erasure and withdrawal of consent, subject to statutory conditions, and may complain to the competent authority. See this Thai public-authority explanation of data-subject rights and the Personal Data Protection Committee Office.
If another region’s law gives you rights, you can still use the same contact. These regional notes do not state that every listed law applies to Sleepanion or that all rights are unconditional. For information stored only on your iPhone, the app’s export and erase tools are the direct controls; support cannot retrieve a cloud copy that does not exist.
11Children and sensitive support messages
Sleepanion is a general wellbeing experience and is not designed specifically for children. This website does not ask for a date of birth, offer child accounts or include an age-verification system. Any parental-authorisation requirements depend on the law that applies; no special children’s service is offered here.
If you believe a child has supplied personal information inappropriately, contact support@sleepanion.com so the concern can be reviewed. Please avoid sending health records or a child’s detailed information in your first message.
12Changes and contact
We will date material changes to this notice and explain changes that affect your choices. If data practices change, we will explain the change and seek any permission required before using your information in a new way. A possible future feature is not consent to it today.
For privacy questions, access requests or concerns, email support@sleepanion.com. For product help, visit Support. Updates to operator and retention information will be dated on this page.
A question on your mind?
You can reach us at support@sleepanion.com.