Privacy Policy

1. Introduction

SleepHack ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and disclose information when you use our website and applications (collectively, the "Services").

2. Information We Collect

The categories of information we collect depend on how you use our Services:

• Information You Provide: Account details (such as email), support requests, and content you submit in the app.
• Sensor and Auxiliary Sleep Inputs: Accelerometer-derived movement data and related sleep context inputs (such as wake time and alarm time) used to power sleep prediction features.
• Health Connect / HealthKit Data (if connected): Sleep data made available through platform health integrations, used to improve your individual sleep engine performance by learning your sleep tendencies over time.
• Automatically Collected Information: IP address, device and browser details, app settings, approximate location from IP, and feature usage events.
• Cookies and Similar Technologies: We use cookies and analytics tools to operate, improve, and measure our Services.

3. How We Use Your Information

We use your data to:

• Provide, maintain, and improve our sleep and audio features.
• Generate sleep prediction outputs using sensor and auxiliary sleep inputs.
• Personalize your in-app experience and improve your individual sleep engine using connected health data.
• Communicate with you about account, support, updates, and newsletters (where applicable).
• Detect and prevent abuse, fraud, and security incidents.
• Comply with legal obligations.

We use Health Connect / HealthKit data to provide sleep tracking, recovery insights, and related wellness functionality inside the Services. We do not use or disclose Health Data for advertising, marketing, or other data-mining purposes.

We will only use Health Connect / HealthKit data for research or machine-learning model training when you explicitly opt in to that use.

You can opt in or out at any time using the Share Sleep Data toggle in the Settings screen.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent: Where you have given explicit consent, such as opting in to share Health Connect / HealthKit data for research or enabling marketing communications.
• Contract Performance: Where processing is necessary to provide the Services you have requested, including account creation, sleep tracking, and prediction features.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our Services, detecting fraud, and ensuring security, provided those interests are not overridden by your rights.
• Legal Obligation: Where processing is required to comply with applicable laws, regulations, or legal proceedings.

5. Data Sharing

We do not sell your personal data. We may share data with service providers that support our operations (for example, hosting, analytics, customer support, and security providers), and when required by law.

Any sharing is limited to what is reasonably necessary for the stated purpose, and service providers are required to protect personal data.

Business Transfers

If SleepHack is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal data via email or a prominent notice within the Services.

6. International Data Transfers

Your personal data may be transferred to, stored, and processed in countries other than the country in which it was collected. These countries may have data protection laws that differ from the laws of your country of residence.

When we transfer personal data internationally, we take appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy and applicable law. For transfers from the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on recognized legal mechanisms such as Standard Contractual Clauses approved by the European Commission.

7. Retention of Personal Information

We keep personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, while we have a business need to do so, or as required by law (for example, for tax, legal, accounting, or other purposes), whichever is longer.

8. Your Privacy Rights

You may request access, correction, export, or deletion of your personal data, subject to applicable law. To exercise these rights, contact us at support@sleephack.app.

When you request deletion, we will use reasonable efforts to honor your request. In some cases, we may need to retain limited data to comply with legal obligations.

If you are a resident of the European Economic Area, you also have the right to data portability (receiving your data in a structured, machine-readable format) and the right to lodge a complaint with your local data protection authority.

9. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal data:

• Right to Know: You may request the categories and specific pieces of personal data we have collected about you, the categories of sources, the business purposes for collecting your data, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete personal data we have collected from you, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell your personal data. If this ever changes, we will provide a clear opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

You may exercise these rights by contacting us at support@sleephack.app. You may also designate an authorized agent to make a request on your behalf.

10. Children's Privacy

Our Services are not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe we may have collected data from a child under 13, please contact us at support@sleephack.app.

11. Security

We use administrative, technical, and organizational safeguards designed to protect personal data. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

Breach Notification

In the event of a data breach that is likely to result in a risk to your rights, we will notify affected users without undue delay via email and/or a prominent notice within the Services. Where required by law, we will also notify the relevant supervisory authorities.

12. Changes to This Policy

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date above and provide additional notice when required. Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at support@sleephack.app.