Privacy Policy

§ 01

No Account Required

You do not need to create a user account to use Sleepy: Sleep Sounds & Rain. We do not ask for, and we do not collect, personal identifiers such as your name, email address, or phone number - except where you choose to email us for support, in which case we will see your email address.

§ 02

What Stays on Your Device

To make your experience more personal, the App stores some information directly on your phone or tablet using your device's local storage. This includes:

• Sounds you have favourited or saved to your library.
• Sounds you have recently listened to (history).
• Custom mixes you have created or are working on, and their per-sound volumes.
• Sleep-timer preferences and accessibility settings (e.g. mono audio).
• Small flags noting whether you have completed onboarding or seen the in-app review prompt.

This data stays on your device. It is not sent to us, and it is not stored on any server we operate. You can delete it at any time by uninstalling the App or clearing the App's data from your device settings.

From time to time the App may show your device's built-in "rate this app" prompt. This prompt is provided and handled entirely by the Apple App Store or Google Play Store. Whether and how you rate the App is not shared back with us, and we do not receive any personal information through it.

§ 03

Information Collected Automatically

When the App communicates with the third-party services described below (Firebase Crashlytics and, for subscribers, RevenueCat), certain technical information is automatically included in that communication. This typically consists of:

• Device model, operating system, and OS version.
• App version and build.
• Device language and region.
• Pseudonymous identifiers generated by those services on first launch (described per service below).

§ 04

Crash Reporting - Firebase Crashlytics

We use Firebase Crashlytics, provided by Google LLC, to find out when the App crashes so we can fix the underlying bug. When a crash occurs, Firebase's published Crashlytics disclosure lists the following data categories:

• A Crashlytics Installation UUID and a Firebase Installation ID. These are random identifiers used to group multiple crash reports from the same installation together. They are not linked to your name, email, or any other identity we hold.
• The crash stack trace.
• Device information bundled with the crash report - device model, operating system, available RAM and disk space, and device orientation.
• For Android NDK crashes only: native minidump data.

Crashlytics is enabled by default. Crash data is processed by Google and is, by default, retained for 90 days. Our lawful basis for this processing is our legitimate interest in keeping the App stable and secure. For details of Google's own privacy practices, see firebase.google.com/support/privacy.

§ 05

Payments and Subscriptions

If you choose to subscribe to Premium, two third parties are involved in handling that subscription:

Apple App Store / Google Play Store: All payments are processed securely by Apple or Google under their own terms and privacy policies. We never see or store your card number, billing address, or any other payment details.

RevenueCat (subscription management): We use RevenueCat, Inc. to verify your purchase receipt with Apple or Google and to keep track of whether your Premium subscription is currently active. When you subscribe, RevenueCat receives an anonymous App User ID that its SDK generates automatically on your device, your purchase receipt and entitlement status, your device model, operating system, and app version. RevenueCat may also determine a broad country-level location from your network connection for subscription reporting; RevenueCat states that the IP address used to determine country is not retained after the country is identified. We do not provide RevenueCat with your name, email, or any other identifier we hold about you. Our lawful basis is performance of the subscription contract with you. For details of RevenueCat's own practices, see revenuecat.com/privacy.

§ 06

How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioural advertising or with marketing partners.

The only third parties that handle information in connection with the App are the service providers described above - Apple, Google, and RevenueCat - each of which processes data strictly for the purpose of providing the service they perform for us (crash reporting and subscription handling).

§ 07

International Data Transfers

Our service providers - Google (for Crashlytics) and RevenueCat - are based in the United States, so the limited information described above is transferred outside the United Kingdom and the European Economic Area. Where required by applicable data protection law, those transfers are protected by appropriate safeguards (for example, Standard Contractual Clauses or the UK International Data Transfer Agreement / Addendum, depending on the provider). Copies of the relevant safeguards are published by each provider and can be obtained from us on request.

§ 08

Data Retention

• On-device data (favourites, history, mixes, settings) is kept on your device until you delete it, clear the App's data, or uninstall the App.
• Crashlytics data is retained by Google for 90 days by default.
• Subscription records held by RevenueCat are kept for as long as needed to provide your subscription and to meet record-keeping requirements that apply to financial transactions.
• Support correspondence is kept only for as long as needed to resolve your enquiry.

To request deletion of data associated with your use of the App - including anonymous subscription history associated with your RevenueCat ID - see our Data Deletion page. For a general data enquiry, please contact us at the email below.

§ 09

Your Rights (UK and EU Users)

If you are in the United Kingdom or the European Economic Area, you have rights under the UK GDPR and EU GDPR in respect of personal data we control:

• Right of access - to ask whether we hold information about you and to receive a copy.
• Right to rectification - to ask us to correct inaccurate information.
• Right to erasure - to ask us to delete information in defined circumstances.
• Right to restrict processing and right to data portability, in the circumstances set out in the legislation.
• Right to object to processing we carry out on the basis of our legitimate interests - including the Crashlytics diagnostics described above.

Our lawful bases for processing are: legitimate interests (keeping the App stable and secure through crash reporting); and performance of a contract (providing your subscription, where you have one). Where we ever ask for your consent to a specific activity, you have the right to withdraw that consent at any time.

You also have the right to lodge a complaint with a supervisory authority. In the UK, that is the Information Commissioner's Office (ico.org.uk). In the EU, you can complain to the data protection authority in your country of residence.

§ 10

California Residents

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used under California law.

§ 11

Children's Privacy

The App is intended for a general audience and is not directed at children under 13 (in the United States, under the Children's Online Privacy Protection Act) or under 13 in the United Kingdom (UK GDPR Article 8). Because we do not require accounts and do not collect personal identifiers, we do not knowingly collect personal information from children. If you are a parent or guardian and you believe a child has provided personal information to us, please contact us at the address below and we will delete it.

§ 12

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and, where appropriate, give a separate "Effective" date so you can see when a change starts to apply. Your continued use of the App after the Effective date acknowledges your acceptance of the updated policy.

§ 13

Contact Us

If you have any questions about this Privacy Policy, or you want to exercise any of the rights described above, please contact us at hello@getsleepy.app. To request deletion of your data, see our Data Deletion page. W3 Creations Ltd is registered in England & Wales (company number 14065251).