Sleep Station1. Who we are
Sleep Station is made by Next Collective ("Sleep Station", "we", "us"). We are the data controller for the personal data described in this policy. You can reach us at hello@sleepstationapp.com. Put Privacy in the subject line and it will be handled as a privacy request.
This policy covers the Sleep Station mobile app and the website at sleepstationapp.com. It does not cover the App Store, Google Play, or any other service you reach through a link.
2. What Sleep Station collects, and where it lives
Sleep Station deals with some of the most private data a phone can hold: what you sound like asleep, what you say when you wake, and what you dream. We designed the app so that the most sensitive parts are processed on your phone and never reach us. The table below is the whole picture.
2.1 Data that stays on your phone
The following is stored only in the app's private storage on your device. We do not receive it, cannot see it, and it is not included in your account sync.
- Overnight microphone audio. While a sleep session is running, the app listens through the microphone and analyses the sound on the device in real time to detect snoring and awakenings. The audio stream is not recorded in full and is not transmitted anywhere. A visible indicator is shown whenever the microphone is in use, and your phone's own microphone indicator shows too.
- Snore clips. Short audio clips around detected snoring episodes are saved on your phone so you can listen back. They are never uploaded.
- Dream recordings and transcripts. When you record a dream, the audio is kept on your phone and transcribed on the device. The recording itself is never uploaded. The transcript is treated as journal text (see 2.2) and only ever leaves the phone in the two situations described in 2.3.
- Sleep coach conversations. Your chat history with the coach is stored only on your phone. When you send a message, the last few turns are sent to generate a reply, but our servers do not keep them.
- Worry notes written in can't-sleep mode, unless you have an account and sync, in which case they sync like the journal.
If you never create an account (guest mode), everything the app holds is in this category. Uninstalling the app deletes it.
2.2 Data stored on our servers
When you create an account, or turn on sync or an AI feature while in guest mode, the app creates a user record with our hosting provider and the following data syncs so that it survives a new phone and can be restored. Every row is tied to your user ID and protected by database rules that make it readable only by you.
| Data | What it includes | What it does not include |
|---|---|---|
| Account | Your email address, or the identifier Apple or Google gives us when you sign in with them; a display name if you set one; when the account was created. | Your password (Apple, Google or our authentication provider handle sign-in; we never see a password). |
| Sleep profile | Your answers to the onboarding questions (goals, usual bed and wake times, how you feel on waking, whether you snore, lifestyle factors) and what the app derived from them. | Nothing else. |
| Sleep sessions | Start and end times, sleep score and its components, estimated stage timeline, how you rated the night, the factors you tagged (caffeine, alcohol, exercise, stress). | Audio of any kind. |
| Sleep events | Summaries of detected events: when snoring or movement happened and for how long. | The sound itself. Snore clips stay on the phone. |
| Dream journal | The transcript text, title, tags, emotions, the lucid / nightmare / recurring flags, and which night it belongs to. | The audio recording. |
| AI reflections | If you opt in (2.3): the reflection text that was generated for a dream, which model produced it, and when. | Anything you did not ask for. |
| Alarms and settings | Your alarm times and wake windows, and app preferences. | Nothing else. |
| Subscription status | Whether your account has an active Premium entitlement, which plan, and when it renews or ended (see 2.4). | Payment details. |
| AI usage counts | How many AI requests your account made today, to enforce fair-use limits. | The content of those requests. |
2.3 Data sent to an AI provider, only when you opt in
Some features are generated by a large language model. They are off by default. Before the first one runs, the app shows a separate consent screen that names the provider and lists exactly what will be sent. You can decline, and the app will not ask again; you can turn the feature on or off at any time in Settings.
- Dream reflections. When you ask for a reflection on a dream, our server sends that dream's transcript text and its lucid / nightmare / recurring flags to the provider. It does not send the audio, your name, your email, or any other dream.
- Sleep coach. When you send the coach a message, our server sends your message, the last few turns of the conversation for continuity, and a summary of your recent sleep numbers (scores, durations, stage estimates, event counts). Our server does not store the conversation.
- Weekly report. If enabled, our server sends the week's sleep numbers to generate a narrative summary.
Our AI provider is OpenAI, accessed through its API from our servers. Under OpenAI's API terms, data sent through the API is not used to train its models and is retained by OpenAI only for a limited period for abuse monitoring. The app never talks to the provider directly and never holds the provider's credentials; every request goes through our server, which checks that it is you, checks your allowance, and only then makes the call. Every AI-generated text in the app is labelled as such, along with the model that produced it, and every reflection has a "report this" control.
2.4 Purchases
Premium subscriptions are sold through the App Store and Google Play, which handle payment. We never see your card or bank details. We use RevenueCat to validate purchases and keep subscription status in sync; it receives your app user ID (a random identifier we generate), the purchase receipt, and device platform. We store the resulting status (active, trial, expired, plan) so the app can unlock Premium.
2.5 Diagnostics and product analytics
If the app crashes, we may collect a crash report containing the device model, operating system version, app version and the technical trace of the failure, so we can fix it. We may also collect anonymous product-usage events (which screens are used, which features are switched on) to understand what to improve. These never include your recordings, transcripts, dream text, coach conversations or sleep data. We do not use advertising SDKs, we do not do cross-app tracking, and the app does not ask for iOS tracking permission because it does not track.
2.6 The website
sleepstationapp.com is a static site hosted by Vercel. Vercel keeps standard server logs (IP address, time, page requested, browser type) for a short period for security and operations. The site sets no tracking cookies. If you join the waitlist, we store your email address and when you joined, and use it to send one message when the app is available. You can ask us to remove it at any time.
3. Guest mode
You can use Sleep Station without creating an account. In guest mode the app stores everything on your phone and nothing on our servers. If you later turn on sync or an AI feature, the app creates an anonymous user record with our hosting provider so that your data has an owner; that record has no email attached until you add one. Adding an email or signing in with Apple or Google links the anonymous record to your account, so nothing is lost.
4. Why we process your data, and on what basis
Sleep data, snoring and dream content can reveal information about your health and are treated as special-category data where the law (for example the EU and UK GDPR) requires it. We process personal data for these purposes and on these legal bases:
- To provide the service you asked for (tracking your sleep, waking you, keeping your journal, syncing your account): performance of our contract with you, and, for health-related data, your explicit consent given when you start using the relevant feature.
- To generate AI features: your explicit consent, given on the dedicated consent screen and withdrawable in Settings.
- To process subscriptions: performance of our contract with you and our legal obligations.
- To keep the service secure, fix crashes and improve it: our legitimate interests in running a reliable product, balanced against your rights; never in a way that involves the content of your nights or dreams.
- To answer you when you contact us: our legitimate interest in responding, and our legal obligations where you exercise a right.
5. Who we share data with
We do not sell personal data, we do not share it with advertisers or data brokers, and we do not share it with anyone for their own purposes. We use a small number of service providers who process data on our behalf under contract:
| Provider | What they do for us | Where |
|---|---|---|
| Supabase | Hosts our database, authentication and server functions. Holds the data in section 2.2. | Frankfurt, Germany (EU) |
| OpenAI | Generates AI reflections, coach replies and weekly reports (section 2.3), only when you opt in. | United States |
| RevenueCat | Validates subscriptions and keeps their status in sync (section 2.4). | United States |
| Apple, Google | Sign-in (if you choose it), app distribution, payment processing, and push notification delivery. | Global |
| Vercel | Hosts this website (section 2.6). | Global edge network |
We may also disclose data if the law requires it, to protect someone's safety, or as part of a sale or merger of the business, in which case this policy continues to apply to it. We will tell you before your data becomes subject to a different policy.
6. Where your data lives, and international transfers
Data that syncs is stored in the European Union (Frankfurt, Germany). Data that stays on your phone is wherever your phone is. When an AI feature runs, or a purchase is validated, data is transferred to the providers in the United States listed above. We rely on the European Commission's standard contractual clauses, the EU-US Data Privacy Framework where the provider is certified, and equivalent UK mechanisms, to protect those transfers.
7. How long we keep it
- Data on your phone: until you delete it in the app or uninstall the app. Snore clips are the largest item; you can clear them in Settings.
- Data on our servers: for as long as your account exists. When you delete your account, your rows and any stored files are removed from our live systems promptly and from backups within 30 days.
- AI requests: our servers do not keep the content of AI requests or coach conversations. Reflections you asked for are kept with your journal until you delete them or your account. Our AI provider retains API inputs for up to 30 days for abuse monitoring, then deletes them.
- Subscription records: for as long as needed to honour your purchase and to meet accounting and tax obligations.
- Crash reports and usage events: 90 days.
- Emails you send us: as long as needed to deal with your request and keep a record of it.
- Waitlist emails: until we have sent the launch message and for a short period after, or until you ask us to remove yours.
8. Your rights and controls
Most controls are in the app, so you do not have to ask us:
- Export your data and delete everything from Settings → Privacy and your data.
- Turn AI features off in Settings. Reflections you already have stay in your journal until you delete them.
- Stop overnight listening by revoking the microphone permission in your phone's settings; the app will still track motion and run the alarm.
- Use guest mode to keep everything on your phone.
- Delete your account in the app, or from the web at sleepstationapp.com/delete-account.
Depending on where you live you may also have the right to access the personal data we hold about you, to have it corrected, to restrict or object to how we use it, to receive it in a portable format, to withdraw consent at any time (without affecting what was done before you withdrew it), and to complain to a data protection authority. In the EU that is the authority in your country; in the UK it is the Information Commissioner's Office; in Australia it is the Office of the Australian Information Commissioner; in California you may exercise your rights under the CCPA, and we do not "sell" or "share" personal information as those terms are defined there. To exercise any right, email hello@sleepstationapp.com. We will respond within 30 days and will not treat you differently for asking.
9. Security
All traffic between the app, our servers and our providers is encrypted in transit. The database enforces row-level rules so that a record is readable only by the account that owns it, even for our own server code. Credentials for our AI provider and other services live only on our servers, never in the app. On your phone, your session token is kept in the operating system's secure keychain or keystore, and audio and transcripts are kept in the app's private sandbox. You can add a Face ID, fingerprint or PIN lock to the dream journal in Settings. No system is perfectly secure; if we learn of a breach affecting your data we will tell you and the relevant authority as the law requires.
10. Children
Sleep Station is not directed at children and is not intended for anyone under 16. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.
11. Not a medical device
Sleep Station is a consumer wellness app. Sleep stages, scores, snore detection and anything the AI says are estimates and reflections, not diagnoses. The app does not diagnose, treat, cure or prevent any disease or condition, and nothing in it is medical advice. If you are concerned about your sleep, breathing or snoring, please talk to a doctor.
12. Changes to this policy
If we change what we collect or how we use it, we will update this page and change the date at the top. For material changes, the app will tell you and, where the law requires it, ask again for your consent. Earlier versions are available on request.
13. Contact
Next Collective
Email: hello@sleepstationapp.com
Web: sleepstationapp.com