Privacy policy
In short
- We collect what Eunoia needs to work: your account, what you create, your settings, and the sleep information you choose to give it.
- We do not sell your data, show ads, or track you across other apps and websites.
- Your data is stored with our hosting provider, Supabase. Emails go out through Resend, and notifications through Apple.
- You can delete your account and everything in it at any time, in the app.
Who we are
Eunoia is an iPhone app for winding down and sleeping well, and this website is its home. "We" means the team that makes Eunoia. For anything about your data, write to support@eunoiaforsleep.com.
What we collect
- Your account
- Your email address and password. The password is stored only as a secure hash that nobody can read. If you sign in with Apple or Google, we receive an identifier from them, your email address (with Apple, possibly a private relay address) and your name if you share it.
- Your profile and settings
- Your first and last name, the avatar you pick, your time zone, your bedtime and wake-up time, your alarm and reminder settings, and which notifications and emails you want.
- What you create
- Your routines, and the stories you record or import: their titles, descriptions and audio, including parts of chapters you have not published yet. We also keep your place in each story.
- Sleep information
- What you played and when (white noise, stories and routines), your alarm's events (when it rang, and when you snoozed or stopped it), and your answers to the morning check-in (such as how you slept, how long it took to fall asleep, whether you woke in the night and how you feel). From these we work out a summary of each night and a weekly report. They are estimates for your own use, not medical information.
- Your devices
- A push notification token for each device where you allow notifications, and whether it runs a test or an App Store version of the app. When you send feedback, also the app version, the iOS version and the device model.
- Feedback and messages
- What you send us through the feedback form or by email.
We do not collect your location, contacts or photos, advertising identifiers, or analytics about how you move through the app. The microphone is used only while you record a story.
How we use it
- To run Eunoia for you: signing in, playing and downloading audio, running your routines, alarms and reminders, and keeping your stories and settings safe if you change phones.
- To work out your nightly summaries and weekly report.
- To send the emails and notifications you ask for: sign-in and security codes, notices when your password or email address changes, the weekly report, announcements of new sounds and stories if you turn them on, a thank-you when you send feedback, and a confirmation when you delete your account.
- To answer your messages and feedback, and to improve Eunoia based on what you tell us.
- To keep the service secure, for example by limiting repeated sign-in attempts.
Where the law asks for a legal basis: we use your data to provide the service you signed up for; we send optional notifications and emails because you turned them on, and you can turn them off at any time; and we keep the service secure and improve it because it is in the legitimate interest of everyone who uses it.
Who helps us
We do not share your data with anyone else, except the companies that run parts of Eunoia for us, and only for that purpose:
- Supabase hosts our database, the audio files, sign-in and the small programs that send emails and notifications.
- Resend delivers our emails, so it receives your email address and each email's content.
- Apple delivers push notifications, so it receives your device's token and each notification's text. If you use Sign in with Apple, Apple handles that sign-in.
- Google handles sign-in, only if you choose Sign in with Google.
These companies may process data in the United States and other countries, under safeguards such as the European Commission's standard contractual clauses. We would disclose data to authorities only when the law requires it.
How long we keep it
- Everything is kept while you have an account, except: the raw record of what you played and of your alarm is deleted after 400 days (your nightly summaries stay), and notification tokens that have not been used for 270 days are deleted.
- When you delete your account, your account and everything linked to it, including your audio files, are deleted straight away. Copies in our hosting provider's backups disappear as the backups are replaced, within about a week.
- Feedback you sent is kept without any link to your account. Ask us and we will delete it.
- Emails you send to support are kept as long as we need them to help you.
Your choices and rights
- You can see and change your details and settings in the app.
- You can turn off each kind of notification and email in the app, in Profile, and every weekly report email has an unsubscribe link.
- You can delete your account at any time.
- You can ask us for a copy of your data, or to correct or delete it, by writing to support@eunoiaforsleep.com from the email address of your account. We answer within a month.
- If you are unhappy with how we handle your data, you can complain to the data protection authority where you live. We would be grateful for the chance to put it right first.
Security
Everything travels over encrypted connections. Access rules in our database let each person reach only their own data, audio files are private and shared only through short-lived links, and passwords are stored only as hashes.
Children
Eunoia is not meant for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal information, write to us and we will delete it.
Changes
When this policy changes, we update the date at the top. If a change matters to how your data is used, we will tell you in the app or by email before it takes effect.