Sonopeace Legal & Privacy Provisions

1. Data Retention & Deletion

We keep your data only for as long as we need it for the purpose it was collected:

Account data (email, name): kept until you delete your account.
Sleep, diary, and AI insight data: kept until you delete your account.
Wearable connection tokens: kept until you disconnect the device or delete your account.
Product analytics (only if you enable it): kept until you turn analytics off or delete your account.
Error, crash, and sync logs: kept for 30 days.
Security and consent audit records: retained, with personal identifiers removed, to meet our legal record-keeping obligations.

Account Deletion

When you delete your account, your sleep, heart-rate, diary, AI insight, and other health-related records are erased from our database, and your sign-in account is removed. Your profile email and name are obfuscated.

A limited set of security and consent audit records is retained for legal compliance, but with your identifiers stripped so the records can no longer be linked to you.

Account history cannot be recovered after deletion.

2. Privacy Policy

Information We Collect

Personal Data: Email address, name, encrypted password.
Health Data: Sleep duration, stages, heart rate, HRV, respiratory rate, SpO2, workouts, and caffeine records from connected wearables or Apple Health when granted.
Device Data: Device model, OS version, notification tokens.

How We Use Your Data

To provide sleep tracking, summaries, trends, reminders, and account features.
To generate personalized AI sleep insights and coaching — only when you opt in (provider: OpenAI; not used for model training or advertising).
To collect anonymous product analytics — only when you opt in (no health data is included).

3. Cookie Policy

We use essential cookies and similar technologies for:

Authentication: To keep you logged in.
Security: To prevent fraud and abuse.
Preferences: To remember your settings.

4. Research & Third-Party Data Sharing

Current status: Sonopeace does not currently share your data with any external research or commercial partners. There is no active research-sharing or third-party-sharing pipeline today.

The optional research and data-sharing consents in the app are forward-looking. They become operative only if and when such a pipeline is introduced — at which point this policy will be updated to name the partner categories and the data flow before any data is shared.

If sharing ever becomes active, only anonymized, aggregated data would be shared, and it would be irreversibly stripped of personal identifiers so it could not be linked back to you. No personally identifiable information would be shared.