Privacy Policy

App: Sleeply

Developer: Corbello Inc.

Effective Date: June 15, 2026

Last Updated: June 15, 2026

Please read this Privacy Policy carefully before using the Sleeply mobile application ("Sleeply" or the "App") operated by Corbello Inc. ("Corbello," "we," "our," or "us"). This Privacy Policy explains how Sleeply handles information when you download, install, access, or use the App.

Sleeply is designed around local processing. The App uses sleep science, device motion, Apple Health data, and user-provided preferences to help you understand your sleep schedule, sleep debt, daily energy, reminders, smart alarms, and sleep habits.

Sleeply’s core sleep and wellness features are designed to run locally on your device. Sleeply may also transmit limited diagnostics, product analytics, crash, performance, subscription, app-event, sleep-classification diagnostic, and advertising-attribution information to operate, troubleshoot, debug, secure, measure, and improve the App, as described in this Privacy Policy.

1. At a Glance

• Sleeply’s core sleep and wellness features are designed to run locally on your device.

• Sleeply reads Apple Health sleep and step data only if you grant permission.

• Sleeply may process device motion and activity information only if you grant permission.

• Sleeply does not sell your sleep or health data.

• Sleeply does not use Apple Health, sleep, motion, or sleep-classification data for advertising, marketing, sale, data brokerage, or eligibility decisions.

• Sleeply may collect limited diagnostics, product analytics, crash, performance, subscription, app-event, and sleep-classification diagnostic signals to operate, troubleshoot, debug, secure, and improve the App.

• Sleeply may use Firebase, PostHog, RevenueCat, Apple, Meta, and similar service providers for app operations, diagnostics, product analytics, crash reporting, performance monitoring, subscription management, purchase entitlement management, and advertising measurement.

• Sleeply may use Apple’s SKAdNetwork and limited advertising-attribution tools to measure the performance of Sleeply’s own ad campaigns.

• Sleeply may share limited conversion events, such as trial started or subscription purchased, with Meta Platforms through RevenueCat’s server-side integration. This integration uses Meta’s anonymous app identifier where available.

• Sleeply does not share Apple Health data, raw sleep data, raw motion data, exact sleep timelines, sleep-classification diagnostics, notes, journal content, or full user profiles with Meta or other advertising parties.

• Sleeply does not access the device advertising identifier (IDFA), does not send IDFA, IDFV, or IP address to Meta for this integration, and does not show an App Tracking Transparency prompt under the current App design.

• Sleeply may use PostHog for metadata-only product analytics, such as onboarding funnel measurement, using an anonymous distinct ID, an internal app installation identifier, locale, country, app version, and environment. Sleeply does not send Apple Health data, sleep data, motion data, sleep-classification diagnostics, quiz answers, notes, journal content, IDFA, name, or email to PostHog under the current App design.

2. Local Sleep and Wellness Data

This section describes information that Sleeply may process locally on your device to provide App features. This information is used to provide Sleeply’s sleep tracking, sleep schedule, daily energy, reminder, smart alarm, progress, and recommendation features.

Under the current App design, core sleep and wellness content is processed locally on your device. Sleeply may send limited de-identified or pseudonymous sleep-classification diagnostic signals off device to help detect and fix non-crashing logic bugs, as described in the “Sleep Classification Diagnostic Signals” section below.

Apple Health and HealthKit Data

If you grant permission, Sleeply may read Apple Health sleep analysis data and Apple Health step count data.

Sleeply uses this data to provide App features such as sleep classification, sleep summaries, energy forecasts, smart schedule recommendations, progress views, and reminder timing.

Sleeply does not write data to Apple Health unless a future version of the App clearly asks for permission and updates this Privacy Policy.

Sleeply does not use HealthKit data for:

• Advertising.

• Marketing.

• Analytics profiling.

• Sale to third parties.

• Data brokerage.

• Credit, employment, insurance, housing, or other eligibility decisions.

Sleeply does not send raw Apple Health samples to Firebase, PostHog, or Meta. Sleeply may send limited diagnostic flags or categories, such as whether Apple Health data was available to the classifier or whether an expected Apple Health input was missing, to help debug App functionality. Sleeply does not share Apple Health data with Meta, PostHog, or other advertising or product-analytics parties.

You can manage or revoke Sleeply’s Apple Health permissions at any time in iOS Settings or the Apple Health app. If you revoke permission, features that depend on Apple Health data may stop working or may rely on other available on-device signals.

Apple Health and iOS privacy controls are governed by Apple’s terms and privacy policies.

Motion and Activity Data

If you grant permission, Sleeply may process device motion and activity information to help infer rest windows, remove awake movement, support tracking sessions, and improve on-device sleep classification.

Motion and activity data is processed locally for App functionality. Sleeply does not send raw motion samples to analytics or advertising services. Sleeply may send limited derived diagnostic flags or categories, such as whether motion data was available or whether motion signal quality was low, medium, or high, to help troubleshoot App functionality. Sleeply does not share raw motion data with Meta, PostHog, or other advertising or product-analytics parties.

User-Provided Inputs

Sleeply may ask you questions during onboarding or in settings. These inputs may include schedule information, sleep goals, sleep challenges, age range, gender selection, student status, sleep quality answers, wellness goals, reminders, and other preferences you choose to provide.

These inputs are used to personalize Sleeply’s sleep schedule recommendations, reminders, progress views, and educational content. They are primarily stored and processed locally on your device under the current App design.

Sleeply does not send your notes, journal content, exact schedules, exact goals, full onboarding answers, or quiz answers to Firebase, PostHog, or Meta for advertising, marketing, sale, data brokerage, or eligibility decisions. Sleeply may send limited diagnostic or product-analytics signals related to App functionality, onboarding funnel progress, classifier behavior, or error states, as described in this Privacy Policy.

Do not enter information that you do not want stored on your device.

Sleeply-Generated Outputs

Sleeply may generate or store sleep sessions, sleep logs, sleep estimates, sleep debt, wake estimates, circadian energy outputs, planner reminders, recommendation state, smart alarm settings, and sleep schedule recommendations.

These outputs are generated to provide the App’s features. Under the current App design, these outputs are primarily processed locally on your device. Sleeply may send limited de-identified or pseudonymous sleep-classification diagnostic signals related to these outputs to detect, debug, and improve non-crashing logic issues in the sleep classification pipeline.

Sleeply does not share raw sleep data, exact sleep timelines, sleep-classification diagnostics, or sleep recommendations with Meta or other advertising parties.

3. Off-Device Operational Data

Sleeply may collect or process limited technical and operational information off device to monitor app status, manage subscriptions, troubleshoot problems, measure reliability, debug non-crashing logic issues, measure advertising performance, and improve product quality.

This operational information is separate from full local sleep and wellness content. Sleeply’s diagnostics, product analytics, subscription, and advertising-attribution systems are designed to avoid sending raw HealthKit samples, raw motion samples, exact sleep timelines, notes, journal content, direct identifiers, full user profiles, quiz answers, or sleep-classification diagnostics to Meta or other advertising parties. Sleeply also does not send Apple Health data, sleep data, raw motion data, quiz answers, IDFA, name, or email to PostHog under the current App design.

Diagnostics, Product Analytics, and App Health Data

Sleeply may collect limited technical and operational information to monitor app status, app health, onboarding flow completion, crashes, non-fatal errors, performance, product reliability, and non-crashing logic issues.

This may include:

• App events and product-interaction metadata, such as screen views, onboarding step progress, feature usage, subscription flow events, error states, and operational events.

• Crash logs and non-fatal error reports.

• App version and build number.

• iOS version.

• Device model or platform information.

• Timestamps.

• Pseudonymous or anonymous installation identifiers or app user identifiers generated for diagnostics, product analytics, crash reporting, performance monitoring, or subscription management, including an internal app installation identifier where used.

• Sanitized event names, messages, and event properties.

• Onboarding funnel metadata, such as step identifiers, step index, step completion state, and similar metadata-only properties.

• Metadata such as anonymous distinct ID, internal app installation identifier, locale, country, app version, and environment.

• Sleep-classification diagnostic signals, such as classifier version, error reason codes, confidence buckets, duration buckets, timing-window categories, data-source availability flags, fallback-path flags, and sanitized pipeline state.

Sleeply is designed not to log raw HealthKit samples, raw motion samples, exact sleep timelines, notes, journal content, direct identifiers, full user profiles, quiz answers, or full recommendation content into Firebase or PostHog for advertising, marketing, sale, data brokerage, or eligibility decisions.

This diagnostic information is not the same as “anonymous” data in all legal contexts. Some identifiers may be pseudonymous because they can distinguish one app installation or device from another.

Sleep Classification Diagnostic Signals

Sleeply may send limited de-identified or pseudonymous sleep-classification diagnostic signals to Firebase or similar service providers to detect, debug, and improve non-crashing logic issues in the sleep classification pipeline.

These diagnostic signals may be used to understand issues such as:

• Sleep not being generated correctly.

• Empty or missing sleep estimates.

• Low-confidence sleep classification.

• Unexpected fallback behavior.

• Impossible or inconsistent classifier output.

• Missing expected inputs.

• Pipeline error states.

• Reliability problems across App versions or classifier versions.

Sleep classification diagnostic signals may include:

• App version and build number.

• Classifier version.

• Error reason codes.

• Data-source availability flags, such as whether Apple Health, motion, or manual input data was available.

• Confidence buckets, such as low, medium, or high.

• Duration buckets, such as short, expected, or long.

• Timing-window categories, such as overnight, nap, irregular, or unknown.

• Fallback-path flags.

• Sanitized pipeline state.

• Non-fatal error information related to classifier behavior.

Sleeply does not use these diagnostic signals for advertising, marketing, sale, data brokerage, or eligibility decisions. Sleeply does not share these diagnostic signals with Meta or other advertising parties.

Sleeply is designed not to send the following to Firebase as sleep-classification diagnostic signals:

• Raw HealthKit samples.

• Raw motion samples.

• Exact sleep timelines.

• Exact sleep start and end timestamps.

• Notes or journal content.

• Exact schedule preferences.

• Direct identifiers such as your name or email address.

• Full user profiles.

• Payment card information.

• Data used for credit, employment, insurance, housing, or other eligibility decisions.

Firebase

Sleeply may use Firebase services, including Firebase Analytics, Firebase Crashlytics, and Firebase Performance Monitoring, to understand app usage, diagnose crashes and non-fatal errors, monitor performance, identify non-crashing logic issues, and improve reliability.

Firebase may receive app-event data, crash data, non-fatal error data, performance data, device and app information, operating system information, pseudonymous identifiers, and limited sleep-classification diagnostic signals.

Firebase data is not forwarded to Meta for advertising measurement under the current App design. Sleeply’s use of Firebase is designed to avoid sending raw HealthKit samples, raw motion samples, exact sleep timelines, notes, journal content, direct identifiers, or full user profiles to Firebase for advertising, marketing, sale, data brokerage, or eligibility decisions.

PostHog

Sleeply may use PostHog to understand product usage, onboarding funnel performance, product interaction flows, and whether important App experiences are working as intended.

PostHog may receive metadata-only product analytics, including an anonymous distinct ID, an internal app installation identifier, locale, country, app version, environment, onboarding funnel events, and metadata-only properties such as step identifiers and step index.

Sleeply does not send Apple Health data, sleep data, raw motion data, exact sleep timelines, sleep-classification diagnostics, quiz answers, notes, journal content, IDFA, name, or email to PostHog under the current App design.

PostHog acts as a service provider or processor for product analytics on Corbello’s behalf. Sleeply does not use PostHog to track you across other companies’ apps or websites for advertising.

Under the current App design, Sleeply uses PostHog US Cloud. This means PostHog analytics information may be stored or processed in the United States. If you use Sleeply outside the United States, this may involve transferring limited analytics information to the United States or other countries where PostHog or its service providers operate. Where required, Corbello will rely on appropriate safeguards for international transfers, such as data-processing terms or standard contractual clauses.

PostHog Privacy Policy: https://posthog.com/privacy

RevenueCat and App Store Purchases

Sleeply may use RevenueCat to manage subscriptions, purchases, entitlements, trials, renewals, cancellations, refunds, restore-purchase flows, and advertising attribution integrations.

RevenueCat may process purchase status, subscription entitlement information, trial status, renewal status, cancellation status, refund status, App Store receipt data, product identifiers, transaction-related data, pseudonymous app user identifiers, and limited advertising-attribution information needed to measure Sleeply’s own ad campaigns.

Sleeply does not send sleep logs, HealthKit data, raw motion samples, notes, journal content, exact schedules, full user profiles, sleep-classification diagnostics, or sleep recommendations to RevenueCat for advertising, marketing, sale, data brokerage, or eligibility decisions.

If you purchase a subscription through the App Store, Apple processes your payment, transaction, subscription, refund, and App Store account information according to Apple’s terms and privacy policies. Corbello does not directly receive your full payment card information from Apple.

Advertising and Attribution

Sleeply may use Apple’s SKAdNetwork and limited advertising-attribution tools to measure the performance of Sleeply’s own ad campaigns.

Sleeply may share limited advertising-attribution information with Meta Platforms, Inc. through RevenueCat’s server-side Conversions API integration. This may include Meta’s anonymous app identifier where available, such as $fbAnonId, and conversion events such as trial started, subscription purchased, renewal, cancellation, or refund status.

Under the current App design, Sleeply does not access the device advertising identifier (IDFA), does not send IDFA, IDFV, or IP address to Meta for this integration, and does not show an App Tracking Transparency prompt. Sleeply uses SKAdNetwork and limited advertising-attribution information to measure Sleeply’s own ad campaigns and does not use this integration for cross-app user-level tracking.

Sleeply does not share Apple Health data, raw sleep data, raw motion data, exact sleep timelines, sleep-classification diagnostics, notes, journal content, direct identifiers, or full user profiles with Meta or other advertising parties.

Meta may process information it receives according to Meta’s own terms and privacy policies. Meta Privacy Policy: https://www.facebook.com/privacy/policy/

Other Service Providers

Sleeply may use other service providers to host, secure, monitor, support, or operate App infrastructure and business systems. If those providers process personal information, we use them only for App operations and do not permit them to use your information for their own advertising or unrelated purposes unless described in this Privacy Policy.

Limited sleep-classification diagnostic signals are different from cloud sync, account storage, full sleep-data backup, or machine-learning training on user sleep content. If Sleeply later introduces optional cloud sync, backup, account storage, or machine-learning features that require transmitting raw sleep or health-related content off device, Sleeply will update this Privacy Policy and request any required consent before collecting or transmitting that data.

4. Third-Party Providers and Purposes

Sleeply may use the following third-party providers or platform services:

• Apple: Apple Health, App Store purchases, subscriptions, refunds, device permissions, iOS notifications, backups, and platform services. Apple Privacy Policy: https://www.apple.com/legal/privacy/

• Firebase / Google: analytics, crash reporting, non-fatal error reporting, performance monitoring, app health, operational diagnostics, and sleep-classification diagnostics. Firebase Privacy and Security: https://firebase.google.com/support/privacy

• PostHog: metadata-only product analytics, onboarding funnel measurement, product interaction analysis, app version/environment analysis, and product improvement. PostHog may receive an anonymous distinct ID, internal app installation identifier, locale, country, app version, environment, and onboarding funnel metadata. PostHog Privacy Policy: https://posthog.com/privacy

• RevenueCat: subscription management, entitlement management, purchase status, trials, renewals, cancellations, refunds, restore-purchase flows, and server-side advertising attribution integrations. RevenueCat Privacy Policy: https://www.revenuecat.com/privacy/

• Meta Platforms, Inc.: advertising attribution and measurement for Sleeply’s own ad campaigns, including limited conversion events and Meta’s anonymous app identifier where available, sent through RevenueCat’s server-side integration and SKAdNetwork-supported measurement. Meta Privacy Policy: https://www.facebook.com/privacy/policy/

5. How We Use Information

Sleeply uses information to:

• Provide sleep tracking, sleep schedule, energy, reminder, smart alarm, and progress features.

• Personalize sleep and wellness recommendations on device.

• Read Apple Health sleep and step data with your permission.

• Process device motion with your permission.

• Save your preferences and App state locally.

• Manage subscriptions, entitlements, trials, purchases, cancellations, refunds, and restore-purchase flows.

• Monitor app health, crashes, reliability, and performance.

• Understand whether onboarding and important product flows are working.

• Measure metadata-only product interactions and onboarding funnel progress to improve the App.

• Detect, debug, and improve sleep-classification logic, including non-crashing pipeline errors and unexpected sleep-generation results.

• Measure the performance of Sleeply’s own advertising campaigns using SKAdNetwork and limited advertising-attribution information.

• Prevent, detect, and fix technical problems.

• Respond to support requests if you contact us.

• Comply with legal obligations and enforce our rights.

6. How We Share Information

Sleeply does not sell your sleep or health data.

We may share limited information in the following situations:

• Service providers. We may share information with vendors that help us operate, monitor, secure, troubleshoot, support, measure, or improve Sleeply, including providers used for product analytics, onboarding funnel measurement, crash reporting, non-fatal error reporting, performance monitoring, sleep-classification diagnostics, subscription management, purchase entitlement management, advertising attribution, support, hosting, or business operations.

• PostHog product analytics. We may share metadata-only product analytics with PostHog, including an anonymous distinct ID, internal app installation identifier, locale, country, app version, environment, onboarding funnel events, and metadata-only event properties. This does not include Apple Health data, sleep data, raw motion data, exact sleep timelines, sleep-classification diagnostics, quiz answers, notes, journal content, IDFA, name, or email under the current App design.

• Apple and platform providers. If you use Apple Health, App Store subscriptions, device permissions, iOS notifications, iCloud, backups, or other Apple-controlled services, Apple may process information according to Apple’s terms and privacy policies.

• Meta advertising attribution. We may share limited advertising-attribution information with Meta Platforms through RevenueCat’s server-side integration and SKAdNetwork-supported measurement to measure Sleeply’s own ad campaigns. This does not include Apple Health data, raw sleep data, raw motion data, exact sleep timelines, sleep-classification diagnostics, notes, journal content, direct identifiers, or full user profiles.

• Legal and safety purposes. We may disclose information if we believe it is necessary to comply with law, legal process, lawful requests, or to protect the rights, safety, security, or property of Corbello, users, or others.

• Professional advisors. We may share information with lawyers, auditors, accountants, insurers, or other professional advisors where reasonably necessary for the services they provide to us.

• Business transfers. If Corbello is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction, information may be transferred or disclosed as part of that transaction, subject to applicable law.

7. What We Do Not Do

Sleeply does not:

• Sell your sleep or health data.

• Use HealthKit data for advertising, marketing, analytics profiling, sale, or data brokerage.

• Use HealthKit data for credit, employment, insurance, housing, or other eligibility decisions.

• Share Apple Health data, raw sleep data, raw motion data, exact sleep timelines, sleep-classification diagnostics, notes, journal content, or full user profiles with Meta or other advertising parties.

• Send IDFA, IDFV, or IP address to Meta for the current advertising-attribution integration.

• Send Apple Health data, sleep data, raw motion data, exact sleep timelines, sleep-classification diagnostics, quiz answers, notes, journal content, IDFA, name, or email to PostHog under the current App design.

• Use PostHog to track you across other companies’ apps or websites for advertising.

• Send raw HealthKit samples, raw motion samples, exact sleep timelines, notes, journal content, direct identifiers, or full user profiles to Firebase for advertising, marketing, sale, data brokerage, or eligibility decisions.

• Send sleep logs, HealthKit data, raw motion samples, notes, journal content, exact schedules, full user profiles, sleep-classification diagnostics, or sleep recommendations to RevenueCat for advertising, marketing, sale, data brokerage, or eligibility decisions.

• Use your sleep or health data to make credit, employment, insurance, housing, or eligibility decisions.

• Provide medical diagnosis or treatment.

Sleeply may send limited de-identified or pseudonymous sleep-classification diagnostic signals to Firebase or similar service providers to help detect and fix non-crashing App logic bugs, as described in this Privacy Policy.

8. Storage, Retention, and Deletion

Local App Data

Sleeply stores sleep and wellness data locally on your device using iOS storage technologies. Local data remains on your device unless you delete it, delete the App, reset your device, or use operating-system backup, restore, migration, or sync features controlled by Apple or your device settings.

You can delete local Sleeply data by deleting the App from your device. Some iOS backup or restore systems may retain copies according to your Apple device and iCloud settings.

Apple Health and Device Permissions

You can revoke Apple Health permissions in iOS Settings or the Apple Health app.

Corbello does not control Apple Health, iCloud, iOS backups, App Store purchase records, or third-party provider retention rules.

Diagnostics, Product Analytics, Sleep-Classification Diagnostics, Subscription, and Attribution Data

Diagnostic, crash, product analytics, performance, sleep-classification diagnostic, subscription, and advertising-attribution data processed by third-party service providers may be retained according to their retention settings, legal obligations, and service policies.

Subscription and purchase records are handled by Apple and RevenueCat. Deleting Sleeply from your device does not automatically cancel an App Store subscription. You must manage subscriptions through your Apple ID subscription settings.

Privacy Requests

You can request help with privacy questions by contacting us at sleeply.contact@corbello.co. We may need limited information to verify and process your request.

Because Sleeply’s sleep and wellness data is primarily stored locally on your device, Corbello may not be able to access or delete that local data for you.

Some pseudonymous diagnostic, subscription, or advertising-attribution records processed by service providers may not be directly associated with your identity and may be difficult to locate or delete unless legally required and technically feasible.

9. Advertising Measurement Choices and California Privacy Rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, or opt-out regarding certain personal information.

Sleeply does not sell your sleep or health data. Sleeply may share limited advertising-attribution information with Meta to measure Sleeply’s own ad campaigns. Depending on applicable law, this may be considered a “share” of personal information for advertising measurement or cross-context behavioral advertising purposes.

If applicable law gives you the right to opt out of sale or sharing of personal information, you may contact us at sleeply.contact@corbello.co. We may need limited information to verify and process your request. Corbello will honor applicable privacy requests as required by law and as technically feasible.

You may also manage some advertising and privacy preferences through your Apple device settings and Meta account settings, where available.

10. Support Communications

If you contact us for support, we may receive your email address, message content, and any information you choose to provide. Do not send sensitive health information in support messages unless necessary.

We may use support communications to respond to you, troubleshoot issues, improve the App, and maintain business records.

11. Children’s Privacy

Sleeply is not intended for children under 13. If you are under 18, you should use Sleeply only with permission from a parent or legal guardian.

If we learn that we have collected personal information from a child under 13 without required consent, we will take reasonable steps to delete it.

12. Security

We use reasonable technical, administrative, and organizational measures designed to protect information we process. However, no app, device, network, storage system, or transmission method is completely secure.

You are responsible for maintaining the security of your device, Apple ID, device passcode, biometric settings, and backups.

13. International Users

Corbello Inc. is based in the United States. If you use Sleeply outside the United States, information processed by our service providers may be processed in the United States or other countries where those providers operate. Under the current App design, PostHog analytics information may be stored or processed in the United States through PostHog US Cloud. Where required, Corbello will rely on appropriate safeguards for international transfers, such as data-processing terms or standard contractual clauses.

14. Future Features and Changes to Data Practices

Sleeply does not currently upload raw sleep or health-related content to Corbello servers for cloud processing, cloud sync, backup, account storage, or machine-learning analysis.

Limited sleep-classification diagnostic signals used to debug App functionality are not the same as optional cloud sync, account storage, full sleep-data backup, or machine-learning training on user sleep content.

If Sleeply introduces optional cloud sync, backup, account storage, or machine-learning features that require transmitting raw sleep or health-related content off device, we will update this Privacy Policy and request any required consent before collecting or transmitting that data.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by updating the “Last Updated” date at the top of this page.

Your continued use of Sleeply after an updated Privacy Policy becomes effective means you accept the updated policy, except where additional notice or consent is required by law or platform rules.

16. Contact Us

If you have any questions about this Privacy Policy, please contact:

Corbello Inc.
Email: sleeply.contact@corbello.co