Privacy Policy

This policy explains what the Somnr iPhone app collects, what stays on your iPhone, what leaves it, who receives it and how to delete it. It describes the app as it is on the date above.

Somnr is published by KAAK (Kamîl Abdel-Kader, EI), a sole proprietorship (micro-entreprise) based in Paris, France (“we”, “us”). We are the data controller for the data described here. You can reach us at contact@sumpuff.com.

Some features are turned on gradually, need a recent version of iOS, or can be switched off remotely. When this policy says a feature “may be available”, it means it can be missing from your app.

• Sound from the microphone and movement from the motion sensors are analyzed on your iPhone. No audio and no raw motion data ever leave it.
• Camera frames used by the Sunlight alarm are analyzed on your iPhone. No image is saved or sent.
• Your account is anonymous: no email, no phone number, no password.
• Your nights, scores and Apple Health data are health data. We use them to run the features you use and to understand how the app is used. We never sell them and never give them to advertising networks. Some values computed from them reach our analytics and subscription-screen providers, as described below.
• Some data does leave your iPhone: usage analytics (including your onboarding answers and night summaries), the sleep summary the AI coach reads if you turn it on, a selfie you choose to send for your character, the text of dreams you choose to illustrate, and your sleep status if you share it with friends. Each case is described below.
• We do not sell your data, and there are no ads in Somnr.
• You can delete your account and its data from the app at any time.

The first time you open Somnr, the app creates an anonymous account with our authentication provider, Supabase. It is a random identifier. We never ask for your email, your phone number or a password, and there is no sign-in with Apple or Google.

This identifier links your data on our server. It is also given to the service providers listed below (analytics, experiments, paywall, purchases, attribution), so that your sessions and purchases can be told apart. Your session key is stored in the iOS Keychain on your iPhone.

Microphone

When you track a night with your iPhone (a Boost night), Somnr listens to the sounds of the night to detect movement and snoring. The sound is analyzed live, in memory, then discarded. No audio is recorded, saved or uploaded. What remains are numbers per minute, such as minutes of snoring. These numbers are stored on your iPhone and can be part of the night summaries described further down (analytics, AI coach).

When you tell a dream out loud, your speech is turned into text on your iPhone by Apple’s on-device speech recognition. The audio never leaves your iPhone. If on-device recognition is not available, you type your dream instead.

Motion

Somnr reads your iPhone’s motion sensors during a Boost night, and the activity history iOS keeps (for example stationary or walking), to estimate when you fall asleep and wake up. Raw motion data is reduced on your iPhone to a movement level per minute and never leaves it.

Camera

The Sunlight alarm may ask you to point the back camera at daylight to finish waking up. Frames are analyzed in memory on your iPhone to measure brightness and color temperature. No photo or video is saved, shown elsewhere or sent. The resulting numbers (brightness in lux, color temperature in kelvin) are kept on your iPhone and included in our analytics events.

The front camera is used only if you choose to take a selfie (see “Your selfie and your character”). Your Day 1 and Day 30 photos are stored only on your iPhone.

Apple Health

If you allow it, Somnr reads your sleep and step history from Apple Health to score your nights. Somnr never writes to Apple Health. This data is processed on your iPhone. Values computed from it can leave your iPhone: your nights, in the summary sent to the AI coach if you turn it on; your sleep score, rank, sleep debt and energy age, sent to our analytics provider (Amplitude) and our subscription-screen provider (Superwall); a summary of each night, sent to Amplitude; and, if you share your status with friends or Live Sleep, the length and rank of your night. All of this is described below.

Screen Down

Screen Down may be available on iOS 16 and later. It uses Apple’s Screen Time frameworks (Family Controls, Managed Settings and Device Activity) with your permission. iOS gives Somnr the apps you choose to block as opaque tokens: we cannot see their names, and we never receive your app usage or browsing history. Your selection, your schedule and your break counts are stored on your iPhone, in a space shared only with Somnr’s own Screen Down extensions. If you share your status with friends, your morning status also includes whether you kept Screen Down that day and your count of clean nights (friends never see the count).

Everything else

Your night history, scores, check-ins, alarms, plan, coach conversations, the doctor report you can generate and your photos are stored on your iPhone. The doctor report is created on your iPhone and only leaves it if you share it yourself.

AI coach (optional, off until you turn it on)

The AI coach writes a morning read of your night, a weekly review, and answers your questions. It does nothing until you turn it on, and you can pause it or turn it off in the app.

When it is on, each request sends a sleep summary to our server: your sleep score, bed and wake times, durations, estimated stages, awakenings, restlessness, minutes of snoring, how rested you felt, alarm details, your recent nights, your plan and check-ins, and your profile (first name, age, sleep need, usual schedule, goals, struggles and onboarding answers). For a question, it also sends your message and the earlier messages of that day’s conversation. Nights read from Apple Health are included. Raw audio and raw motion are never included.

Our server sends this to Anthropic (Claude), which generates the answer as our service provider. Morning reads and weekly reviews are stored on our server, linked to your account, so a night or a week is only processed once. Your questions and the coach’s chat answers are not stored on our server: they stay on your iPhone. What Anthropic keeps is described in “What the AI providers keep” below.

Your selfie and your character (optional)

During onboarding you can take a selfie to shape your character, or skip it. If you take one, a reduced copy is sent once to our server, which passes it to Anthropic (Claude). The model returns only character features: skin tone, face shape, hairstyle, hair color, glasses and facial hair. The photo is held in memory on our server for that request and is not stored there. Your copy stays on your iPhone as your Day 1 photo.

Ten-Year Face may be available: it shows your face after ten years of short nights and after ten years of full sleep. When you use it, a reduced copy of your selfie is sent to our server, which passes it to OpenAI’s image model. The two portraits come back to your iPhone and are stored only there. The photo is not stored on our server; we only count how many times your account used the feature.

Dreams (optional, may be available)

If you choose to illustrate a dream, the text of your dream (never the audio) is sent to our server. Anthropic (Claude) writes a title, a short reading and a description of the scene; OpenAI’s image model draws the picture from that description; the picture is then checked by an automatic moderation step (OpenAI and Anthropic). The text and the picture are stored on our server, linked to your account, so you can find them again, until you delete the dream or your account. A copy of the picture is kept on your iPhone.

Friends (may be available)

When friends are available and you track a night, the app sends your status to our server: asleep since a given time, then up since a given time with the length of your night, and in the morning the rank of your night (for example Nova or Comet). This is on by default so friends you add can see it. Turn off “Show when I’m asleep” in your Profile to stop it; the server then deletes your status. We keep only your latest status. An “asleep” status is hidden after 60 minutes without an update, an “up” status after 18 hours.

A friend sees: the name they gave you, or your display name (your first name from onboarding by default, 24 characters at most); whether you are asleep or up and since when; the length of your night once you are up; and, if “Show my character and rank” is on, your character (its features, never your photo), your rank of the night and your Screen Down mark. Friends never see your photo, your sleep score, your stages, your notes or your dreams.

Each account has a 6-character invite code. Anyone who has your code can add you as a friend, up to 10 friends. When you remove a friend, each of you stops seeing the other; we keep a record that the friendship existed and when it ended, without the names you gave each other. A friend can send you a “wake up” notification.

Live Sleep (may be available)

You can pair with one person using a single-use code. While you share Live Sleep, your partner sees your night on their Lock Screen as a Live Activity: your phase, a short state label, the minutes you have slept and your target wake time, then your wake time and the score of your night. To deliver these updates, your partner’s Live Activity push tokens are stored on our server. You can stop sharing or end the pairing in the app.

Push notifications

If you allow notifications, your iPhone’s push token (from Apple Push Notification service) is stored on our server, linked to your account, to send you friend wake-ups, Live Sleep updates and the result of a shared video link. Your alarms and reminders are scheduled on your iPhone and do not go through our server.

Shared video links

You can share a TikTok, Instagram or YouTube link to Somnr from the iOS share sheet to get a verdict on a routine. The link (and your push token, to tell you when the result is ready) is sent to our server. Our server downloads the public video (for Instagram, through a third-party API on RapidAPI), extracts its audio, transcribes it with OpenAI (Whisper), and asks OpenAI (GPT-4o) to extract the routine and write a verdict. The downloaded files are deleted after processing. The link, the video’s title and creator handle, the steps and the verdict are stored on our server, linked to your account.

What the AI providers keep

Anthropic and OpenAI process what we send them as our service providers, under their business terms for developers. Neither uses it to train its models. Anthropic deletes it within 30 days, unless a request is flagged under its usage policy (then it can be kept up to 2 years) or the law requires longer. OpenAI keeps requests for up to 30 days to detect abuse, unless the law requires longer; it keeps no copy of audio transcriptions (Whisper) or of moderation checks.

Sleep summaries for research (optional)

Some versions of the app offer a setting called “Share anonymous sleep summaries” to help improve sleep detection. It is off by default. If you turned it on, a summary of each night (durations, stages, awakenings, restlessness, minutes of snoring, how rested you felt, alarm details) and your calibration settings are stored in our database. These rows are linked to your anonymous account identifier, so they are pseudonymous rather than anonymous. No audio, raw motion or location is included.

Analytics (Amplitude)

We use Amplitude to understand how the app is used. It receives your account identifier, a random device identifier, your device identifier for vendors (IDFV) and the events of your use: screens viewed, features used, purchases and paywall views. It never receives your advertising identifier (IDFA).

It also receives your onboarding answers, including your first name, age, gender, sleep schedule, goals, habits and how you heard about Somnr; whether Apple Health is connected and where your nights come from; your sleep score, rank, sleep debt and energy age, and their changes; a summary of each tracked night (durations, stages, awakenings, restlessness, minutes of snoring, alarm details); events about your sleep cards, sleep experiments, coach reads and doctor report; Sunlight alarm light readings; the number of apps and categories you chose in Screen Down (never their names); and any text you type in the feedback or account-deletion forms. The scores and night summaries can be computed from Apple Health. Amplitude may estimate your country and city from your IP address.

Experiments and remote switches (Statsig)

We use Statsig to assign app versions in experiments and to switch features on or off remotely. It receives your account identifier, a random identifier stored in the app, the experiments you are in and purchase events, along with basic device and app information sent by its SDK. It does not receive your sleep data.

Paywall (Superwall)

Our subscription screens are provided by Superwall. It receives your account identifier, basic device information with your device identifier for vendors (IDFV), your views and purchases on those screens, and the details used to personalize them: your first name, age and goals, and values computed from your nights: your sleep score and rank, your sleep debt, the points you could gain and your energy age. These values can be computed from Apple Health data.

Purchases (Apple and RevenueCat)

Payments are made through Apple and handled by Apple; we never see your card or billing details. RevenueCat manages subscription status for us. It receives your account identifier, your purchase history from Apple, your device identifier for vendors (IDFV), your advertising identifier (IDFA) if you allow tracking, and the ad attribution details that Singular provides.

Advertising attribution (Singular)

We use Singular to measure which ad campaigns bring people to Somnr. It receives your account identifier, device identifiers (IDFV, and IDFA only if you allow tracking in the iOS prompt), install and app-open information, and trial and subscription events with their amount. When a trial becomes a paid subscription, our server also sends that event to Singular with Singular’s device identifier. Singular reads your advertising identifier only after you answer the iOS tracking prompt, which appears during onboarding, and only if you allow tracking. It does not receive your sleep data or your onboarding answers. Singular can tell the ad platforms where we run campaigns (for example TikTok) that an install, a trial or a subscription came from one of their ads. You can refuse tracking in the iOS prompt, or later in Settings › Privacy & Security › Tracking.

Hosting

Our server runs on Render. Our database, file storage (dream pictures) and anonymous accounts run on Supabase.

• Supabase and Render: hosting of our server, database, storage and anonymous accounts.
• Anthropic: AI coach summaries and messages, selfie for the character read, dream text.
• OpenAI: selfie for Ten-Year Face, dream scene descriptions and generated pictures, audio and text of shared public videos.
• RapidAPI (Instagram downloader): the Instagram link you share.
• Amplitude: analytics, as described above.
• Statsig: experiments and remote switches.
• Superwall: subscription screens.
• RevenueCat: subscription status.
• Singular: advertising attribution.
• Apple: payments, push notifications, Apple Health, Screen Time and on-device speech recognition.

We do not sell your data. We share it only with these providers, to run the features described here, or when the law requires it.

• Audio recordings and raw motion data.
• Images from the camera, except a selfie you choose to send.
• Your location. The app estimates sunrise from your time zone.
• Your contacts, your calendar or your photo library. Somnr only saves an image to Photos when you choose “Save” in the share sheet.
• The names of the apps you block with Screen Down, or your app usage.

The app contains no error-reporting tool and no advertising. If you choose to share analytics with app developers in iOS settings, Apple may share diagnostic reports with us.

Data on our server is kept until you delete it or delete your account. There is no automatic expiry. The exceptions: selfies are never stored; coach chat messages are never stored; downloaded videos are deleted after processing; for friends, only your latest status is kept. Our server logs contain account identifiers but not the content of your coach messages, dreams or photos; Render keeps them for 7 to 30 days, depending on our plan. Anthropic and OpenAI keep what we send them as described in “What the AI providers keep”.

Data on your iPhone stays until you delete it in the app or delete the app.

In the app, open Profile › Delete account. This erases your account and its data from our server (coach reads and weekly reviews, dreams and their pictures, friends, status, Live Sleep, push tokens, shared video results, and the anonymous account itself), then erases Somnr’s data from your iPhone. It cannot be undone.

Some versions of the app show Settings › Delete my data instead. It erases the data on your iPhone and, on our server, your coach reads, dreams, friends, status, Live Sleep and push tokens. It does not remove the anonymous account itself or the results of shared video links: write to us to have them removed.

Deleting the app from your iPhone erases the data on your iPhone but not the data on our server. Deleting your account does not cancel your subscription: cancel it in your Apple Account settings.

Deleting your account does not erase what our analytics, paywall, purchase and attribution providers hold under your identifier, or the sleep summaries you shared for research. To have those erased, write to us at contact@sumpuff.com: we will delete the research rows and ask each provider to delete the rest.

Under the GDPR and similar laws, you can ask to access, correct, delete or receive a copy of your data, object to its use, or withdraw a consent you gave. Because your account is anonymous, we may need your help to find it. You can also complain to your data protection authority; in France, the CNIL (cnil.fr).

Under the GDPR (article 6, and article 9 for health data), we rely on these legal bases:

• Contract (art. 6(1)(b)): providing the service you asked for: your account, storing your data on our server, alarms, friends and Live Sleep, push notifications, shared video links, subscriptions and purchases.
• Explicit consent (art. 6(1)(a) and art. 9(2)(a)): health-related data and the microphone and camera features. You give it when you allow Apple Health, the microphone, motion or the camera in the iOS prompts, and when you turn on the AI coach, take a selfie, use Ten-Year Face, illustrate a dream or share sleep summaries for research. You can withdraw it at any time in the app or in iOS Settings; this does not affect what was done before.
• Consent to tracking (art. 6(1)(a)): reading your advertising identifier (IDFA) for ad attribution (Singular, RevenueCat), only if you allow tracking in the iOS prompt. You can change your answer in Settings › Privacy & Security › Tracking.
• Legitimate interest (art. 6(1)(f)): keeping the service secure and preventing fraud and abuse (server logs, usage limits, checks on AI requests), and understanding and improving the app (analytics and experiments).

Our providers can process your data outside the European Union, mainly in the United States: Anthropic, OpenAI, Amplitude, Statsig, Superwall, RevenueCat and Singular are based there, and our hosts Render and Supabase can process data there too. Amplitude, Singular and Render are certified under the EU-U.S. Data Privacy Framework. For the other providers, transfers rely on the European Commission’s Standard Contractual Clauses, which are part of their data processing agreements. You can ask us for details of these safeguards.

Somnr is meant for people aged 16 and over. The age you can enter in onboarding starts at 16; the app does not verify it. If you think a child under 16 has used Somnr, write to us and we will delete the account.

Connections between the app and our server use HTTPS. The tables on our server cannot be read directly from the app. On your iPhone, the session key is stored in the iOS Keychain and the app’s files are protected by iOS Data Protection.

When the app changes what it collects, we update this page and the date at the top.

Questions about this policy or your data? Write to us at contact@sumpuff.com.