Privacy Policy

Rested Well has no accounts and no server. Your sleep data — every night, every recording, every score — is stored on your iPhone and is never uploaded to us, because there is nowhere to upload it to.

The short version

• There is no sign-up and no account. We do not know who you are.
• Your sleep history lives in a database on your phone.
• Audio recorded overnight stays on your phone and is deleted automatically after seven nights.
• There is no advertising and no cross-app tracking, and nothing measured while you sleep is ever reported.
• Some things about how the app is used are measured, and none of them carries sleep data or your name: which screens are opened and which setup page people stop on, which permissions were allowed, whether a night was tracked successfully (not what was in it), the app being opened or updated, error reports when something breaks, and subscription events such as a trial starting, converting, renewing or being cancelled. The answers you give to the first setup questions (what you would like to fix, your goal, your bedtime, where the phone will sit) are shown to you by Superwall and may be recorded by it. All of this is tied to random identifiers, not to you. You can switch app usage off in Settings → Your data.
• We do not sell, rent or share your sleep data, because we never receive it.

What Rested Well records, and where it goes

Notifications

Rested Well can send you a wind-down reminder, a nudge if you stop tracking for a few nights, and — if you turn it on — a monthly recap a few days before your subscription renews, summarising your last four weeks. All of these are scheduled locally by your phone, built from the sleep history already on your device, and never mention billing or your subscription price. Rested Well does not use push notifications, does not register a push token, and has no way to send you anything remotely — turning any of these off simply cancels the local notification. If you allow app usage to be shared, the app records that a monthly recap was scheduled and whether you tapped it — not its date and not what it said.

Sharing a card

Rested Well can turn a milestone (nights tracked) or your monthly recap into an image you can share. That image is created entirely on your phone and handed to iOS's own share sheet — it is not uploaded to us or to any server first. Where it goes after that is whatever you choose in the share sheet: a message, another app, or nowhere at all if you cancel.

The only things that leave your phone

Four services. Your nights and recordings never leave your phone, and none of these services receives anything measured while you sleep.

Purchases — RevenueCat and Apple

If you subscribe, the purchase is handled by Apple. We use RevenueCat to check whether a subscription is active. RevenueCat receives a randomly generated anonymous identifier and your App Store receipt. It does not receive your name, your email address, or any sleep data, because Rested Well does not have them. Their privacy policy is at revenuecat.com/privacy.

If you installed Rested Well from an advert in the App Store, Apple gives the app a token that says which advert it was, and RevenueCat records it so we can tell which adverts lead to subscriptions. This is Apple's own attribution system: it needs no tracking permission, it contains no identifier for you, and it is not shared with any advertising network.

Subscription events are passed on to PostHog. RevenueCat sends our PostHog analytics project a record when a subscription or free trial starts, converts, renews, is cancelled or un-cancelled, expires, changes plan or has a billing problem. Each record includes the product, its price and currency (converted to US dollars), the store, the relevant dates, the store's transaction identifiers and RevenueCat's anonymous identifier. So that these land next to the app-usage events described below, the app gives RevenueCat the same random identifier PostHog uses on your phone. Neither company receives your name, email address or sleep data. If you switch off Share anonymous usage data, the app removes that identifier from RevenueCat; RevenueCat can still send subscription events to PostHog, but only under its own anonymous identifier, no longer joined to your app-usage events.

Setup questions and the subscription screen — Superwall

The first pages of setup — the questions about what you would like to fix, your sleep goal, your usual bedtime and where the phone will sit — and the screen that offers you a subscription or free trial are built and managed with Superwall. That lets us change their wording and layout, and test which version works best, without shipping a new version of the app.

Because those pages run inside Superwall, Superwall's software records how they are used: which pages, and which version of them, you saw; which buttons you tapped; whether the subscription screen was closed; and whether you subscribed or started a trial. With that it receives a randomly generated anonymous identifier, your device's vendor identifier (an Apple identifier that is the same only across one developer's apps on your phone), whether you currently have an active subscription, and ordinary technical details about your device, such as its model, iOS version, language, region, time zone and the app's version.

Your answers to the setup questions. The answers you pick on those pages are passed back to the app, which keeps them on your phone and uses them to set your goal, your bedtime and the tips you see. Because the questions are shown by Superwall, Superwall may also record your answers — for example against its anonymous identifier, so that results can be compared by answer. Some answers describe your sleep habits as you report them (for example that you snore, or the bedtime you chose), so we treat them as shared with Superwall.

It receives nothing measured while you sleep. Apart from whether you have an active subscription, the app itself passes Superwall nothing about you: no night, no hypnogram, no score, no times, no sound levels, no recordings and nothing from Apple Health. We never ask Superwall to identify you, so it has no name, email or account to attach any of this to. Superwall processes this data for us, as our processor, under its data processing agreement. Their privacy policy is at superwall.com/privacy.

How the app is used — PostHog

To see where people get stuck, and what breaks, the app sends usage events to PostHog, an analytics service. The events are fixed in advance, and fall into these groups:

• Screens and actions. Which screen was opened (Tonight, the tracking screen, a night's detail, Trends, Sounds, your progress, a recap, Settings, the subscription screen, the cancel screen, setup and a few others); which page of setup was reached, finished or skipped; a tracking session starting or stopping; a sleep sound or built-in mix being played (never a name you typed); the export being used; an import of a backup file being used and whether it finished, was cancelled or failed (never what was in it); a milestone or recap card being shared.
• Permissions. That the app asked for the microphone, notifications or Apple Health, whether it asked during setup, in Settings or the first time a night was started, and what iOS answered (allowed, not allowed, or unknown — Apple does not tell apps whether reading from Apple Health was allowed). Also a single yes-or-no: whether you have switched on I use an Apple Watch in Settings — your own setting, not anything read from Apple Health.
• Whether a night worked. When a night tracked by the phone ends: whether it produced a usable night, whether Apple Watch import was switched on in your settings at the time, and if it failed, a category of reason (too short, the sensors heard nothing, it could not be saved, it could not start). Never how long it was, when you fell asleep or woke, its stages, its score or any heart rate. Nights that come from Apple Health are not reported at all.
• The subscription screen and purchases. The subscription screen being shown, closed or skipped and which version it was; the welcome screen before it being shown, whether the subscription screen finished loading or not (with a category of reason, and how long it took as a rough range such as “1–2 seconds”), and taps on Get started, Try again and Restore Purchases; which numbered page of the Superwall setup screens was viewed (never the page's text or your answers on it); a purchase being started, completed, cancelled, failing or restored, which plan it was (weekly, monthly or yearly) and which screen offered it; whether a completed purchase began a free trial, which is also recorded as its own “trial started” event with the plan; and, when a purchase fails or is cancelled, a category of reason from a fixed list (for example: you cancelled, the payment sheet could not open, no connection, purchases are turned off on the phone, the plan is already owned, waiting for approval) — never the store's own error message. Also the cancel screen and what you chose there. Subscription events from RevenueCat also arrive here — see above.
• App opens. Recorded automatically by PostHog's app library: the app being installed, updated (with the version it was updated from), opened, brought back to the screen and sent to the background, each with the app's version and build number. If the app was opened from a link, the link itself is removed before the event is sent.
• Monthly recap notifications. That a recap notification was scheduled, and that one was tapped.
• Errors. When something goes wrong — the app crashes on an error, a night cannot be saved, reading from or writing to Apple Health fails, or a subscription check fails — an error report: the kind of error, where in the app's code it happened, a short part of the error message with every number, quoted value, file path and email address removed, and which part of the app it came from. For errors involving Apple Health, no message text is sent at all — only the kind of error, where in the code, and that it was Apple Health.

Each event is sent with a randomly generated identifier that PostHog creates and stores on your phone, the app version, and ordinary technical details about your device such as its model and iOS version.

It receives nothing about your sleep. Not a score, not a duration, not a bedtime, not a stage, not a heart rate, not a chart, not a sound level, not a recording — the app checks every event against a fixed list before sending it, and anything measured while you slept is not on the list. We never ask PostHog to identify you, we do not use its session-recording feature, and its location lookup is switched off. Their privacy policy is at posthog.com/privacy.

You can turn this off. Settings → Your data → Share anonymous usage data. When it is off, the app sends nothing to PostHog — the connection is not even set up, so none of the events above, app opens and error reports included, is sent — and it removes the PostHog identifier from RevenueCat. The switch cannot stop the subscription events RevenueCat sends to PostHog from its own servers (described above); with it off, those arrive only under RevenueCat's own anonymous identifier, no longer joined to anything from your phone. It does not affect purchases, the setup and subscription screens (Superwall) or update checks.

App updates — Expo

Rested Well checks for app updates using Expo's update service. That check sends basic technical information about the app version and device type so the right update can be returned. It carries no personal or sleep data. Their privacy policy is at expo.dev/privacy.

How long things are kept

If you are in the EU or the UK

The data controller is the developer of Rested Well, reachable at [email protected].

Your nights and recordings never leave your phone, so most of what Rested Well handles is never shared at all. What does leave it is random identifiers, your device's vendor identifier, your App Store receipt, ordinary technical details about your device, your answers to the setup questions and a record of the setup and subscription screens, app-usage events and error reports, and subscription events. Under UK and EU law that still counts as personal data even though it does not carry your name — so here is the rest of it plainly.

Why we are allowed to process it

• Purchases and restoring them — performance of the contract you enter when you subscribe.
• App updates — our legitimate interest in delivering fixes to a working app.
• The setup questions and the subscription screen — our legitimate interest in knowing whether setup and the screen that pays for the app actually explain it. You can object to this; see below.
• Anonymous app usage and error reports — our legitimate interest in seeing where people get stuck and fixing what breaks. You can switch it off in Settings → Your data, and nothing further is sent.
• Subscription events in PostHog — our legitimate interest in understanding which parts of the app lead people to subscribe, stay or cancel.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to complain to your data protection authority — in the UK, the Information Commissioner's Office.

Where it goes

Apple, RevenueCat, Superwall, Expo and PostHog are United States companies, so the limited data described above is processed in the United States.

What Rested Well does not do

• No analytics on anything measured while you sleep, and nothing from Apple Health. App usage — which screens are opened, which permissions were allowed, whether a night worked, app opens and error reports — is measured under a random identifier and can be switched off; it never includes anything measured while you slept. Your setup answers are covered under Superwall above.
• No advertising, no advertising identifiers, no third-party ad networks.
• No cross-app or cross-site tracking.
• No selling or sharing of personal information.
• No collection of your name, email address, phone number or contacts.
• No location tracking.

Your data is yours

• Export it. Settings → Your data → Export my sleep history writes every night to a file you keep. It is readable without Rested Well and explains its own format. If your subscription has ended, the same export is on the subscription screen.
• Delete a night. Any individual night can be deleted from its own screen.
• Delete everything. Deleting the app removes the database and every recording from your phone. Your sleep history is held nowhere else, so there is no other copy to request the deletion of.

Because nothing we receive carries your name, email or an account, there is nothing we can use to find your records, correct them or erase them on request. Your sleep data is already entirely in your hands.

Children

Rested Well is not directed at children under 13 and we do not knowingly collect information from them.

Changes to this policy

If this policy changes, the date at the top of this page changes with it. Material changes will be noted in the app.

Contact

Questions about this policy: [email protected]