Legal
SleepMethod Privacy Policy
Effective date: 3 September 2026
Last updated: 9 September 2026
SleepMethod is a behavioural sleep wellness app intended for users aged 16 and older. It helps you create a personal sleep plan, follow habits, use settling exercises, complete check-ins and review progress. This Privacy Policy explains what personal information SleepMethod processes, why it is used, where it is stored and the choices available to you.
1. Who is responsible
For the purposes of this Privacy Policy, the SleepMethod service is provided by Casimir Simeon Houweling in the Netherlands, who is responsible for the processing of personal data described in this policy.
2. Scope
This Policy applies to:
- the SleepMethod iOS app;
- SleepMethod.app;
- account, cloud-backup and subscription features;
- customer support and privacy communications; and
- optional TestFlight or other pre-release versions that link to this Policy.
Apple and other service providers may also process information under their own privacy notices when they act independently, for example when Apple processes App Store payments.
3. How SleepMethod stores information
SleepMethod is local-first. Your current SleepMethod data is saved on your device. When you sign in with Apple, selected account-linked data is also backed up to Supabase so that it can be restored on another device.
Local data is not end-to-end encrypted by SleepMethod. It is subject to the security controls of your device and operating system. Cloud communications use encrypted network connections. Access to the Supabase backup is restricted to the authenticated account through database access rules.
4. Data processing overview
| Data category | Example information | Purpose | Legal basis | Storage or recipient | Retention approach |
|---|---|---|---|---|---|
| Local app data | Onboarding answers, sleep and wake preferences, Wake Anchor, plan settings, habits, check-ins, Wind Down sessions and progress | Create and operate your personal sleep plan | Contract, Article 6(1)(b). If information is legally classified as health data, an Article 9 condition is also required | Your device | Until you delete the data, delete your account, sign out from that device or remove the app and its local storage |
| Account and authentication | Apple user identifier, Apple-provided email or private relay address, name when supplied, authentication and session information | Sign in, identify your account and protect access | Contract, Article 6(1)(b), and legitimate interests for security, Article 6(1)(f) | Apple and Supabase | While the account exists, then deleted subject to limited provider backups and legal requirements |
| Cloud backup | Account-linked plan data, completions, check-ins, Wind Down records, reminder preferences, revision, device identifier and sync timestamps | Back up, synchronise and restore your data | Contract, Article 6(1)(b). If information is legally classified as health data, an Article 9 condition is also required | Supabase, primary project region Frankfurt, Germany | While the account exists or until you use Delete Account and Data, subject to limited provider backups and legal requirements |
| Personalisation | Rule-based statuses, focus areas and recommendations derived from your answers and activity | Provide the personal plan and adapt it over time | Contract, Article 6(1)(b). If inputs are legally classified as health data, an Article 9 condition is also required | Your device and, when signed in, Supabase backup | Follows the underlying local and cloud data |
| Subscription information | App-specific customer identifier, product, entitlement, trial eligibility, renewal and expiry status, and Apple transaction information | Offer Premium, confirm access, restore purchases and handle subscription support | Contract, Article 6(1)(b), legal obligations, Article 6(1)(c), and legitimate interests for purchase support, Article 6(1)(f) | Apple and RevenueCat | For the subscription lifecycle and afterwards where needed for accounting, disputes, fraud prevention or legal obligations |
| Reminder information | Selected reminder, time, weekdays, preview-privacy choice and paused status | Schedule reminders chosen by you | Contract, Article 6(1)(b), together with your optional iOS notification permission | Your device; configuration may be included in Supabase backup | Until disabled, changed, signed out or deleted |
| Support communications | Email address and message content | Respond to questions and privacy requests | Contract or steps at your request, Article 6(1)(b), and legitimate interests, Article 6(1)(f) | Relevant email providers | Until the request and reasonable follow-up are complete, unless longer retention is needed for legal claims or obligations |
| Website technical data | IP address, browser or device information, requested page, timestamps and security logs | Deliver, protect and troubleshoot SleepMethod.app | Legitimate interests, Article 6(1)(f) | Vercel | According to applicable hosting settings and only as long as needed for delivery, security and troubleshooting |
SleepMethod does not ask for medical records and does not measure physiological signals. Some answers about sleep or wellbeing may nevertheless be sensitive and could be legally treated as data concerning health, depending on their content and how applicable law classifies them. SleepMethod processes this information only to provide the features you request, maintain your account and cloud backup, support subscriptions and meet applicable legal obligations. It is not used for advertising or behavioural tracking.
5. Account and Sign in with Apple
SleepMethod uses Sign in with Apple. Apple may provide:
- a stable Apple user identifier;
- your email address or an Apple private relay address;
- your name, only when Apple supplies it; and
- authentication tokens and related session information.
Apple controls the information it presents and may apply its own privacy terms. SleepMethod uses this information to create and authenticate your account and connect it to your cloud backup and Premium entitlement.
6. Sleep plan, habits and progress
Information processed by the app can include:
- onboarding answers about routines and sleep-related preferences;
- preferred sleep and wake times;
- Wake Anchor and timing window;
- selected habits and plan configuration;
- daily habit completion and daily check-ins;
- Wind Down steps and completed sessions;
- weekly focus choices and plan updates;
- progress-related information; and
- backup and synchronisation metadata.
SleepMethod uses this information to provide the features you request. It does not use it to diagnose, prevent, cure or treat a condition.
7. Rule-based personalisation
SleepMethod uses predefined, rule-based logic to compare your answers and activity and select qualitative statuses, focus areas and recommendations.
This processing does not make decisions that produce legal or similarly significant effects. It is not automated decision-making within Article 22 GDPR. The outputs are wellness estimates, not medical findings or physiological measurements.
8. Subscriptions and purchases
Premium subscriptions are purchased through the Apple App Store. RevenueCat helps SleepMethod retrieve products, determine introductory-offer eligibility, manage entitlements and restore purchases.
SleepMethod may receive subscription and transaction-status information made available by Apple and RevenueCat. SleepMethod does not receive your full payment-card details from Apple.
Apple determines whether you qualify for a trial or introductory offer. A seven-day trial applies only when it is shown at checkout and Apple confirms eligibility.
9. Reminders and notifications
Reminders are optional. You select whether to enable them, what they relate to, their timing and their days. iOS controls notification permission.
The app schedules reminder delivery locally on your device. SleepMethod does not currently send marketing push notifications. Reminder configuration may be included in your Supabase backup, but scheduled delivery remains device-level.
You can disable reminders in SleepMethod or through iOS settings. SleepMethod offers a private-preview setting so notification text can be less descriptive. Still awake? is an optional in-app tip and never creates a scheduled notification.
10. AI-assisted content
Some prerecorded scripts, voices, soundscapes or other static content may have been created with assistance from artificial intelligence.
This content is general wellness content. It is not a live conversation with an AI therapist, human therapist or healthcare professional and is not individual medical advice.
SleepMethod does not send your personal sleep information to an AI provider. AI-assisted content is prepared before publication and is not generated from your account, sleep-plan answers or progress.
11. Service providers and sharing
SleepMethod uses the following providers:
| Provider | Purpose | General information involved |
|---|---|---|
| Apple | Sign in with Apple, App Store distribution, payment processing and subscription management | Apple identifier, email or relay email, name when provided, authentication data and store transaction information |
| Supabase | Authentication, database, cloud backup, restoration and account deletion | Account information, authentication data, account-linked SleepMethod data and sync metadata |
| RevenueCat | Subscription products, trial eligibility, entitlements and Restore Purchases | App-specific customer identifier, technical information and subscription or transaction status |
| Vercel | Hosting SleepMethod.app | Website request, device and security-log information |
| Email providers | Deliver support and privacy communications | Email address, message content and delivery metadata |
SleepMethod may also disclose information where required by law, to establish or defend legal claims, or to professional advisers subject to confidentiality.
SleepMethod does not sell personal information, share it with data brokers or use it for targeted advertising. The app does not include advertising, customer analytics or crash-reporting SDKs.
12. International processing
SleepMethod’s Supabase project uses Frankfurt, Germany as its primary database region. Providers such as Apple, Supabase, RevenueCat, Vercel and email providers may process information in the United States or other countries outside the European Economic Area.
Where GDPR requires a transfer mechanism, processing is subject to the provider’s applicable contractual safeguards, such as an adequacy decision or the European Commission’s Standard Contractual Clauses. You may contact support@sleepmethod.app for more information about relevant safeguards.
13. Retention and deletion
SleepMethod keeps active account data while your account exists and for as long as needed to provide the services you request. You can delete your account and active cloud data from within the app. Limited residual copies may remain temporarily in protected provider backups. Subscription and transaction records may be retained where reasonably necessary for accounting, fraud prevention, disputes or legal obligations. Support communications are kept only as long as reasonably necessary to handle the request and related obligations. Website logs are kept according to the hosting configuration and only as long as reasonably needed for delivery, security and troubleshooting.
In Settings, Delete Account and Data requires fresh Apple authentication. After successful confirmation, the implemented flow:
- revokes the relevant Apple authorisation;
- deletes associated SleepMethod cloud records from the production database;
- deletes the Supabase authentication account;
- clears local SleepMethod product data and sync metadata; and
- removes scheduled and presented SleepMethod notifications.
Deletion is permanent. Limited residual copies may remain temporarily in provider backups or where retention is required by law. SleepMethod does not promise instantaneous removal from every provider backup.
Deleting your SleepMethod account or deleting the app does not cancel an Apple subscription. Subscription cancellation must be completed separately through Apple.
14. Sign out
Signing out preserves your cloud backup and account. It removes local SleepMethod product data and scheduled or presented SleepMethod notifications from that device.
Signing out does not cancel your Apple subscription.
15. Security
SleepMethod uses measures designed to protect personal information, including encrypted transport, Apple authentication, authenticated Supabase sessions and row-level access controls for cloud backups. Account deletion requires fresh Apple authentication.
The app is local-first, but local app storage is not claimed to be independently encrypted or end-to-end encrypted by SleepMethod. No online or device-based service can guarantee absolute security.
16. Your choices
You can:
- decide whether to sign in and enable cloud backup;
- use an Apple private relay email address when Apple offers that choice;
- choose, change, pause or disable reminders;
- change iOS notification permission through device settings;
- use private reminder previews;
- sign out while preserving the cloud backup;
- use Delete Account and Data in Settings; and
- contact support@sleepmethod.app to exercise privacy rights.
Revoking Sign in with Apple access in your Apple settings does not itself delete the SleepMethod account or cloud backup. Use Delete Account and Data or contact support for deletion.
17. Your GDPR rights
Subject to applicable conditions and exceptions, you may:
- access personal data held about you;
- correct inaccurate or incomplete information;
- request deletion;
- restrict certain processing;
- object to processing based on legitimate interests;
- receive certain information in a portable format;
- withdraw consent where processing relies on consent; and
- complain to a supervisory authority.
Send requests to support@sleepmethod.app. We may ask only for information reasonably necessary to verify your identity. We generally respond within one month, subject to extensions allowed by law.
In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens. More information is available at https://autoriteitpersoonsgegevens.nl.
18. Children
SleepMethod is intended for users aged 16 and older. It is not directed to children under 16, and SleepMethod does not knowingly offer accounts to or process personal information from anyone under 16.
If you are under the age of legal majority where you live, you should review this Privacy Policy with your parent or legal guardian.
If we learn that personal information from a child under 16 has been processed contrary to this restriction, we will investigate and delete it where appropriate. A parent or legal guardian who believes that a child under 16 has provided personal information may contact support@sleepmethod.app.
19. Website cookies and tracking
SleepMethod.app does not use customer analytics, advertising pixels or behavioural tracking. The website does not set non-essential cookies or use browser storage for tracking. No cookie-consent banner is therefore currently presented.
20. Changes to this Policy
We may update this Policy when the app, providers, law or data practices change. Material changes will be communicated through the app, website, email or another appropriate method where required.
A change to this Policy does not replace consent where new consent is legally required.
21. Contact
Brand: SleepMethod
Country of establishment: Netherlands
For privacy questions or requests, contact support@sleepmethod.app.
Support: https://sleepmethod.app/support
Terms of Service: https://sleepmethod.app/terms